This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer File: zepK3ugLBlGc5A3T0T8oup9XWVc.cer (raw, json) Hash identifier: ocI3u7Vtp6Bb0UtPuiatxeiE1oCKaPm53PQYnTsmE0E= Subject key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8603AD4E6B1FAF3C72C2C89A80AB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.250.0/24 IP: 91.227.208.0/24 IP: 185.64.72.0/22 IP: 2a03:1220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:3a:d4:e6:b1:fa:f3:c7:2c:2c:89:a8:0a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:c1:55:fe:a1:b9:9e:45:96:6e:5b:12:65: a8:5c:0f:6a:a5:49:e3:39:27:cd:b5:3e:0e:d4:39: 6f:a2:ee:94:2f:4a:9a:02:bc:cd:94:28:7b:af:88: f4:9d:65:1b:b3:2e:26:0e:4b:59:f1:17:32:6c:ba: 68:07:79:4c:84:77:66:d9:5f:15:7c:ba:f4:01:44: ef:70:07:5b:82:fa:e8:01:8b:71:10:44:39:8e:90: b5:59:c2:94:bf:e4:6f:ee:96:0d:22:e3:5b:75:81: 09:1f:37:54:c0:be:e6:c7:f2:5f:85:71:37:78:17: 4b:00:30:8a:de:b0:9e:d2:5e:14:45:d4:c4:6f:49: 0b:0b:91:0c:90:52:76:7b:78:55:17:62:5c:c1:dc: 3b:d9:6a:b2:33:70:ea:c6:2e:b6:59:0e:16:84:d5: 87:3a:0c:44:c0:ef:88:8b:8b:a0:52:cf:3d:a2:5b: 40:cf:f9:3b:78:2c:fb:ba:3f:85:10:a9:38:ad:30: 03:f4:87:5e:e6:30:66:3f:4c:12:ed:e2:5e:cc:02: f2:a9:cf:88:8c:86:48:70:c7:8a:db:ea:7b:ab:0a: ac:66:db:b1:d9:c7:99:12:70:4a:e7:b8:e6:d6:e6: 6f:34:24:b4:ed:b3:f2:e4:46:b4:76:8d:e1:aa:58: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.250.0/24 91.227.208.0/24 185.64.72.0/22 IPv6: 2a03:1220::/32 Signature Algorithm: sha256WithRSAEncryption 95:32:42:3b:06:61:b7:35:63:0c:33:06:ee:b9:99:9d:0e:b5: 58:b4:63:b0:5d:97:f3:1d:8c:7d:99:2c:39:8e:21:4d:3c:fc: 3c:b9:08:63:5d:da:43:23:7c:1c:d2:81:47:c7:2d:11:58:85: 3a:40:23:e9:8d:fc:91:f0:ca:33:60:75:d4:39:37:13:a4:e2: bd:33:fd:b2:66:aa:9f:d3:b5:fc:8b:d1:d4:0d:c9:88:74:7d: 5f:2d:16:5d:4e:e9:34:98:50:27:8f:61:b1:59:36:4a:c9:64: 69:d8:49:da:1d:ce:39:47:07:bf:4d:72:0d:8e:80:0e:d0:7a: dd:98:f3:f6:a4:70:fd:b9:18:b5:79:00:c5:6e:0e:57:53:5a: 70:52:09:10:ac:0e:4c:6a:dc:fa:47:89:23:19:01:8b:b6:1c: cf:fb:78:09:a8:ed:97:10:c9:45:78:9a:39:1c:58:49:b5:77: 7c:1e:42:f7:a3:95:26:b6:7b:0a:06:02:39:2f:7f:15:58:12: 3e:2a:d7:26:7c:97:0c:b3:fa:a5:4c:ff:f1:7e:a8:da:2e:16: 5c:7f:e9:8b:3a:ae:aa:44:99:5b:12:4d:a3:8b:59:50:60:56: 5e:2f:cb:09:76:77:1e:52:ad:d4:95:36:ab:ef:1d:99:5a:bf: 5b:62:24:6b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6yGA61Oax+vPHLCyJqAqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGVhNGFkZWU4MGIwNjUxOWNlNDBkZDNkMTNmMjhiYTlmNTc1OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V/BVf6huZ5Flm5bEmWoXA9qpUnj OSfNtT4O1Dlvou6UL0qaArzNlCh7r4j0nWUbsy4mDktZ8RcybLpoB3lMhHdm2V8V fLr0AUTvcAdbgvroAYtxEEQ5jpC1WcKUv+Rv7pYNIuNbdYEJHzdUwL7mx/JfhXE3 eBdLADCK3rCe0l4URdTEb0kLC5EMkFJ2e3hVF2Jcwdw72WqyM3Dqxi62WQ4WhNWH OgxEwO+Ii4ugUs89oltAz/k7eCz7uj+FEKk4rTAD9Ide5jBmP0wS7eJezALyqc+I jIZIcMeK2+p7qwqsZtux2ceZEnBK57jm1uZvNCS07bPy5Ea0do3hqliitQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFM3qSt7oCwZRnOQN09E/KLqfV1lXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzViNWYw Yy0zYzNkLTRlMjAtYjAzNS0wNTZjN2JmNmQ3ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNWI1ZjBj LTNjM2QtNGUyMC1iMDM1LTA1NmM3YmY2ZDdkOC8xL3plcEszdWdMQmxHYzVBM1Qw VDhvdXA5WFdWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9X6AwQAW+PQAwQCuUBIMA0EAgACMAcDBQAq AxIgMA0GCSqGSIb3DQEBCwUAA4IBAQCVMkI7BmG3NWMMMwbuuZmdDrVYtGOwXZfz HYx9mSw5jiFNPPw8uQhjXdpDI3wc0oFHxy0RWIU6QCPpjfyR8MozYHXUOTcTpOK9 M/2yZqqf07X8i9HUDcmIdH1fLRZdTuk0mFAnj2GxWTZKyWRp2EnaHc45Rwe/TXIN joAO0HrdmPP2pHD9uRi1eQDFbg5XU1pwUgkQrA5Matz6R4kjGQGLthzP+3gJqO2X EMlFeJo5HFhJtXd8HkL3o5UmtnsKBgI5L38VWBI+KtcmfJcMs/qlTP/xfqjaLhZc f+mLOq6qRJlbEk2ji1lQYFZeL8sJdnceUq3UlTar7x2ZWr9bYiRr -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:34 2026 by rpki-client