This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer (raw, json) Hash identifier: nPuky/Mk3Z+nh/tvqMzSCbWBbCFdDeoPERef2hnGh+k= Subject key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB385ECD3F3A149EC838142C94CA89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52016 IP: 2001:67c:29c8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:38:5e:cd:3f:3a:14:9e:c8:38:14:2c:94:ca:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:31:a2:39:44:c0:28:21:1a:29:47:9e:f1: 04:e0:61:b0:76:f4:08:76:c4:37:1c:c2:91:b6:d4: 83:10:02:3c:27:f0:de:2e:ce:44:e0:5b:89:de:f3: 85:d8:39:8d:a2:26:53:2f:f4:fc:63:67:24:80:6e: 39:a1:6e:de:6c:1d:ee:14:3b:68:70:80:72:cc:0f: e9:96:90:48:22:24:a6:c8:b9:f1:89:30:a2:71:2b: 1c:3a:4a:37:aa:21:1a:b9:e8:39:7c:a8:0e:2c:60: 7c:66:e2:c8:06:33:c3:17:af:a7:48:bf:0c:46:1e: 45:00:8d:89:96:67:1a:b1:eb:93:54:9e:14:66:34: 6c:02:da:12:f0:76:34:01:f5:21:dd:87:14:4f:19: f7:60:f8:91:80:c7:fd:d9:c7:93:fe:ad:3f:1a:bb: cf:da:fe:3a:c2:d1:8d:e2:53:19:c6:51:0b:4e:0e: b2:22:46:fa:73:5e:26:23:e8:0c:5f:0d:48:a2:2f: 51:ca:33:2e:cd:16:47:4d:61:54:24:9f:92:28:44: c2:0b:48:9a:09:42:bc:8c:20:c9:9e:1a:fc:b6:52: 58:2e:37:6f:86:4a:80:c3:de:09:9c:ff:0d:30:a3: 0e:df:cb:07:6c:81:b2:15:b7:16:b6:22:a1:ab:13: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:29c8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52016 Signature Algorithm: sha256WithRSAEncryption 20:d7:32:64:88:2c:7e:ba:f5:b4:ac:87:9f:ee:04:a1:f7:60: 45:82:b9:cf:aa:d0:43:75:d3:f6:bf:16:de:ad:ab:0b:3a:c3: e4:cc:1b:99:58:47:72:ca:18:2c:33:de:09:c6:5c:c4:0b:bc: ae:21:4d:20:08:4e:2d:08:59:62:a3:ec:ac:d2:94:e1:a9:41: ca:11:95:22:d3:29:5f:30:b6:68:63:b4:b3:e1:77:17:51:12: a9:08:93:a7:16:ab:d6:94:df:04:a5:b2:90:74:a0:9f:71:53: f2:eb:69:11:df:ce:be:7c:37:ec:b4:81:ce:a0:22:d6:c5:89: 5c:3b:9f:69:2e:5b:ba:82:86:21:77:56:a2:d8:49:2b:2a:c3: 10:23:c8:4d:2c:90:63:e0:88:61:8e:df:a7:8c:ea:33:e1:37: bb:26:4f:b7:8a:8b:30:80:a2:2a:71:6e:57:84:ed:43:9d:fd: 5b:02:df:76:c2:d2:48:f1:e2:ff:75:c6:72:3e:6b:fd:ca:72: 96:f0:55:e1:60:6d:77:b7:9e:85:d6:d5:7a:fb:b4:7b:4a:d3: 37:4e:fa:be:06:f4:89:ab:de:74:49:af:c2:95:73:98:8d:a4: 02:82:22:73:46:7d:d9:cf:b7:37:1a:12:ff:25:df:42:2e:3a: 3a:c4:05:ff -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt26zhezT86FJ7IOBQslMqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmRhYzhhOGYzMTRlZTg3OWE2YWE4NDNiNjdlYTQ3YWIxZTc1ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IYxojlEwCghGilHnvEE4GGwdvQI dsQ3HMKRttSDEAI8J/DeLs5E4FuJ3vOF2DmNoiZTL/T8Y2ckgG45oW7ebB3uFDto cIByzA/plpBIIiSmyLnxiTCicSscOko3qiEaueg5fKgOLGB8ZuLIBjPDF6+nSL8M Rh5FAI2JlmcaseuTVJ4UZjRsAtoS8HY0AfUh3YcUTxn3YPiRgMf92ceT/q0/GrvP 2v46wtGN4lMZxlELTg6yIkb6c14mI+gMXw1Ioi9RyjMuzRZHTWFUJJ+SKETCC0ia CUK8jCDJnhr8tlJYLjdvhkqAw94JnP8NMKMO38sHbIGyFbcWtiKhqxMBWwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGbayKjzFO6HmmqoQ7Z+pHqx513vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0Lzg5OTBj MS0xZDBmLTQ1NDEtODQ2ZS1jOWJkY2U5YzFhNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvODk5MGMx LTFkMGYtNDU0MS04NDZlLWM5YmRjZTljMWE0OS8xL1p0cklxUE1VN29lYWFxaER0 bjZrZXJIblhlOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCnIMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDLMDANBgkqhkiG9w0BAQsFAAOCAQEAINcyZIgsfrr1tKyHn+4EofdgRYK5 z6rQQ3XT9r8W3q2rCzrD5MwbmVhHcsoYLDPeCcZcxAu8riFNIAhOLQhZYqPsrNKU 4alByhGVItMpXzC2aGO0s+F3F1ESqQiTpxar1pTfBKWykHSgn3FT8utpEd/Ovnw3 7LSBzqAi1sWJXDufaS5buoKGIXdWothJKyrDECPITSyQY+CIYY7fp4zqM+E3uyZP t4qLMICiKnFuV4TtQ539WwLfdsLSSPHi/3XGcj5r/cpylvBV4WBtd7eehdbVevu0 e0rTN076vgb0iavedEmvwpVzmI2kAoIic0Z92c+3NxoS/yXfQi46OsQF/w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:43 2026 by rpki-client