This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer File: ZvggbjMR3zlPSDibgSK5SqHwsFw.cer (raw, json) Hash identifier: 2OV6jBJohTPGp7r2eC1RRHMMKGbgABbO7TFXPCDYVXI= Subject key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EABD03B3A4E5009B543A3674654C54 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216279 IP: 45.83.200.0/22 IP: 185.114.156.0/22 IP: 185.229.32.0/22 IP: 2a03:3a60::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bd:03:b3:a4:e5:00:9b:54:3a:36:74:65:4c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:8a:e9:a5:6d:10:13:45:30:b7:57:46:57: d2:21:7c:8c:35:a7:8d:00:97:92:a2:e7:81:33:cc: 19:46:8c:e4:a5:aa:4c:7a:a5:b8:19:1b:37:fb:b9: 70:e1:61:b8:68:f6:5d:f4:4c:7c:6f:9f:9a:32:fc: 8d:64:11:cd:29:94:40:53:b3:91:25:00:21:e4:24: 8d:e8:36:ef:c6:9c:bf:99:c7:c0:df:88:fb:48:8b: 85:54:27:e0:88:ca:94:de:24:61:85:75:40:7f:a6: 38:bb:d4:c4:bf:29:a5:74:ee:7f:1b:87:95:bc:fc: b5:0b:0e:9a:ce:80:be:7b:98:77:bf:e1:d7:15:93: a6:15:17:b1:a1:7d:3d:20:e1:c2:e3:55:d9:b8:41: 03:c9:2f:9e:4e:bc:83:34:89:db:cd:d6:19:91:46: 37:9a:0c:e3:fd:53:f6:2f:21:fa:27:50:fa:a6:17: b2:a1:0f:6a:73:1b:64:ef:de:2e:14:c5:55:7c:63: ab:65:ea:89:8c:da:e6:a9:04:06:1f:c6:7f:a4:aa: c9:33:d1:31:5f:79:00:00:75:d2:77:d0:dc:1a:ae: 70:f1:32:3a:76:0c:57:13:2d:30:4b:e1:29:22:d8: c4:11:00:3a:a3:e8:73:3c:84:84:e8:cf:f9:94:c8: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.200.0/22 185.114.156.0/22 185.229.32.0/22 IPv6: 2a03:3a60::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216279 Signature Algorithm: sha256WithRSAEncryption ac:07:52:5f:06:fb:b4:19:d6:90:f1:5a:8a:91:17:a6:93:be: 9a:78:36:89:49:dc:9e:41:9a:9e:6a:50:aa:f9:18:e0:ab:0d: 02:f3:52:3a:85:71:72:91:6d:53:7b:a0:c1:c4:22:34:ee:27: a6:85:30:8a:72:6c:72:94:70:2b:c7:65:56:e8:75:73:fc:71: f1:6e:50:7e:4f:aa:c0:28:ce:3b:5f:a6:09:53:7c:62:0d:3f: 01:30:ad:3a:27:6b:4a:5e:19:15:1e:8a:a6:c5:08:de:bc:e5: 2d:09:66:c5:44:93:5a:67:cc:22:2c:c5:5c:6b:8f:39:0b:9c: 78:f6:69:98:06:82:78:b2:f4:05:f8:5c:29:6c:6e:20:da:1f: 0a:47:40:b4:bf:07:ff:03:46:80:f8:2f:44:ea:69:7b:4a:4b: 3b:53:1c:88:d4:44:0f:d6:2b:b8:8e:13:d0:d8:b1:f8:0a:e7: 3f:9d:e3:00:e0:16:5c:6d:4d:8b:88:69:9d:bb:0f:30:62:18: 26:da:e8:f5:4c:e0:50:34:01:bd:7b:6c:0e:16:78:12:4c:ee: 30:b7:33:de:b3:a9:20:b3:b8:bb:fa:f1:83:ea:24:3b:38:e0: 7c:16:3b:46:78:e9:cd:e7:4c:fd:d7:35:c8:e3:34:a1:af:e4: 93:ca:70:bf -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt26r0Ds6TlAJtUOjZ0ZUxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY4MjA2ZTMzMTFkZjM5NGY0ODM4OWI4MTIyYjk0YWExZjBiMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGSK6aVtEBNFMLdXRlfSIXyMNaeN AJeSoueBM8wZRozkpapMeqW4GRs3+7lw4WG4aPZd9Ex8b5+aMvyNZBHNKZRAU7OR JQAh5CSN6Dbvxpy/mcfA34j7SIuFVCfgiMqU3iRhhXVAf6Y4u9TEvymldO5/G4eV vPy1Cw6azoC+e5h3v+HXFZOmFRexoX09IOHC41XZuEEDyS+eTryDNInbzdYZkUY3 mgzj/VP2LyH6J1D6pheyoQ9qcxtk794uFMVVfGOrZeqJjNrmqQQGH8Z/pKrJM9Ex X3kAAHXSd9DcGq5w8TI6dgxXEy0wS+EpItjEEQA6o+hzPISE6M/5lMjDWQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGb4IG4zEd85T0g4m4EiuUqh8LBcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2JlMWEy NS01ODU1LTRhZWMtOGUxOC1iYmZkNDVjODRiZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYmUxYTI1 LTU4NTUtNGFlYy04ZTE4LWJiZmQ0NWM4NGJlYS8xL1p2Z2diak1SM3psUFNEaWJn U0s1U3FId3NGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVPIAwQCuXKcAwQCueUgMA0EAgACMAcDBQMq AzpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNM1zANBgkqhkiG9w0BAQsFAAOC AQEArAdSXwb7tBnWkPFaipEXppO+mng2iUncnkGanmpQqvkY4KsNAvNSOoVxcpFt U3ugwcQiNO4npoUwinJscpRwK8dlVuh1c/xx8W5Qfk+qwCjOO1+mCVN8Yg0/ATCt OidrSl4ZFR6KpsUI3rzlLQlmxUSTWmfMIizFXGuPOQucePZpmAaCeLL0BfhcKWxu INofCkdAtL8H/wNGgPgvROppe0pLO1MciNRED9YruI4T0Nix+ArnP53jAOAWXG1N i4hpnbsPMGIYJtro9UzgUDQBvXtsDhZ4EkzuMLcz3rOpILO4u/rxg+okOzjgfBY7 RnjpzedM/dc1yOM0oa/kk8pwvw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:53 2026 by rpki-client