This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer File: Zu07pox4v_LEckQAreY0hIL7Q2Q.cer (raw, json) Hash identifier: z0p56QRtpe7v4NyyVSFkBamKiILehvwPuF427LDOHXM= Subject key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBBF3DF092A9716EA3C38E6794A1E0BE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 10:01:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213756 AS: 215827 IP: 185.225.24.0/24 IP: 194.110.60.0/24 IP: 2a14:3f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:f3:df:09:2a:97:16:ea:3c:38:e6:79:4a:1e:0b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 10:01:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:6a:7b:2b:ab:0a:1d:cb:ec:ca:f6:83:9a: 06:cc:a1:c6:3c:80:cb:8d:22:4b:7c:14:6d:46:a8: 87:c2:65:8d:b0:46:ae:11:9b:3a:22:fe:a4:b6:9c: 2a:dc:a7:d0:d6:b1:2c:21:05:21:a4:93:dd:f7:1e: ac:ad:5f:89:ee:d1:ff:44:db:de:36:83:8e:80:83: 29:a1:c6:22:af:db:4b:51:9c:fe:63:6e:a2:c5:0f: db:c7:ba:8c:8f:b5:fa:04:b8:dc:a7:4b:67:54:c0: 50:56:d3:17:cc:80:b7:90:a0:06:7e:a7:9a:ed:73: 8e:68:60:6b:e9:6c:80:d7:0b:a9:c8:6a:0b:71:e0: 45:13:0e:ec:3a:08:f6:ea:48:81:5e:22:b3:73:c8: 88:47:35:87:bf:20:d1:6e:7d:34:f2:bd:4c:e4:82: 91:9b:11:8e:ab:80:7f:70:08:fc:44:cb:04:e0:ce: 1d:22:98:f1:e3:51:76:ee:e5:b7:da:20:70:8e:bc: 5f:c8:74:59:20:b4:b6:d3:ef:47:60:66:45:98:23: b4:9e:c9:b2:f9:2f:ec:60:66:98:ce:02:8d:9e:40: 96:cb:ff:24:0a:fa:c7:06:63:62:cb:4e:5c:43:1a: d0:9c:08:45:7e:4a:97:46:61:90:2a:0a:83:4d:e1: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.24.0/24 194.110.60.0/24 IPv6: 2a14:3f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213756 215827 Signature Algorithm: sha256WithRSAEncryption a4:e9:f1:05:0a:eb:35:8a:9f:71:c6:b2:b7:38:b8:36:11:7a: 4b:c9:58:cf:13:e6:7a:54:63:49:72:c7:48:26:13:23:0c:96: b2:50:62:3f:ef:e1:ba:a4:d9:a4:26:c8:25:70:16:5f:0d:13: 37:fe:0b:11:b9:35:b7:c6:fd:e2:5a:54:62:a8:2f:b9:1b:11: 71:63:33:46:17:a3:66:06:1b:a0:7a:40:d2:6e:9a:0c:e9:0f: bc:ba:2d:64:c5:72:fb:70:8d:eb:fe:5a:71:c3:78:27:84:3a: e3:fd:08:0b:02:6e:59:1d:eb:7b:f0:7a:26:d7:36:db:90:8d: 9b:68:d6:48:2b:b8:29:96:51:41:ff:c7:bc:53:da:4c:c5:dc: 71:bb:23:9f:40:2b:ab:38:e1:4e:e5:2e:11:52:83:e0:c6:5e: 21:1d:52:ed:88:3b:33:94:67:cf:32:2e:ff:13:bd:b0:92:c1: 7e:97:75:d3:29:ea:d8:09:8c:af:99:a4:b8:e5:f5:5b:22:3b: a1:49:93:57:65:36:88:a8:9b:12:88:ed:a3:7d:82:17:e5:8c: 70:bb:b4:aa:8d:e2:72:38:7a:88:8a:41:4f:60:b3:dc:ea:dd: 65:58:99:38:67:a1:d2:96:9f:50:dc:6f:84:1c:2e:e5:39:19: e7:76:4c:47 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZu7898JKpcW6jw45nlKHgvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTAwMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVkM2JhNjhjNzhiZmYyYzQ3MjQ0MDBhZGU2MzQ4NDgyZmI0MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e9qeyurCh3L7Mr2g5oGzKHGPIDL jSJLfBRtRqiHwmWNsEauEZs6Iv6ktpwq3KfQ1rEsIQUhpJPd9x6srV+J7tH/RNve NoOOgIMpocYir9tLUZz+Y26ixQ/bx7qMj7X6BLjcp0tnVMBQVtMXzIC3kKAGfqea 7XOOaGBr6WyA1wupyGoLceBFEw7sOgj26kiBXiKzc8iIRzWHvyDRbn008r1M5IKR mxGOq4B/cAj8RMsE4M4dIpjx41F27uW32iBwjrxfyHRZILS20+9HYGZFmCO0nsmy +S/sYGaYzgKNnkCWy/8kCvrHBmNiy05cQxrQnAhFfkqXRmGQKgqDTeFgRwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFGbtO6aMeL/yxHJEAK3mNISC+0NkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2I3OWE2 OC01YjAyLTQwOTctYTJlMy0wYTQzYjdhM2ViNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvYjc5YTY4 LTViMDItNDA5Ny1hMmUzLTBhNDNiN2EzZWI1NC8xL1p1MDdwb3g0dl9MRWNrUUFy ZVkwaElMN1EyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueEYAwQAwm48MA0EAgACMAcDBQMqFD+AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwNC/AIDA0sTMA0GCSqGSIb3DQEBCwUAA4IB AQCk6fEFCus1ip9xxrK3OLg2EXpLyVjPE+Z6VGNJcsdIJhMjDJayUGI/7+G6pNmk JsglcBZfDRM3/gsRuTW3xv3iWlRiqC+5GxFxYzNGF6NmBhugekDSbpoM6Q+8ui1k xXL7cI3r/lpxw3gnhDrj/QgLAm5ZHet78Hom1zbbkI2baNZIK7gpllFB/8e8U9pM xdxxuyOfQCurOOFO5S4RUoPgxl4hHVLtiDszlGfPMi7/E72wksF+l3XTKerYCYyv maS45fVbIjuhSZNXZTaIqJsSiO2jfYIX5Yxwu7SqjeJyOHqIikFPYLPc6t1lWJk4 Z6HSlp9Q3G+EHC7lORnndkxH -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:08 2026 by rpki-client