This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer File: zWJru3tp7sn2eQsDcFVFuJL6Loo.cer (raw, json) Hash identifier: m7rhmV1lMk7EnVK6ILNlwh3ajMu46MvLxE0HhVyqdDw= Subject key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35BFAECC1D1BCED718B99247BD5672 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48500 IP: 37.99.224.0/19 IP: 94.230.64.0/21 IP: 109.104.224.0/21 IP: 134.90.224.0/19 IP: 185.46.100.0/22 IP: 217.196.128.0/20 IP: 2a00:46c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bf:ae:cc:1d:1b:ce:d7:18:b9:92:47:bd:56:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:78:f6:02:54:23:b9:f7:16:db:55:3b:34: cd:84:ad:83:f3:48:b6:b1:43:b7:a6:1d:21:07:9f: 40:7a:92:04:9c:8e:f6:e4:e1:ef:8c:91:d9:e4:7a: 06:43:76:c3:87:4d:60:c5:26:2e:b7:5e:cd:c2:97: 5b:1b:06:c5:9c:09:7b:e6:62:02:86:55:11:d1:73: 24:68:9b:dc:ad:61:b3:ee:57:24:78:dd:41:1f:c4: de:7a:7d:4c:cd:11:7f:4c:b8:02:ad:eb:44:19:d7: c3:f6:9a:63:3d:db:2d:d1:5d:aa:8e:47:d6:46:99: 61:5a:63:69:f8:59:d9:8c:19:12:4f:ef:cb:50:a1: 50:a8:32:b3:4f:8a:72:a0:dd:63:e7:3c:39:94:78: 31:55:be:9d:93:fc:a9:b4:8e:6f:74:5c:89:2b:b2: d0:3e:1f:54:ef:81:99:6c:69:ab:30:38:df:1c:bf: 21:ea:95:77:6f:4f:62:bf:2b:95:ce:6d:c0:f8:20: 61:e3:2c:6f:89:52:99:26:51:41:8e:60:c0:0e:a6: 97:ed:c9:a0:06:63:a3:32:94:75:79:28:0e:e0:7a: ac:8f:c7:6b:d7:24:0e:69:ae:da:78:98:18:69:ae: 65:0b:c7:8c:4b:3a:fb:e8:28:b4:20:75:f1:d2:78: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.99.224.0/19 94.230.64.0/21 109.104.224.0/21 134.90.224.0/19 185.46.100.0/22 217.196.128.0/20 IPv6: 2a00:46c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48500 Signature Algorithm: sha256WithRSAEncryption 48:18:5d:94:f8:d7:52:3f:39:08:a7:09:8f:75:56:a2:a1:61: ee:25:09:ec:af:1a:0e:de:e5:f4:70:1b:3b:d6:0f:f2:52:44: fc:41:31:e6:a1:59:ed:de:2b:1b:52:72:3b:f8:d7:8d:fa:ba: 90:67:dd:c4:08:dd:0a:ee:85:2d:78:fd:50:21:e1:02:0c:2f: f5:8b:aa:50:81:07:dd:af:42:69:9c:7e:dc:26:7a:fd:7b:c1: 84:c0:70:cc:0a:e9:ae:5a:d0:37:b5:42:f0:31:29:21:06:77: 5f:d6:58:00:5a:76:dd:5c:13:d9:a0:e2:2c:5c:3a:d0:01:0d: 43:c2:aa:92:42:d8:80:81:46:2d:a1:c2:b4:ef:d0:63:7b:fa: a4:32:8e:1e:df:4a:af:59:a1:cc:98:bc:e8:e0:1f:40:ee:de: aa:f2:dc:e8:a2:f2:81:f4:06:30:86:01:9c:af:7b:d8:e9:32: 75:ed:5b:97:28:53:96:9e:12:c6:d1:46:4e:56:e4:ad:f6:35: 02:ea:d3:28:30:13:a7:75:86:32:77:fb:5c:bf:0c:19:3d:b8: 34:62:7e:1a:af:de:f2:eb:30:09:90:b7:77:dc:c0:82:f5:f0: 94:f8:03:22:1b:c2:3e:8b:41:52:7c:63:a5:f4:64:24:e6:dd: 13:92:f5:e2 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7Nb+uzB0bztcYuZJHvVZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDYyNmJiYjdiNjllZWM5ZjY3OTBiMDM3MDU1NDViODkyZmEyZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00d49gJUI7n3FttVOzTNhK2D80i2 sUO3ph0hB59AepIEnI725OHvjJHZ5HoGQ3bDh01gxSYut17NwpdbGwbFnAl75mIC hlUR0XMkaJvcrWGz7lckeN1BH8Teen1MzRF/TLgCretEGdfD9ppjPdst0V2qjkfW RplhWmNp+FnZjBkST+/LUKFQqDKzT4pyoN1j5zw5lHgxVb6dk/yptI5vdFyJK7LQ Ph9U74GZbGmrMDjfHL8h6pV3b09ivyuVzm3A+CBh4yxviVKZJlFBjmDADqaX7cmg BmOjMpR1eSgO4Hqsj8dr1yQOaa7aeJgYaa5lC8eMSzr76Ci0IHXx0ngn2QIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFM1ia7t7ae7J9nkLA3BVRbiS+i6KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzJiMzdk Zi04ZmZlLTQxZTUtYWMwNy1jMGY4OWFkMzZiY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMmIzN2Rm LThmZmUtNDFlNS1hYzA3LWMwZjg5YWQzNmJjYS8xL3pXSnJ1M3RwN3NuMmVRc0Rj RlZGdUpMNkxvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFJWPgAwQDXuZAAwQDbWjgAwQFhlrgAwQCuS5k AwQE2cSAMA0EAgACMAcDBQAqAEbAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9 dDANBgkqhkiG9w0BAQsFAAOCAQEASBhdlPjXUj85CKcJj3VWoqFh7iUJ7K8aDt7l 9HAbO9YP8lJE/EEx5qFZ7d4rG1JyO/jXjfq6kGfdxAjdCu6FLXj9UCHhAgwv9Yuq UIEH3a9CaZx+3CZ6/XvBhMBwzArprlrQN7VC8DEpIQZ3X9ZYAFp23VwT2aDiLFw6 0AENQ8KqkkLYgIFGLaHCtO/QY3v6pDKOHt9Kr1mhzJi86OAfQO7eqvLc6KLygfQG MIYBnK972Okyde1blyhTlp4SxtFGTlbkrfY1AurTKDATp3WGMnf7XL8MGT24NGJ+ Gq/e8uswCZC3d9zAgvXwlPgDIhvCPotBUnxjpfRkJObdE5L14g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:10 2026 by rpki-client