This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer File: zhIoo6PQBlTUsRFzOHTjHYDAogw.cer (raw, json) Hash identifier: bqOTJpqOEInQ+tCmPAYEzYVj313z5BMqZB6k0CA5HIo= Subject key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A77C3B9C6D6C153B87B7AA62DA359691E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 11:11:47 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 58180 AS: 212639 IP: 86.54.201.0/24 IP: 195.206.120.0/24 IP: 2a14:9380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:c3:b9:c6:d6:c1:53:b8:7b:7a:a6:2d:a3:59:69:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 11:11:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:28:05:80:c2:e4:1c:26:17:62:17:1a:42: 37:61:1c:ee:e8:78:ab:7d:3d:59:13:dd:1c:bc:a1: 67:8f:3c:20:e8:0d:22:29:9c:82:05:46:30:4e:17: 1d:a7:f6:fb:81:ad:b4:3b:75:de:b7:ec:b3:d4:dd: 95:52:0d:eb:18:e4:45:8f:e3:4f:79:a4:59:88:18: ce:87:a1:b5:fd:81:51:82:c5:07:08:57:f7:e5:bc: 78:4f:f2:5e:cf:a7:39:77:8c:3e:84:d3:4b:02:7b: 17:40:65:3f:bb:97:f4:ed:75:a5:0e:ce:23:5e:50: b3:1e:02:ad:ee:9e:a5:92:9d:09:30:b7:f5:33:0e: 3d:4f:3f:9d:48:70:9c:9f:c1:3f:51:00:a3:8e:40: e0:a5:3f:32:af:26:17:99:1f:5c:52:44:58:eb:53: 6c:31:80:24:6c:af:db:f1:a0:1c:a9:b9:57:4f:ba: df:2a:1f:a1:c5:29:81:e3:6b:6d:b6:4a:dd:d7:dd: 6b:31:3f:b0:c3:0d:57:7d:4c:6d:5a:e4:a3:a0:71: f1:fd:80:04:39:24:f1:89:92:cd:02:1f:c1:43:09: 44:8b:cc:e5:e6:7a:c9:9e:63:49:c9:41:49:27:03: 2a:29:7a:26:51:8b:ee:15:b3:b7:ba:f7:c1:ae:c3: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.201.0/24 195.206.120.0/24 IPv6: 2a14:9380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58180 212639 Signature Algorithm: sha256WithRSAEncryption 2e:84:d1:95:b8:2c:ea:05:fa:ce:8c:90:df:0b:f8:41:b4:8c: 80:f1:c2:1e:7f:f9:27:41:ca:31:37:82:ad:c3:47:fa:a5:35: f8:bf:f2:32:b9:54:7d:14:cf:ca:b1:94:82:d0:25:27:71:18: fc:85:fd:ec:d1:5c:50:e9:e9:8b:e2:0c:5f:df:8a:a5:16:4b: 35:b2:5e:d1:06:2f:67:69:a1:3b:ed:7c:5a:e7:e3:c7:7a:5b: 25:1c:28:63:40:96:37:0c:c3:61:c2:6f:40:9c:3e:7f:46:6a: 5d:49:ee:00:95:f7:50:1b:c9:ef:7a:c8:d2:e8:e3:74:f7:98: 94:62:ea:d4:52:3c:a9:a1:2e:a1:b8:43:0e:9e:f8:ff:e4:b2: 3b:2d:d3:c4:88:29:10:63:65:64:2e:9e:52:1e:94:e9:90:78: 47:39:68:91:75:d8:08:6b:14:05:90:1e:87:b1:92:cf:00:e6: 52:3e:dc:e6:3c:47:53:4b:16:f2:4f:50:1c:d3:c6:b4:72:04: a3:c4:f8:98:75:c1:a0:15:8d:22:f0:1c:12:b0:95:17:87:8f: 75:18:c8:ff:e4:06:9b:a0:50:78:66:49:75:50:fd:4c:e0:08: 11:0f:6d:99:7e:6e:2d:0d:6a:50:04:cc:56:a6:67:f7:08:af: 4a:f1:b0:4b -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZp3w7nG1sFTuHt6pi2jWWkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTExMTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTEyMjhhM2EzZDAwNjU0ZDRiMTExNzMzODc0ZTMxZDgwYzBhMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy4oBYDC5BwmF2IXGkI3YRzu6Hir fT1ZE90cvKFnjzwg6A0iKZyCBUYwThcdp/b7ga20O3Xet+yz1N2VUg3rGORFj+NP eaRZiBjOh6G1/YFRgsUHCFf35bx4T/Jez6c5d4w+hNNLAnsXQGU/u5f07XWlDs4j XlCzHgKt7p6lkp0JMLf1Mw49Tz+dSHCcn8E/UQCjjkDgpT8yryYXmR9cUkRY61Ns MYAkbK/b8aAcqblXT7rfKh+hxSmB42tttkrd191rMT+www1XfUxtWuSjoHHx/YAE OSTxiZLNAh/BQwlEi8zl5nrJnmNJyUFJJwMqKXomUYvuFbO3uvfBrsPB8QIDAQAB o4ICujCCArYwHQYDVR0OBBYEFM4SKKOj0AZU1LERczh04x2AwKIMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2Y5ZDdi YS1hNDRiLTQ2MmQtYjMzMy1mZDdkYmRmOGUzMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvZjlkN2Jh LWE0NGItNDYyZC1iMzMzLWZkN2RiZGY4ZTMwMC8xL3poSW9vNlBRQmxUVXNSRnpP SFRqSFlEQW9ndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVjbJAwQAw854MA0EAgACMAcDBQAqFJOAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDjRAIDAz6fMA0GCSqGSIb3DQEBCwUAA4IB AQAuhNGVuCzqBfrOjJDfC/hBtIyA8cIef/knQcoxN4Ktw0f6pTX4v/IyuVR9FM/K sZSC0CUncRj8hf3s0VxQ6emL4gxf34qlFks1sl7RBi9naaE77Xxa5+PHelslHChj QJY3DMNhwm9AnD5/RmpdSe4AlfdQG8nvesjS6ON095iUYurUUjypoS6huEMOnvj/ 5LI7LdPEiCkQY2VkLp5SHpTpkHhHOWiRddgIaxQFkB6HsZLPAOZSPtzmPEdTSxby T1Ac08a0cgSjxPiYdcGgFY0i8BwSsJUXh491GMj/5AaboFB4Zkl1UP1M4AgRD22Z fm4tDWpQBMxWpmf3CK9K8bBL -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:54 2025 by rpki-client