This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer (raw, json) Hash identifier: vKyT05z0+WjVBGdvJ2IEwkNbLtas7RAU0mrmMD+hstY= Subject key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BFE00E9AE024D42487C8CB29A15E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8548 AS: 34079 IP: 5.198.136.0/21 IP: 81.87.0.0/16 IP: 83.137.208.0/21 IP: 83.138.32.0/21 IP: 89.207.208.0/21 IP: 185.224.232.0/22 IP: 188.92.136.0/21 IP: 193.60.0.0/14 IP: 194.66.0.0/16 IP: 194.80.0.0/14 IP: 195.194.0.0/15 IP: 212.121.0.0/19 IP: 212.121.192.0/19 IP: 212.219.0.0/16 IP: 2001:630::/32 IP: 2001:67c:128::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fe:00:e9:ae:02:4d:42:48:7c:8c:b2:9a:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6665dd97665a23b1b183e223822b66b5ae536a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ad:ee:34:70:5c:9c:f8:7e:17:1e:32:23:36: 5a:a2:ec:41:0d:8a:ac:f3:e9:59:cb:16:dd:91:fd: 68:c3:45:56:98:71:aa:4a:59:7c:21:f2:17:28:0f: a6:83:69:40:a2:a5:ff:40:af:8b:a0:ed:0f:42:d1: e9:81:81:19:8f:b5:16:ed:7e:cc:53:c8:94:9e:a5: ad:bc:4a:b4:1e:8b:12:5f:9d:d8:21:4f:f8:e1:00: c9:dc:c9:26:84:f1:d7:fd:1b:6c:cb:1d:d0:3d:df: d6:32:35:bc:0f:4d:03:ca:dc:96:9d:f0:3c:92:a8: ab:43:12:ee:c0:86:d6:26:96:32:35:25:62:dc:9c: 58:1c:64:4f:10:c4:74:42:26:f6:a3:2e:03:61:db: 14:23:de:eb:96:fb:21:b3:36:41:7d:62:fa:5c:d2: 6c:0b:71:63:e0:70:62:99:2d:3a:fb:d7:75:4b:d6: 70:a2:57:99:f0:bf:3c:eb:34:0f:3a:b6:9d:b9:f8: b2:47:b7:6c:9f:c0:2d:a9:df:a0:f0:a9:0a:d1:a7: fd:73:23:92:41:e3:4b:cc:6f:2c:7f:d1:7d:2f:01: 50:94:11:e9:77:ae:83:c1:69:24:f9:0c:b7:f1:ae: 9a:d4:26:8f:f8:c1:6e:58:ce:9a:8e:e1:c1:1d:11: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.198.136.0/21 81.87.0.0/16 83.137.208.0/21 83.138.32.0/21 89.207.208.0/21 185.224.232.0/22 188.92.136.0/21 193.60.0.0/14 194.66.0.0/16 194.80.0.0/14 195.194.0.0/15 212.121.0.0/19 212.121.192.0/19 212.219.0.0/16 IPv6: 2001:630::/32 2001:67c:128::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8548 34079 Signature Algorithm: sha256WithRSAEncryption 0f:1b:f5:dc:8f:d1:20:16:aa:37:e9:64:c8:d4:af:2f:b0:6b: 94:39:ea:54:c9:d1:f2:15:9f:84:f9:eb:b3:8b:fc:fa:90:76: e9:d7:03:66:17:bc:2d:d0:92:63:23:61:e5:77:4a:aa:36:aa: 50:a0:69:14:32:29:20:0b:4f:d8:38:fd:34:f4:08:d8:2f:36: ef:77:b7:83:e3:da:cd:0c:a9:2d:5c:79:9a:5c:42:4d:74:ca: d3:b7:7f:bf:9c:46:ab:a5:5c:ae:fa:82:f1:60:49:b2:0e:d1: fb:c7:1f:53:64:af:f7:3d:2c:9a:91:28:56:5e:31:77:83:94: e2:f4:f8:0e:1c:d4:47:f9:8f:59:fe:3e:af:92:8e:52:99:e9: fe:36:a1:c5:bd:0c:d6:72:90:b2:14:19:51:2a:a1:fd:0b:15: f2:dc:52:9a:2b:94:a0:23:eb:32:45:3e:1b:87:bf:eb:35:6b: 0b:9f:67:1d:e2:73:a6:84:2c:42:f4:b7:03:30:84:c6:0c:94: b5:44:0f:c0:78:81:63:c2:7b:df:68:6b:d0:28:bc:97:b3:44: 33:ad:2f:7c:5d:54:7b:44:d0:cd:6f:46:94:c4:d9:e6:08:05: cf:fe:d5:ea:a5:37:93:cf:07:51:46:f6:e5:2e:29:36:4b:2f: e5:71:b2:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt9W/4A6a4CTUJIfIyymhXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjY1ZGQ5NzY2NWEyM2IxYjE4M2UyMjM4MjJiNjZiNWFlNTM2YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q3uNHBcnPh+Fx4yIzZaouxBDYqs 8+lZyxbdkf1ow0VWmHGqSll8IfIXKA+mg2lAoqX/QK+LoO0PQtHpgYEZj7UW7X7M U8iUnqWtvEq0HosSX53YIU/44QDJ3MkmhPHX/Rtsyx3QPd/WMjW8D00DytyWnfA8 kqirQxLuwIbWJpYyNSVi3JxYHGRPEMR0Qib2oy4DYdsUI97rlvshszZBfWL6XNJs C3Fj4HBimS06+9d1S9ZwoleZ8L886zQPOradufiyR7dsn8Atqd+g8KkK0af9cyOS QeNLzG8sf9F9LwFQlBHpd66DwWkk+Qy38a6a1CaP+MFuWM6ajuHBHRHUEwIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzMxMjUy OS03M2Y2LTQ4MDktYWY5Yi1lOGQ3MDcxN2ZmOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMzEyNTI5 LTczZjYtNDgwOS1hZjliLWU4ZDcwNzE3ZmY4YS8xL1ptWGRsMlphSTdHeGctSWpn aXRtdGE1VGFpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBUBAIAATBOAwQDBcaIAwMAUVcDBANTidADBANTiiADBANZz9AD BAK54OgDBAO8XIgDAwLBPAMDAMJCAwMCwlADAwHDwgMEBdR5AAMEBdR5wAMDANTb MBYEAgACMBADBQAgAQYwAwcAIAEGfAEoMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC AiFkAgMAhR8wDQYJKoZIhvcNAQELBQADggEBAA8b9dyP0SAWqjfpZMjUry+wa5Q5 6lTJ0fIVn4T567OL/PqQdunXA2YXvC3QkmMjYeV3Sqo2qlCgaRQyKSALT9g4/TT0 CNgvNu93t4Pj2s0MqS1ceZpcQk10ytO3f7+cRqulXK76gvFgSbIO0fvHH1Nkr/c9 LJqRKFZeMXeDlOL0+A4c1Ef5j1n+Pq+SjlKZ6f42ocW9DNZykLIUGVEqof0LFfLc UporlKAj6zJFPhuHv+s1awufZx3ic6aELEL0twMwhMYMlLVED8B4gWPCe99oa9Ao vJezRDOtL3xdVHtE0M1vRpTE2eYIBc/+1eqlN5PPB1FG9uUuKTZLL+Vxsv8= -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:18 2026 by rpki-client