This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer (raw, json) Hash identifier: LMYoDiHDvuoGxgxAS14OyHZ/lcWGpv/oJIWBpnUUBjY= Subject key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35339E1F3F0066EF7EFC547ED73CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.36.36.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:53:39:e1:f3:f0:06:6e:f7:ef:c5:47:ed:73:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:b8:b1:db:fb:a2:00:7f:e2:b5:b6:e4:e9: da:4b:5b:04:4f:69:67:70:1e:25:d6:3e:52:6b:b8: 6e:07:f4:9a:7d:3a:35:e5:75:0c:95:fa:67:09:29: e4:ae:9d:06:66:46:e4:08:82:49:ac:2d:82:40:5f: c6:a1:8b:e8:93:30:d1:38:c3:0e:61:82:2b:45:69: 58:f6:9c:de:a8:3f:02:79:d2:5c:bd:10:78:91:f6: 7d:ed:23:54:14:b0:58:6f:89:0b:55:6a:f5:8d:bf: ef:34:ac:82:75:97:ab:cc:6a:87:2a:aa:4b:18:4b: 7d:e1:01:8e:dd:9e:fc:f5:26:ac:cb:5b:9f:85:2f: 0f:c1:a2:0c:5e:27:dd:2c:23:b5:93:55:34:fb:19: 64:04:fa:38:4f:9f:18:b5:25:e1:22:08:e7:2f:2e: b8:d2:41:bf:e0:88:4a:58:e4:4f:b3:b9:61:25:ff: cb:33:b5:dc:0a:dc:1e:ad:0c:e9:22:c0:9d:7c:4b: a6:16:8e:2b:a2:6c:8c:8b:bb:33:54:c4:2c:c4:76: 00:eb:c6:3b:24:5e:2a:59:9d:0f:b1:ac:76:cd:ce: d5:ca:9e:c9:db:82:66:ce:f3:b8:38:8e:a8:fc:bd: 75:a9:0e:e2:4f:e3:9b:df:fe:2f:36:ad:7b:cd:bc: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.36.0/24 Signature Algorithm: sha256WithRSAEncryption 69:1a:9b:70:bc:56:54:11:27:82:34:ff:02:27:bd:fc:8d:f0: 9a:28:3f:b9:fe:15:96:29:bb:14:ae:15:a7:ee:23:f7:53:c4: 58:1c:ee:1c:c2:ca:72:62:77:b6:48:60:74:88:aa:a2:23:53: 8c:c1:1e:b9:4f:f2:19:4b:6d:3a:8d:bf:1e:3a:ba:c9:9b:ac: e4:e8:2b:77:da:2b:5c:06:0b:a1:72:14:72:ee:d7:c9:71:3f: dd:90:4a:23:71:92:7d:84:09:e4:3e:46:52:ef:49:6c:29:ba: dc:2e:f8:66:5b:4e:46:11:3f:0a:f6:21:a8:5d:6e:48:fe:3e: ab:1b:67:21:85:ba:bd:bb:c7:e4:c9:8c:14:b5:9c:d7:2e:d0: 06:1b:e1:6c:2d:23:68:bf:a4:8d:9e:a4:2b:b0:07:09:1d:d2: 3f:3f:cb:c0:45:5d:7c:ac:26:e1:41:de:fb:28:0d:a0:b0:ae: 44:ee:00:2e:6a:13:2a:98:a1:1e:67:8a:85:48:3d:d5:7f:f6: c5:4c:84:54:33:cb:7b:91:91:18:27:33:59:57:d0:3d:cf:3b: b9:d8:fb:68:e7:56:c5:0c:22:1d:88:ee:a7:77:33:1d:d5:41: 69:a6:fc:d1:8a:4a:b8:83:38:17:f5:65:9a:27:ff:5b:f8:39: ec:e3:82:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o1M54fPwBm7378VH7XPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmE4MzIyNDRkMGUyM2Y1ZjI4YjNhNmRlZjdhZmMwMWIyMjUyMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oa4sdv7ogB/4rW25OnaS1sET2ln cB4l1j5Sa7huB/SafTo15XUMlfpnCSnkrp0GZkbkCIJJrC2CQF/GoYvokzDROMMO YYIrRWlY9pzeqD8CedJcvRB4kfZ97SNUFLBYb4kLVWr1jb/vNKyCdZerzGqHKqpL GEt94QGO3Z789Sasy1ufhS8PwaIMXifdLCO1k1U0+xlkBPo4T58YtSXhIgjnLy64 0kG/4IhKWORPs7lhJf/LM7XcCtwerQzpIsCdfEumFo4romyMi7szVMQsxHYA68Y7 JF4qWZ0Psax2zc7Vyp7J24JmzvO4OI6o/L11qQ7iT+Ob3/4vNq17zbyltQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGaoMiRNDiP18os6be96/AGyJSHHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2YyZWYw Ni0yZGQyLTRhMjEtOWNlOS1kZWZmZmE1ZjA2ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZjJlZjA2 LTJkZDItNGEyMS05Y2U5LWRlZmZmYTVmMDZlMS8xL1pxZ3lKRTBPSV9YeWl6cHQ3 M3I4QWJJbEljYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSQkMA0GCSqGSIb3DQEBCwUAA4IBAQBpGptw vFZUESeCNP8CJ738jfCaKD+5/hWWKbsUrhWn7iP3U8RYHO4cwspyYne2SGB0iKqi I1OMwR65T/IZS206jb8eOrrJm6zk6Ct32itcBguhchRy7tfJcT/dkEojcZJ9hAnk PkZS70lsKbrcLvhmW05GET8K9iGoXW5I/j6rG2chhbq9u8fkyYwUtZzXLtAGG+Fs LSNov6SNnqQrsAcJHdI/P8vARV18rCbhQd77KA2gsK5E7gAuahMqmKEeZ4qFSD3V f/bFTIRUM8t7kZEYJzNZV9A9zzu52Pto51bFDCIdiO6ndzMd1UFppvzRikq4gzgX 9WWaJ/9b+Dns44Jp -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:01 2026 by rpki-client