This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer File: kziECSasc-rVthh5GeiPEAMimco.cer (raw, json) Hash identifier: bgh2HNl1hQhVaF7iJj28Mybni9Fal7BZKUJIrQfgEgI= Subject key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA23E425968D408E0D2017F5E24B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34696 IP: 45.148.72.0/22 IP: 81.172.101.0/24 IP: 185.118.188.0/22 IP: 217.197.111.0/24 IP: 2a0d:340::/32 IP: 2a0f:8c00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:3e:42:59:68:d4:08:e0:d2:01:7f:5e:24:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9338840926ac73ead5b6187919e88f10032299ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:20:57:ce:9b:16:22:db:07:d6:38:4b:9b: df:01:23:9b:ec:cd:61:58:cf:56:29:b2:27:d3:ed: 19:a0:71:05:d2:3e:dd:2a:f4:b6:73:24:59:7e:8e: 07:19:8d:bf:55:d4:5b:4d:86:b1:56:87:28:4c:7d: 4b:5a:e7:63:a4:56:21:5f:8f:ac:82:22:6a:8c:e5: 3c:cc:bc:91:ca:80:fb:19:6c:4e:49:1e:55:d1:1e: b1:ae:b5:1b:df:7d:67:9f:19:c5:72:d9:48:dd:f2: 9f:63:5e:88:fa:43:23:e5:7f:7f:e9:65:7d:83:3b: a5:10:37:bf:e5:92:77:eb:e0:cd:cf:fa:46:9e:f2: b1:13:85:1e:5e:89:df:4f:ac:44:7d:6e:7a:08:fe: a1:05:64:fc:34:3b:56:a6:a1:43:6f:12:1c:62:1e: ed:cc:97:41:56:a3:68:57:d4:26:c3:37:e7:4d:b0: c1:c9:aa:96:65:6e:c3:54:ae:56:db:b0:86:db:51: 1c:b1:65:1e:e7:eb:3f:b0:20:3e:a3:20:e4:96:f3: 34:ef:53:6c:dd:30:3f:5f:fc:1f:da:80:84:bd:26: d2:b6:9e:3b:6f:4e:e6:2f:a5:a6:04:61:92:f8:99: 4e:6a:8d:b8:d3:68:72:f2:e7:24:c3:ef:9c:f9:94: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.72.0/22 81.172.101.0/24 185.118.188.0/22 217.197.111.0/24 IPv6: 2a0d:340::/32 2a0f:8c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34696 Signature Algorithm: sha256WithRSAEncryption 0d:1a:3a:53:5b:83:a8:54:ea:69:84:df:17:9b:a5:5a:7c:30: 12:4c:d4:ac:b0:27:c9:d0:04:c5:91:1a:d5:37:22:6f:04:5c: 74:6c:27:be:16:b8:35:8f:33:e5:06:d4:06:4a:38:4d:6e:21: f3:2a:3c:6b:31:a0:52:87:61:0d:fb:ac:59:87:20:3b:0a:f9: 83:9c:88:c4:90:66:ba:25:df:34:29:1a:5e:6f:d6:e0:2b:1e: b8:59:4f:32:e9:41:fd:c0:18:56:82:83:a2:11:3d:0f:d8:bf: f0:1d:a1:dd:2e:c5:93:7e:d2:92:3c:ba:10:bc:24:87:3c:1d: 83:28:c2:3d:bd:68:fb:06:a4:63:bc:97:16:aa:03:ad:3d:cd: f2:0d:b8:b8:22:ab:62:67:9c:56:21:c1:0a:0f:f6:cd:bf:28: 47:8b:42:3b:02:4a:b5:6f:82:55:2a:61:8a:6f:13:25:8f:71: ab:cf:fb:1f:af:e6:77:ac:5b:76:e4:6a:2f:87:cd:cf:4e:43: 37:d8:7c:ca:8a:2d:c8:05:2d:83:5d:b9:91:15:87:1c:7d:ca: 46:37:ae:75:be:a1:36:a5:3e:fb:3c:c2:04:8a:c3:ed:50:f3: 8d:d2:ee:e0:88:26:89:be:c5:1f:23:82:0f:fd:2b:48:fb:c0: 51:9c:0f:bd -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt266I+Qllo1Ajg0gF/XiS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzM4ODQwOTI2YWM3M2VhZDViNjE4NzkxOWU4OGYxMDAzMjI5OWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfggV86bFiLbB9Y4S5vfASOb7M1h WM9WKbIn0+0ZoHEF0j7dKvS2cyRZfo4HGY2/VdRbTYaxVocoTH1LWudjpFYhX4+s giJqjOU8zLyRyoD7GWxOSR5V0R6xrrUb331nnxnFctlI3fKfY16I+kMj5X9/6WV9 gzulEDe/5ZJ36+DNz/pGnvKxE4UeXonfT6xEfW56CP6hBWT8NDtWpqFDbxIcYh7t zJdBVqNoV9QmwzfnTbDByaqWZW7DVK5W27CG21EcsWUe5+s/sCA+oyDklvM071Ns 3TA/X/wf2oCEvSbStp47b07mL6WmBGGS+JlOao2402hy8uckw++c+ZQ7TQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFJM4hAkmrHPq1bYYeRnojxADIpnKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzBiZDRk My1kNDZjLTQ4M2YtOTU2ZS1lYTdhZTcyYmQzMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMGJkNGQz LWQ0NmMtNDgzZi05NTZlLWVhN2FlNzJiZDMyZC8xL2t6aUVDU2FzYy1yVnRoaDVH ZWlQRUFNaW1jby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCLZRIAwQAUaxlAwQCuXa8AwQA2cVvMBQEAgAC MA4DBQAqDQNAAwUAKg+MADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAh4gwDQYJ KoZIhvcNAQELBQADggEBAA0aOlNbg6hU6mmE3xebpVp8MBJM1KywJ8nQBMWRGtU3 Im8EXHRsJ74WuDWPM+UG1AZKOE1uIfMqPGsxoFKHYQ37rFmHIDsK+YOciMSQZrol 3zQpGl5v1uArHrhZTzLpQf3AGFaCg6IRPQ/Yv/Adod0uxZN+0pI8uhC8JIc8HYMo wj29aPsGpGO8lxaqA609zfINuLgiq2JnnFYhwQoP9s2/KEeLQjsCSrVvglUqYYpv EyWPcavP+x+v5nesW3bkai+Hzc9OQzfYfMqKLcgFLYNduZEVhxx9ykY3rnW+oTal Pvs8wgSKw+1Q843S7uCIJom+xR8jgg/9K0j7wFGcD70= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:04 2026 by rpki-client