This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer (raw, json) Hash identifier: cA8wH7cuH22XMSM4roB2wDnimPTgpnPmTodfDqWUZWI= Subject key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B5494ECD400792D30BA361C298AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.245.218.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:49:4e:cd:40:07:92:d3:0b:a3:61:c2:98:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:65:b7:fb:28:51:af:33:22:f1:41:ce:f7:38: 22:fe:63:49:29:37:4b:c8:1a:13:34:5d:eb:57:78: b1:e6:a0:5f:02:33:1d:bf:f1:e2:0e:ae:0f:1c:a1: e8:77:35:00:b5:03:65:50:18:04:62:3a:8e:a1:48: f3:14:60:14:73:5b:bb:e5:02:58:11:9f:68:54:3a: 02:cd:ba:1e:82:23:a6:52:73:77:37:dc:6d:45:1f: 07:5a:1a:bd:58:1a:c2:d0:03:25:12:b2:2e:af:a6: f9:bf:6b:50:db:53:7f:70:52:88:82:97:77:8e:6c: b2:de:ed:7b:ba:0b:87:f4:08:7a:3a:93:97:b6:ad: 12:5c:4c:33:d3:83:e8:0c:59:7c:38:dc:55:08:9f: 93:b2:f1:36:52:aa:2a:96:ea:f1:ff:71:93:d7:d9: 04:b9:16:01:3b:c4:1a:3c:7c:fc:a7:9c:55:d1:1c: 6c:25:47:4a:5b:c5:7f:30:28:d7:88:7e:07:1d:4d: 36:57:fa:29:ee:cc:ab:56:92:39:b7:6f:12:c5:39: 81:d7:1c:cd:50:d5:d2:40:d9:5a:85:e2:25:0b:b5: 26:0c:89:25:7b:35:dd:9c:0b:13:cd:9b:a6:a4:46: 4a:f4:65:ee:39:7a:9a:7b:3f:4f:1d:6b:02:23:be: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.218.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:11:a5:14:75:a7:c1:f9:66:b6:a0:bc:e5:f8:5d:fa:34:44: db:6e:f1:12:85:40:f0:17:1b:2a:26:ba:d6:c3:31:d0:66:2f: 23:fd:ab:52:45:0b:6f:2d:22:98:78:94:35:a6:c1:b3:63:b5: ea:b7:7d:7c:e8:c2:d0:6d:81:63:86:81:00:18:51:b7:c6:fb: bd:bd:47:85:c9:d9:4a:c0:ed:a7:94:8b:32:6e:74:c8:d3:d3: 04:a7:1b:f7:0a:8e:7c:7b:6f:0d:1b:e1:58:ed:6d:d0:44:4b: e2:89:79:db:94:9f:b5:74:f3:b9:e4:c4:34:16:34:43:42:df: d4:e9:da:e0:0a:72:99:f8:06:31:8e:89:30:8e:e2:e2:39:da: 95:b3:9a:df:8f:21:29:ee:0f:45:b4:a1:de:1b:44:a2:5e:9c: c3:de:63:68:5c:2e:72:47:f9:40:34:91:1a:e1:5b:a9:ef:fc: 70:42:41:fa:f4:4d:e0:e9:f3:ae:fe:ff:81:a2:7f:0a:64:98: ca:53:e9:79:a5:0a:5b:01:2a:b3:81:e6:70:f9:8f:59:6e:7d: e2:f1:61:64:af:c5:55:07:16:cd:71:0d:fb:fa:00:2f:16:ca: e2:94:f1:92:c7:5c:42:1a:38:30:54:b7:85:64:fa:f2:e0:6c: 91:fc:d2:1e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xrVJTs1AB5LTC6NhwpiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzAzZjI1OGQ0N2JlY2MyY2I0YjRmYzU3MmIyMjliMmU2NGI2YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62W3+yhRrzMi8UHO9zgi/mNJKTdL yBoTNF3rV3ix5qBfAjMdv/HiDq4PHKHodzUAtQNlUBgEYjqOoUjzFGAUc1u75QJY EZ9oVDoCzboegiOmUnN3N9xtRR8HWhq9WBrC0AMlErIur6b5v2tQ21N/cFKIgpd3 jmyy3u17uguH9Ah6OpOXtq0SXEwz04PoDFl8ONxVCJ+TsvE2Uqoqlurx/3GT19kE uRYBO8QaPHz8p5xV0RxsJUdKW8V/MCjXiH4HHU02V/op7syrVpI5t28SxTmB1xzN UNXSQNlaheIlC7UmDIklezXdnAsTzZumpEZK9GXuOXqaez9PHWsCI77byQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGcD8ljUe+zCy0tPxXKyKbLmS2uSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzJhMDdj Yi1mNmMwLTQ5YmEtYTdkMS0xYjAxNDUzMzQ3ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMmEwN2Ni LWY2YzAtNDliYS1hN2QxLTFiMDE0NTMzNDdkYS8xL1p3UHlXTlI3N01MTFMwX0Zj cklwc3VaTGE1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/XaMA0GCSqGSIb3DQEBCwUAA4IBAQBuEaUU dafB+Wa2oLzl+F36NETbbvEShUDwFxsqJrrWwzHQZi8j/atSRQtvLSKYeJQ1psGz Y7Xqt3186MLQbYFjhoEAGFG3xvu9vUeFydlKwO2nlIsybnTI09MEpxv3Co58e28N G+FY7W3QREviiXnblJ+1dPO55MQ0FjRDQt/U6drgCnKZ+AYxjokwjuLiOdqVs5rf jyEp7g9FtKHeG0SiXpzD3mNoXC5yR/lANJEa4Vup7/xwQkH69E3g6fOu/v+Bon8K ZJjKU+l5pQpbASqzgeZw+Y9Zbn3i8WFkr8VVBxbNcQ37+gAvFsrilPGSx1xCGjgw VLeFZPry4GyR/NIe -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:19 2026 by rpki-client