This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer File: zPqIwisefFLecaN2Q96jw_zdSVQ.cer (raw, json) Hash identifier: i/jvzyEGy29Vqf8J1Spec0z6bAKBnTrWF5Pa53rEVYw= Subject key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378D2E319780F5627AE911BB55223D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:2c24::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8d:2e:31:97:80:f5:62:7a:e9:11:bb:55:22:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:d6:5c:8c:a8:7c:20:b9:9a:f9:fd:b9:96: a9:b5:8f:41:ba:67:eb:d9:19:04:66:aa:5e:cd:22: b3:79:af:1c:91:14:96:f6:c7:90:88:04:92:8d:0a: b1:d4:32:74:17:e4:50:b8:81:16:11:eb:2e:ac:17: b2:02:91:75:fa:4d:ee:78:66:44:fe:05:34:6f:00: f9:98:b3:cd:56:09:d1:63:5e:d0:da:67:65:10:06: 46:e1:ff:d0:06:ba:91:f5:4a:ed:e2:bb:69:f5:d2: 51:5d:d9:1a:ca:12:c4:3b:c2:0d:77:e1:84:1e:c4: 58:f0:77:e3:22:78:b6:97:4b:02:02:6c:78:3c:36: 73:d6:b8:fd:0a:c6:ce:15:23:f6:6a:4b:a5:d0:69: 03:ac:d2:51:17:2f:86:d6:21:9e:2d:a6:a4:5d:8a: d0:f9:0d:bf:5d:64:4a:8c:dc:70:22:9c:75:1f:0e: b0:d8:41:9d:cc:a1:98:a2:f0:94:f4:af:ee:b7:c2: 67:dd:c7:46:29:25:5f:55:db:6a:62:9e:39:62:86: 0a:b8:b8:e5:4f:f4:15:87:52:e9:75:08:d1:0f:d7: 54:85:30:f6:26:64:21:dc:53:15:2e:f0:d6:bd:c2: f5:38:a9:5e:16:10:a9:26:75:dc:5b:e0:0b:85:4b: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c24::/48 Signature Algorithm: sha256WithRSAEncryption 00:89:5c:eb:10:29:29:43:05:b6:be:c6:43:0b:68:6c:5d:b3: 80:5b:43:2f:ec:5d:52:72:1f:ae:1f:fa:10:19:27:43:77:52: 81:bc:d4:e9:40:c4:ed:f5:89:e4:34:43:29:d9:f3:bf:e1:e7: 48:48:de:7c:76:6c:21:ad:25:07:35:db:f7:ca:7d:ad:83:10: 56:94:17:ca:0f:79:ab:d1:ed:ab:48:ad:ac:e7:fc:73:a0:3b: 45:55:b1:8d:e1:1c:d7:38:a5:e5:82:08:0a:74:51:5b:3e:a9: db:48:c8:41:a6:cd:80:1f:1a:c7:cf:fe:52:e7:a6:52:17:49: 87:f4:48:08:67:b3:cd:fb:93:d0:5f:54:24:63:85:44:6f:2d: fa:cd:0d:9b:2a:bf:ac:62:7e:20:ef:37:45:1b:01:2d:77:a1: ed:26:72:9b:19:9b:f4:a9:c8:89:d0:48:6b:53:e0:b1:73:80: 5b:49:7a:e4:50:73:c7:4f:61:88:f6:50:f3:21:56:c6:71:44: 9e:a8:57:d4:c9:ab:d1:1f:21:eb:5c:3a:f7:c2:08:0b:75:c9: a4:02:ec:e0:2e:cd:84:40:00:93:80:4b:9c:29:90:b8:c0:af: 74:75:16:97:37:71:f2:ca:ad:a7:10:d2:5a:d2:fc:04:19:c8: 1c:71:65:7f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt+N40uMZeA9WJ66RG7VSI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2ZhODhjMjJiMWU3YzUyZGU3MWEzNzY0M2RlYTNjM2ZjZGQ0OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUvWXIyofCC5mvn9uZaptY9Bumfr 2RkEZqpezSKzea8ckRSW9seQiASSjQqx1DJ0F+RQuIEWEesurBeyApF1+k3ueGZE /gU0bwD5mLPNVgnRY17Q2mdlEAZG4f/QBrqR9Urt4rtp9dJRXdkayhLEO8INd+GE HsRY8HfjIni2l0sCAmx4PDZz1rj9CsbOFSP2akul0GkDrNJRFy+G1iGeLaakXYrQ +Q2/XWRKjNxwIpx1Hw6w2EGdzKGYovCU9K/ut8Jn3cdGKSVfVdtqYp45YoYKuLjl T/QVh1LpdQjRD9dUhTD2JmQh3FMVLvDWvcL1OKleFhCpJnXcW+ALhUs2TQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFMz6iMIrHnxS3nGjdkPeo8P83UlUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzFhZTJi MC1kOTNhLTQ2M2MtYTZiOS04MjdiNjQzYWYzZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMWFlMmIw LWQ5M2EtNDYzYy1hNmI5LTgyN2I2NDNhZjNkNy8xL3pQcUl3aXNlZkZMZWNhTjJR OTZqd196ZFNWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCwkMA0GCSqGSIb3DQEBCwUAA4IBAQAA iVzrECkpQwW2vsZDC2hsXbOAW0Mv7F1Sch+uH/oQGSdDd1KBvNTpQMTt9YnkNEMp 2fO/4edISN58dmwhrSUHNdv3yn2tgxBWlBfKD3mr0e2rSK2s5/xzoDtFVbGN4RzX OKXlgggKdFFbPqnbSMhBps2AHxrHz/5S56ZSF0mH9EgIZ7PN+5PQX1QkY4VEby36 zQ2bKr+sYn4g7zdFGwEtd6HtJnKbGZv0qciJ0EhrU+Cxc4BbSXrkUHPHT2GI9lDz IVbGcUSeqFfUyavRHyHrXDr3wggLdcmkAuzgLs2EQACTgEucKZC4wK90dRaXN3Hy yq2nENJa0vwEGcgccWV/ -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:05 2026 by rpki-client