This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer File: zbFQJ29VuuRVmI06E-WTQQdNzQo.cer (raw, json) Hash identifier: FxRPzsX7BFI6B47OzJ5clU75E6zxKOjWStfjhsxBEL4= Subject key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA35071A7D9DE8C4627817485990E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.194.94.0/23 IP: 91.212.28.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:35:07:1a:7d:9d:e8:c4:62:78:17:48:59:90:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdb150276f55bae455988d3a13e59341074dcd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:14:55:01:71:38:0b:9d:46:16:db:f5:bb: a9:51:68:f6:06:06:95:c7:bd:7f:75:07:ef:70:83: ef:22:17:7b:31:9e:68:1c:5f:14:9d:9b:d3:cb:84: 4f:e0:a6:86:67:80:a4:25:ba:43:d5:cd:ed:6b:36: 5c:50:36:0f:13:ac:f1:95:54:26:a1:46:a8:f3:5e: 66:40:58:2e:d8:b8:a4:9f:ef:16:10:5e:f3:0b:c6: 57:0c:f9:3c:bf:05:a5:b0:eb:57:2e:d8:b5:20:67: 58:3f:71:2c:86:a6:fc:be:75:db:04:22:39:fc:35: 1e:98:91:96:1e:7d:b5:41:61:4e:83:e6:45:dd:b8: 6b:48:ac:57:f9:4b:b7:71:c8:92:4c:24:61:d1:fa: 02:65:1e:15:85:6d:08:c1:35:06:d7:de:61:b6:8d: 6d:91:d6:14:5c:78:30:de:03:32:b3:a3:ba:fe:05: 6f:26:50:00:03:51:f3:36:86:2f:ee:5e:86:7a:f2: fc:f2:b6:78:bb:32:b0:5f:5c:f0:0f:e5:0c:3e:54: c7:64:fd:98:cc:8c:5b:76:36:f1:5f:a1:0c:e1:9a: fa:9a:6c:70:ef:a4:41:b7:0a:65:ee:2c:03:ca:f0: 44:c5:8a:e5:f7:b4:0f:2a:93:b3:c8:ef:b7:41:f2: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.94.0/23 91.212.28.0/24 Signature Algorithm: sha256WithRSAEncryption 44:6f:6b:43:9a:db:a9:b0:fe:0f:be:c5:30:61:51:30:a5:b0: 86:38:84:1f:dc:68:e5:5b:9d:44:3e:19:17:b0:77:36:d2:7f: db:ba:63:fd:a8:01:87:90:29:a7:5d:c0:2d:57:d9:89:1e:4e: 1a:f4:f9:07:db:a6:c7:af:61:68:c8:80:f4:6e:6c:a7:14:08: e5:ea:59:d3:3e:8d:5c:24:de:18:13:90:05:46:ce:3e:3d:50: 8e:f6:6a:09:61:00:fe:6e:b6:a1:1a:a7:90:9f:9f:ee:d4:a4: 45:84:71:8a:90:66:0d:c4:b4:7e:c7:bd:9a:9a:b4:79:5b:28: 05:ad:d6:59:99:96:33:42:ec:e3:32:c5:08:94:cc:ee:0a:8f: 21:d4:08:e4:ad:b7:f5:bd:f7:58:65:fe:e3:90:aa:91:1b:0f: c9:a2:4f:fb:12:42:bc:94:f9:a9:32:72:34:8a:8b:a5:27:68: 72:d5:ef:d5:6b:d3:ab:cb:33:2d:01:de:9b:da:5e:08:c1:4b: 50:a1:e1:6e:fa:f5:0c:70:fa:73:dc:aa:0a:ce:aa:a6:ab:33: da:f5:bc:c0:7b:2f:59:c4:48:75:4c:57:8d:ae:d6:a3:10:55: 60:2c:f9:c2:46:54:e0:5b:da:bd:35:5d:a4:63:46:9e:19:65: b2:a6:a7:02 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9yjUHGn2d6MRieBdIWZDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGIxNTAyNzZmNTViYWU0NTU5ODhkM2ExM2U1OTM0MTA3NGRjZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR0UVQFxOAudRhbb9bupUWj2BgaV x71/dQfvcIPvIhd7MZ5oHF8UnZvTy4RP4KaGZ4CkJbpD1c3tazZcUDYPE6zxlVQm oUao815mQFgu2Likn+8WEF7zC8ZXDPk8vwWlsOtXLti1IGdYP3Eshqb8vnXbBCI5 /DUemJGWHn21QWFOg+ZF3bhrSKxX+Uu3cciSTCRh0foCZR4VhW0IwTUG195hto1t kdYUXHgw3gMys6O6/gVvJlAAA1HzNoYv7l6GevL88rZ4uzKwX1zwD+UMPlTHZP2Y zIxbdjbxX6EM4Zr6mmxw76RBtwpl7iwDyvBExYrl97QPKpOzyO+3QfK3ZwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFM2xUCdvVbrkVZiNOhPlk0EHTc0KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2JlNjMz Ny02NjJlLTRjM2ItODEyYS0zNDA3ZmNhMTIyNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYmU2MzM3 LTY2MmUtNGMzYi04MTJhLTM0MDdmY2ExMjI2Ny8xL3piRlFKMjlWdXVSVm1JMDZF LVdUUVFkTnpRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW8JeAwQAW9QcMA0GCSqGSIb3DQEBCwUAA4IB AQBEb2tDmtupsP4PvsUwYVEwpbCGOIQf3GjlW51EPhkXsHc20n/bumP9qAGHkCmn XcAtV9mJHk4a9PkH26bHr2FoyID0bmynFAjl6lnTPo1cJN4YE5AFRs4+PVCO9moJ YQD+brahGqeQn5/u1KRFhHGKkGYNxLR+x72amrR5WygFrdZZmZYzQuzjMsUIlMzu Co8h1Ajkrbf1vfdYZf7jkKqRGw/Jok/7EkK8lPmpMnI0ioulJ2hy1e/Va9OryzMt Ad6b2l4IwUtQoeFu+vUMcPpz3KoKzqqmqzPa9bzAey9ZxEh1TFeNrtajEFVgLPnC RlTgW9q9NV2kY0aeGWWypqcC -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:47 2026 by rpki-client