This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer (raw, json) Hash identifier: +YN5gpzvBCqmc1pnmBf/2qEUYGllfKA5T89wkXuR5uA= Subject key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FAAA88DB1F476BF9732E6FCC61273 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35463 IP: 93.175.160.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:aa:a8:8d:b1:f4:76:bf:97:32:e6:fc:c6:12:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:d9:62:30:ac:5a:d5:05:9f:49:81:4c:33: 35:cd:d1:be:62:b7:66:d5:d5:ec:08:06:88:f8:52: fc:c7:af:8a:7e:1c:d0:7d:96:22:7b:5e:83:1f:84: cd:14:dd:46:60:51:17:22:80:a6:0f:96:02:55:c3: fc:4d:1d:b2:7e:52:43:82:c8:9d:b4:17:96:ab:8e: 6b:7e:d1:3d:3a:82:be:2e:5a:05:17:43:70:b4:9a: c1:93:39:da:09:c7:2d:7c:b5:5b:ae:37:4e:00:62: b5:31:ae:b5:a0:5e:b6:80:d0:2a:2b:b7:9c:fb:db: 36:ae:81:55:be:92:3b:de:fc:cf:41:17:fa:ea:b2: c3:7c:aa:5a:65:10:e2:15:53:f7:88:68:15:9d:96: 9d:65:11:12:bf:e8:2d:dc:3a:16:1b:31:ec:60:43: 41:7c:6d:87:97:a4:2f:21:0a:97:15:ef:f7:1e:f0: 3b:c2:e8:d3:d9:de:e8:1a:aa:b5:81:57:93:ab:ee: 61:4f:7c:99:18:6a:64:24:af:5f:91:23:71:2f:8c: a0:8f:d1:9c:5b:1e:b7:11:13:3d:d7:8b:d4:7a:77: 4d:50:ad:18:60:40:fe:54:cf:49:99:66:71:a0:0e: 9f:ca:ea:90:be:27:ee:a8:24:ab:62:0c:ef:35:70: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.175.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35463 Signature Algorithm: sha256WithRSAEncryption 4a:7f:84:70:dc:95:b7:c3:76:86:4f:f2:70:7a:46:38:a1:85: ae:67:0b:a0:f3:3b:d4:b3:b5:d8:67:48:60:f1:46:5c:4b:12: ed:3b:5b:ec:ee:f8:c6:05:06:79:c8:23:33:dd:28:a6:4d:ea: 00:db:62:4c:dd:af:78:56:94:4d:68:69:6a:a1:f2:dd:51:90: 67:5c:98:ee:9f:78:b3:6d:82:65:a1:c9:6d:64:bd:ea:9b:23: ca:7d:d5:d1:89:f8:5b:03:15:2a:20:91:03:48:db:f8:0c:6f: 3d:cb:07:43:42:24:e1:ff:c3:15:5b:52:93:b8:18:b9:fa:df: 9a:1f:c8:16:4d:8f:ba:18:a1:62:01:a9:4b:72:29:7e:e5:ef: 4a:1b:b4:44:bf:08:e1:1a:96:de:7e:bf:35:20:40:c1:88:cd: c1:29:98:54:37:9c:88:48:4a:eb:98:52:3e:cb:da:2c:b4:eb: 40:c7:a3:a7:e3:fb:19:ec:44:5d:4a:42:ba:e1:34:03:0a:9b: 92:10:54:df:60:af:7b:61:fc:66:3b:08:0a:0a:59:a0:30:34: cd:60:fb:5c:2c:fa:96:40:ea:bd:bf:c8:13:7b:9d:0f:42:4c: 45:50:70:00:be:ad:9a:25:18:bb:42:4f:b4:e3:5a:7f:fc:ad: 02:c2:d8:ca -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8f6qojbH0dr+XMub8xhJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDk0NzlhZmUzYTlhMThlMWMzNzRmY2EwMjJkMWZmMmEyNTViMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq7ZYjCsWtUFn0mBTDM1zdG+Yrdm 1dXsCAaI+FL8x6+KfhzQfZYie16DH4TNFN1GYFEXIoCmD5YCVcP8TR2yflJDgsid tBeWq45rftE9OoK+LloFF0NwtJrBkznaCcctfLVbrjdOAGK1Ma61oF62gNAqK7ec +9s2roFVvpI73vzPQRf66rLDfKpaZRDiFVP3iGgVnZadZRESv+gt3DoWGzHsYENB fG2Hl6QvIQqXFe/3HvA7wujT2d7oGqq1gVeTq+5hT3yZGGpkJK9fkSNxL4ygj9Gc Wx63ERM914vUendNUK0YYED+VM9JmWZxoA6fyuqQvifuqCSrYgzvNXDbvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK2Uea/jqaGOHDdPygItH/KiVbGvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2IyZjk2 My0zOTM5LTQ0YzUtOWI5ZC1iMTYyNDJiOWJkZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvYjJmOTYz LTM5MzktNDRjNS05YjlkLWIxNjI0MmI5YmRlNy8xL3JaUjVyLU9wb1k0Y04wX0tB aTBmOHFKVnNhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEXa+gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCKhzANBgkqhkiG9w0BAQsFAAOCAQEASn+EcNyVt8N2hk/ycHpGOKGFrmcLoPM7 1LO12GdIYPFGXEsS7Ttb7O74xgUGecgjM90opk3qANtiTN2veFaUTWhpaqHy3VGQ Z1yY7p94s22CZaHJbWS96psjyn3V0Yn4WwMVKiCRA0jb+AxvPcsHQ0Ik4f/DFVtS k7gYufrfmh/IFk2PuhihYgGpS3IpfuXvShu0RL8I4RqW3n6/NSBAwYjNwSmYVDec iEhK65hSPsvaLLTrQMejp+P7GexEXUpCuuE0AwqbkhBU32Cve2H8ZjsICgpZoDA0 zWD7XCz6lkDqvb/IE3udD0JMRVBwAL6tmiUYu0JPtONaf/ytAsLYyg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:40 2026 by rpki-client