This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer File: Zs01lGjIuqmPw8ou8tkFg6aeABY.cer (raw, json) Hash identifier: ZD8+JNff7cSI2Q7NQbe/TG4tKdw1gCZs1AExsq85wJs= Subject key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB4F27227F1A5E54CC5E7DFB9CF1BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.152.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4f:27:22:7f:1a:5e:54:cc:5e:7d:fb:9c:f1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:05:57:49:81:6f:a6:f6:c2:e2:86:43:7d: 43:4a:fc:9f:5d:9c:9f:cd:0c:36:4e:a1:fb:dc:fc: ac:87:59:bc:61:1b:d1:94:b3:ab:dd:6d:40:4f:3f: 36:47:63:a3:9b:f3:e7:de:f6:40:cb:2c:08:5a:1e: 64:e6:25:99:59:c6:b3:1c:d8:81:3a:c4:cd:29:54: 4e:4d:69:20:ba:80:a6:b1:90:6a:47:d9:6b:83:cf: fb:75:49:d2:d9:64:5f:67:16:9f:70:cc:d4:16:3a: dd:2f:72:72:92:78:84:c4:e5:fa:6e:bc:84:3b:1e: 14:c1:97:3d:37:51:b3:09:e5:b6:a1:53:c6:b1:f8: e2:2d:c3:94:a7:86:93:5c:95:b8:16:59:d4:70:72: 06:2d:78:35:22:6a:37:30:5c:1d:45:0c:9d:15:f5: f3:47:ac:4e:2f:d5:74:61:c4:9f:33:66:56:9f:db: 54:ac:b6:ff:ad:d1:3c:67:bb:8d:ae:cf:6d:0c:3d: d8:ce:08:ef:a5:7f:7b:59:ff:92:4a:ae:1d:a8:18: 08:47:81:1f:cb:28:cb:fe:91:58:7d:13:fd:f7:99: fc:eb:ab:85:59:27:f1:f2:87:55:22:2d:22:dc:79: 0b:f1:25:55:11:7a:4e:e0:9b:d0:52:8a:ac:da:e0: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.52.0/22 Signature Algorithm: sha256WithRSAEncryption ae:43:1f:81:02:92:25:4b:8a:50:a0:7a:d9:17:4c:41:d3:f3: fc:95:56:7a:e0:aa:66:5b:da:bf:c4:c4:ce:ca:ef:53:1b:0f: 94:cb:32:27:87:bd:b3:ec:c6:db:05:db:d9:24:57:c9:d0:31: 92:35:31:d2:31:8a:2f:7f:f0:99:bc:a8:28:c7:c3:5a:df:19: d0:a2:6a:a0:c5:e2:f3:36:0a:8d:91:a7:20:bb:a0:13:8a:dc: 70:31:6c:ab:47:17:a9:f2:ab:fa:ef:21:37:e7:4e:9c:5e:65: 94:10:15:4b:64:a0:cc:45:18:bc:6e:af:0a:92:b4:c2:7a:21: 69:0f:cf:55:9c:60:2e:db:85:83:08:b5:8f:af:bc:66:e5:1b: 96:62:9a:f8:94:35:2a:d4:43:87:50:6f:12:fe:99:12:43:2e: 43:7c:64:d1:ea:6e:08:eb:f3:6d:f8:af:74:0f:f7:3d:a1:92: ef:05:8c:c3:ea:aa:1f:06:5a:1a:d0:42:ed:2a:7f:23:6f:4e: 6d:99:64:4d:97:b8:68:bb:8e:76:4d:51:22:ef:45:58:a5:c2: 5c:e1:b7:2c:31:f5:68:73:62:bf:70:3a:2b:67:24:5b:9b:5a: 1e:5e:10:56:d4:01:83:82:71:b2:15:8f:29:d2:ff:3a:1f:f4: 4c:b7:51:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9y08nIn8aXlTMXn37nPG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmNkMzU5NDY4YzhiYWE5OGZjM2NhMmVmMmQ5MDU4M2E2OWUwMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoFV0mBb6b2wuKGQ31DSvyfXZyf zQw2TqH73Pysh1m8YRvRlLOr3W1ATz82R2Ojm/Pn3vZAyywIWh5k5iWZWcazHNiB OsTNKVROTWkguoCmsZBqR9lrg8/7dUnS2WRfZxafcMzUFjrdL3JykniExOX6bryE Ox4UwZc9N1GzCeW2oVPGsfjiLcOUp4aTXJW4FlnUcHIGLXg1Imo3MFwdRQydFfXz R6xOL9V0YcSfM2ZWn9tUrLb/rdE8Z7uNrs9tDD3YzgjvpX97Wf+SSq4dqBgIR4Ef yyjL/pFYfRP995n866uFWSfx8odVIi0i3HkL8SVVEXpO4JvQUoqs2uA+7QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGbNNZRoyLqpj8PKLvLZBYOmngAWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzczNzBj NC1lNGNkLTRkYjMtOWI4Ni1lMzU5YWUwYTY4MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNzM3MGM0 LWU0Y2QtNGRiMy05Yjg2LWUzNTlhZTBhNjgzOC8xL1pzMDFsR2pJdXFtUHc4b3U4 dGtGZzZhZUFCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZg0MA0GCSqGSIb3DQEBCwUAA4IBAQCuQx+B ApIlS4pQoHrZF0xB0/P8lVZ64KpmW9q/xMTOyu9TGw+UyzInh72z7MbbBdvZJFfJ 0DGSNTHSMYovf/CZvKgox8Na3xnQomqgxeLzNgqNkacgu6ATitxwMWyrRxep8qv6 7yE3506cXmWUEBVLZKDMRRi8bq8KkrTCeiFpD89VnGAu24WDCLWPr7xm5RuWYpr4 lDUq1EOHUG8S/pkSQy5DfGTR6m4I6/Nt+K90D/c9oZLvBYzD6qofBloa0ELtKn8j b05tmWRNl7hou452TVEi70VYpcJc4bcsMfVoc2K/cDorZyRbm1oeXhBW1AGDgnGy FY8p0v86H/RMt1GM -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:31 2026 by rpki-client