This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer File: cZSbR98xPLq5RS2pj8xjdgipCb0.cer (raw, json) Hash identifier: W4Zz9UtQSiYulMGdvqfQOQ8971ktWAPi9xtEpU4c4lM= Subject key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67C2E377A97AFE72725DD92B08600 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13097 AS: 28742 AS: 34758 IP: 31.6.80.0/20 IP: 45.13.88.0/22 IP: 45.93.36.0/22 IP: 46.229.80.0/20 IP: 80.70.116.0/22 IP: 82.163.32.0/22 IP: 84.234.100.0/22 IP: 89.189.32.0/20 IP: 89.189.56.0/21 IP: 92.246.96.0/21 IP: 92.246.112.0/20 IP: 93.93.16.0/21 IP: 109.234.136.0/21 IP: 146.255.160.0/21 IP: 149.62.32.0/24 IP: 159.255.156.0/22 IP: 185.23.84.0/22 IP: 185.103.80.0/22 IP: 185.126.140.0/22 IP: 185.138.36.0/22 IP: 185.158.28.0/22 IP: 185.171.36.0/22 IP: 185.178.12.0/22 IP: 193.238.136.0/22 IP: 195.225.224.0/22 IP: 213.178.192.0/20 IP: 217.72.32.0/21 IP: 2a01:7540::/32 IP: 2a04:2080::/29 IP: 2a06:c2c0::/29 IP: 2a0a:8e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:2e:37:7a:97:af:e7:27:25:dd:92:b0:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71949b47df313cbab9452da98fcc637608a909bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:4c:8e:ca:5e:21:e6:d1:f4:bf:80:75:bc: 8b:dd:2c:80:1d:6e:79:7b:af:46:9c:69:2b:a4:cb: 5d:c4:e0:24:a5:b8:9d:4d:bb:83:b5:88:4b:67:1e: e0:31:61:dc:cc:0d:06:c7:b3:97:be:bb:52:62:5c: f2:e5:d0:a6:79:b4:7a:48:01:17:dc:c8:bc:47:e0: 8f:14:67:38:e0:22:9e:c1:5f:b3:86:a2:d2:6d:5b: 6e:6f:ba:60:72:87:c9:20:17:ca:c5:47:12:18:95: 94:73:64:7a:69:f1:78:6d:63:37:cc:2f:37:45:ee: 47:d0:4b:ae:54:9c:4a:e7:ef:e9:28:be:0b:d7:1a: 9b:be:49:b2:82:21:07:b0:81:77:96:ba:2f:f0:77: 5c:b8:01:e8:10:2e:3b:2f:a6:61:6a:96:28:86:09: 68:5a:08:d7:e3:21:04:cf:66:76:80:f4:c8:3c:85: b4:3a:76:a3:f3:c6:3b:24:6b:ad:4c:3a:70:bb:6a: c0:93:e6:5f:a8:bd:5b:7b:4a:c5:57:c1:eb:23:4e: a1:5e:84:f0:4f:30:9d:6f:b8:52:ea:a2:9b:8a:42: 3c:86:0a:30:04:0c:e3:8e:ed:f6:51:56:84:17:1b: 06:de:f5:73:e6:85:c1:98:10:d9:ed:07:34:3a:92: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.80.0/20 45.13.88.0/22 45.93.36.0/22 46.229.80.0/20 80.70.116.0/22 82.163.32.0/22 84.234.100.0/22 89.189.32.0/20 89.189.56.0/21 92.246.96.0/21 92.246.112.0/20 93.93.16.0/21 109.234.136.0/21 146.255.160.0/21 149.62.32.0/24 159.255.156.0/22 185.23.84.0/22 185.103.80.0/22 185.126.140.0/22 185.138.36.0/22 185.158.28.0/22 185.171.36.0/22 185.178.12.0/22 193.238.136.0/22 195.225.224.0/22 213.178.192.0/20 217.72.32.0/21 IPv6: 2a01:7540::/32 2a04:2080::/29 2a06:c2c0::/29 2a0a:8e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13097 28742 34758 Signature Algorithm: sha256WithRSAEncryption a3:4e:d9:50:25:b4:79:2b:90:7e:a9:88:9d:3f:c5:f5:04:a4: b1:dc:a7:59:b7:03:5b:72:10:e5:68:77:9a:da:dc:72:03:e5: f1:9d:de:9a:c2:68:97:67:30:5b:29:1b:ff:f1:bc:95:50:56: 72:94:cb:46:d3:8a:b0:35:f8:db:e7:2d:2c:c8:d6:64:d5:43: 93:c8:e0:10:38:f4:9e:e9:7d:a7:4f:b1:b3:7e:d5:a2:32:79: a6:c5:1d:99:52:95:fa:2f:af:83:6e:fe:00:1e:af:bb:2c:5b: d6:1d:29:d8:14:56:f4:04:a0:eb:11:e2:a1:bd:7a:27:1d:12: f7:33:ea:a4:6e:3d:9e:2c:cc:9d:f8:f4:a1:f1:fa:c9:30:c9: 26:ed:7d:1d:ac:c8:f0:0b:bc:42:00:09:0f:f3:11:66:ee:7c: 8b:d1:ec:e3:21:f7:5c:24:96:10:a7:61:e0:1b:8b:88:e0:00: 47:75:67:7c:cb:af:31:a4:69:ff:0c:55:5e:76:b6:60:b1:1e: 68:8d:14:18:45:9a:41:29:c0:df:95:da:23:8d:c1:72:17:08: cf:8a:09:5c:1b:3d:d3:2c:f7:63:24:f7:69:a7:3d:e9:1a:9a: dc:8e:2a:69:8d:fd:0f:b0:d4:d4:07:83:2f:a6:14:dd:d9:04: 37:38:99:c9 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISAZt3xnwuN3qXr+cnJd2SsIYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTk0OWI0N2RmMzEzY2JhYjk0NTJkYTk4ZmNjNjM3NjA4YTkwOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSdMjspeIebR9L+AdbyL3SyAHW55 e69GnGkrpMtdxOAkpbidTbuDtYhLZx7gMWHczA0Gx7OXvrtSYlzy5dCmebR6SAEX 3Mi8R+CPFGc44CKewV+zhqLSbVtub7pgcofJIBfKxUcSGJWUc2R6afF4bWM3zC83 Re5H0EuuVJxK5+/pKL4L1xqbvkmygiEHsIF3lrov8HdcuAHoEC47L6ZhapYohglo WgjX4yEEz2Z2gPTIPIW0Onaj88Y7JGutTDpwu2rAk+ZfqL1be0rFV8HrI06hXoTw TzCdb7hS6qKbikI8hgowBAzjju32UVaEFxsG3vVz5oXBmBDZ7Qc0OpIUowIDAQAB o4IDbTCCA2kwHQYDVR0OBBYEFHGUm0ffMTy6uUUtqY/MY3YIqQm9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2IzM2E3 OC1hNTFlLTQ2ZTQtODY0OC0wMDY2ZjU0MWZhZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYjMzYTc4 LWE1MWUtNDZlNC04NjQ4LTAwNjZmNTQxZmFlYS8xL2NaU2JSOTh4UExxNVJTMnBq OHhqZGdpcENiMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHjBggrBgEF BQcBBwEB/wSB0zCB0DCBqQQCAAEwgaIDBAQfBlADBAItDVgDBAItXSQDBAQu5VAD BAJQRnQDBAJSoyADBAJU6mQDBARZvSADBANZvTgDBANc9mADBARc9nADBANdXRAD BANt6ogDBAOS/6ADBACVPiADBAKf/5wDBAK5F1QDBAK5Z1ADBAK5fowDBAK5iiQD BAK5nhwDBAK5qyQDBAK5sgwDBALB7ogDBALD4eADBATVssADBAPZSCAwIgQCAAIw HAMFACoBdUADBQMqBCCAAwUDKgbCwAMFAyoKjoAwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICMykCAnBGAgMAh8YwDQYJKoZIhvcNAQELBQADggEBAKNO2VAltHkrkH6p iJ0/xfUEpLHcp1m3A1tyEOVod5ra3HID5fGd3prCaJdnMFspG//xvJVQVnKUy0bT irA1+NvnLSzI1mTVQ5PI4BA49J7pfadPsbN+1aIyeabFHZlSlfovr4Nu/gAer7ss W9YdKdgUVvQEoOsR4qG9eicdEvcz6qRuPZ4szJ349KHx+skwySbtfR2syPALvEIA CQ/zEWbufIvR7OMh91wklhCnYeAbi4jgAEd1Z3zLrzGkaf8MVV52tmCxHmiNFBhF mkEpwN+V2iONwXIXCM+KCVwbPdMs92Mk92mnPekamtyOKmmN/Q+w1NQHgy+mFN3Z BDc4mck= -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:48 2026 by rpki-client