This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer File: z81z-CwmDahzhtz3vibVxURVJvo.cer (raw, json) Hash identifier: cg2f6XgvJbWE7bN3LiO54uOw0Y/8/4X7QI9BF25ho90= Subject key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AAA1DE9C628292C6592818A93E51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35246 AS: 49181 IP: 2.57.36.0/22 IP: 45.144.40.0/22 IP: 85.158.184.0/21 IP: 2a09:d2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:aa:a1:de:9c:62:82:92:c6:59:28:18:a9:3e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:89:89:6a:21:30:e1:69:69:fc:fc:7b:ef: cd:f3:3f:cb:38:46:ed:76:b7:73:60:f5:e9:aa:c3: 4c:5a:82:7e:33:ad:aa:02:ae:4f:bc:3f:5e:b1:ef: 94:41:93:e7:2d:df:a8:32:d7:de:d0:ae:5c:eb:59: 25:62:97:4b:c7:71:cd:c9:b9:70:1b:0a:36:4f:0c: 62:1d:de:94:a7:d6:77:63:e0:08:ad:f8:d2:20:5b: c7:2d:7f:a1:a7:92:24:35:24:fe:8f:c2:0e:89:2c: c6:d0:1e:07:a1:ef:3d:16:c8:54:92:2a:08:98:ce: cd:05:98:1a:d3:1d:8e:f5:68:49:22:b1:f4:6e:91: 6d:5e:82:ff:6c:ab:ee:29:3a:7a:89:b7:cb:0d:2b: 19:19:5b:36:9f:51:b1:8a:5e:79:47:2c:7b:0a:11: 82:da:cf:4a:25:11:e7:13:dd:be:a1:ff:19:83:cb: 9a:4c:2f:a0:82:eb:b7:d1:e3:35:ae:e5:c3:f8:15: c8:3c:ee:e1:90:dd:48:b3:09:dc:d4:28:28:0f:ae: a7:ee:f8:fe:64:f2:ea:d3:e0:bf:64:74:fc:9c:df: 57:bf:21:35:15:8c:df:fb:e2:a0:b0:e7:5d:c3:be: af:27:10:ab:55:e1:4d:f1:08:52:86:57:8e:04:5d: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.36.0/22 45.144.40.0/22 85.158.184.0/21 IPv6: 2a09:d2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35246 49181 Signature Algorithm: sha256WithRSAEncryption 39:2b:a8:fc:a0:50:8a:c3:12:65:0c:fa:11:0b:ad:22:a0:77: d8:7f:d9:7a:4d:46:d2:b8:a6:95:7b:8a:99:57:e7:9a:60:ca: a3:82:5e:1c:23:b6:98:49:19:75:2c:7c:77:00:a3:b2:55:26: 9c:79:17:82:df:c5:67:20:29:d8:aa:c2:15:0e:dd:f9:2a:dd: 60:88:3b:e1:c9:57:bc:11:c6:a8:75:b2:fb:74:0a:43:62:60: f8:f4:d6:c1:41:46:59:29:f7:a2:86:c1:15:63:ff:3b:ff:47: 81:60:fc:a8:29:56:41:1e:ed:6a:0e:ab:e4:58:24:3a:47:ba: c6:6f:db:43:98:ee:36:b5:db:51:3d:91:65:21:ec:5c:d0:95: c3:25:16:e5:bd:d4:98:6e:d2:53:43:92:8c:8d:95:2f:10:24: c6:59:f0:2b:6b:23:9b:de:b4:fe:82:46:d0:ee:26:46:cc:72: 76:6e:55:5e:90:b8:cb:d3:b7:dd:d3:48:4e:b7:e6:ba:cf:2a: 5d:44:3f:90:2a:fb:08:1f:ae:45:38:fe:a4:f9:4c:57:4b:a6: fb:51:1e:80:9e:25:e0:e9:3b:9c:46:4f:11:03:9d:fe:da:85: da:27:3f:c7:b5:4b:d0:a2:6a:f8:b2:6b:0f:39:b8:56:0f:ce: 8f:42:05:3b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt8Eqqh3pxigpLGWSgYqT5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmNkNzNmODJjMjYwZGE4NzM4NmRjZjdiZTI2ZDVjNTQ0NTUyNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69KJiWohMOFpafz8e+/N8z/LOEbt drdzYPXpqsNMWoJ+M62qAq5PvD9ese+UQZPnLd+oMtfe0K5c61klYpdLx3HNyblw Gwo2TwxiHd6Up9Z3Y+AIrfjSIFvHLX+hp5IkNST+j8IOiSzG0B4Hoe89FshUkioI mM7NBZga0x2O9WhJIrH0bpFtXoL/bKvuKTp6ibfLDSsZGVs2n1Gxil55Ryx7ChGC 2s9KJRHnE92+of8Zg8uaTC+gguu30eM1ruXD+BXIPO7hkN1Iswnc1CgoD66n7vj+ ZPLq0+C/ZHT8nN9XvyE1FYzf++KgsOddw76vJxCrVeFN8QhShleOBF2vtwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFM/Nc/gsJg2oc4bc974m1cVEVSb6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzQwYWRl MC05OGRhLTRhYTUtYjgxNy02ZWRjMWIyMjU2MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNDBhZGUw LTk4ZGEtNGFhNS1iODE3LTZlZGMxYjIyNTYyNS8xL3o4MXotQ3dtRGFoemh0ejN2 aWJWeFVSVkp2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCAjkkAwQCLZAoAwQDVZ64MA0EAgACMAcDBQMq CdLAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCJrgIDAMAdMA0GCSqGSIb3DQEB CwUAA4IBAQA5K6j8oFCKwxJlDPoRC60ioHfYf9l6TUbSuKaVe4qZV+eaYMqjgl4c I7aYSRl1LHx3AKOyVSaceReC38VnICnYqsIVDt35Kt1giDvhyVe8EcaodbL7dApD YmD49NbBQUZZKfeihsEVY/87/0eBYPyoKVZBHu1qDqvkWCQ6R7rGb9tDmO42tdtR PZFlIexc0JXDJRblvdSYbtJTQ5KMjZUvECTGWfArayOb3rT+gkbQ7iZGzHJ2blVe kLjL07fd00hOt+a6zypdRD+QKvsIH65FOP6k+UxXS6b7UR6AniXg6TucRk8RA53+ 2oXaJz/HtUvQomr4smsPObhWD86PQgU7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:06 2026 by rpki-client