This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer (raw, json) Hash identifier: US1WWowtD20Ym/tJXanN2IvsPVyN8AcNYu8t3QrEVuA= Subject key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD9F5B3DE80269A0E2F4E253494F6FB76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 12:49:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 50281 IP: 193.46.89.0/24 IP: 193.106.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f5:b3:de:80:26:9a:0e:2f:4e:25:34:94:f6:fb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 12:49:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:b3:7d:ad:0a:f0:cd:f4:29:a0:bc:0f:49: a8:3c:76:4e:8d:5b:85:2c:80:ef:30:d2:5d:60:31: b3:5f:ef:9b:a8:9e:dc:4c:57:54:d3:c2:03:d9:23: cc:f0:47:1c:01:1e:6f:95:c3:38:16:bb:31:75:b7: fd:5a:c6:b7:c3:fb:8f:32:6b:02:4b:c5:9f:00:34: 33:45:e2:ba:56:96:5c:b3:42:53:e0:ed:98:1e:4c: 12:c6:e4:f5:91:a6:50:cc:b7:c0:84:83:90:3d:cc: cc:fa:98:a5:d9:20:dd:65:d9:6e:40:c1:08:fb:2c: a4:7c:dc:5f:3b:7f:ac:63:13:0c:b9:35:78:2f:ab: 20:86:3a:b0:29:2f:b2:21:33:0c:20:56:2c:9d:2c: 3f:1e:ec:44:91:6e:cd:f4:6e:fb:97:d3:bb:c6:74: e4:1d:af:48:62:f9:5b:1e:9a:c5:12:4c:00:9b:37: 94:27:12:da:85:db:bf:a1:44:e7:5b:5f:a8:6a:1e: 86:9a:d9:26:b9:e8:2f:d2:02:48:37:c9:d8:45:51: 79:39:3b:dd:ad:61:25:cb:87:0f:55:bd:63:87:b6: d8:5a:93:65:97:50:e4:e0:fd:a8:fc:ad:65:78:d4: c0:2a:a4:20:89:d2:a2:34:3f:cc:d1:ac:23:8d:27: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.89.0/24 193.106.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50281 Signature Algorithm: sha256WithRSAEncryption 3f:4d:06:50:0f:99:54:31:81:0e:c8:23:be:2f:20:8d:b7:01: 71:73:05:04:b3:a3:92:17:31:eb:1a:ab:ff:4a:12:e7:b7:13: 95:8e:21:3d:d2:90:ac:e8:7e:54:7b:e3:6f:91:8b:6b:bd:fa: b6:ce:5d:a8:a6:cd:a9:49:cc:3b:6c:27:a3:4c:71:16:e2:79: 0d:01:b5:cd:12:d3:60:d3:a8:d0:a6:b4:b1:51:32:9e:bc:18: 10:58:06:29:86:55:12:a7:83:c0:6b:5f:d4:35:95:15:6b:eb: 8c:36:01:0a:9d:1e:49:a2:1b:e8:54:b6:37:d4:36:fa:db:9a: 44:16:80:cd:53:00:c7:fb:2f:b2:e8:eb:98:c2:e5:a6:c4:24: 97:2c:79:51:3f:b3:41:bc:38:69:da:c2:a0:0d:88:fa:5a:ad: 33:00:50:e3:b2:ba:2b:a2:4a:71:7c:95:cf:a6:9d:7f:b6:f6: a4:27:1f:43:cd:be:74:8a:ed:59:a1:29:ac:17:7b:8f:0e:31: c9:47:b9:22:ed:c5:f6:3c:db:f8:5d:7b:12:8f:b1:c9:d9:cf: 31:6a:c4:97:f9:8b:8b:3b:54:86:c5:67:66:08:ee:3c:f9:9b: 81:25:39:56:04:1d:80:7f:1b:22:1d:a1:e5:44:d4:00:74:71: 8c:1b:8e:2c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZrZ9bPegCaaDi9OJTSU9vt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTI0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTJiY2MxMGQxNmIwZmVkMjg1NWU5Mjk1ZmM0MDlkNjUwN2I0M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcuzfa0K8M30KaC8D0moPHZOjVuF LIDvMNJdYDGzX++bqJ7cTFdU08ID2SPM8EccAR5vlcM4Frsxdbf9Wsa3w/uPMmsC S8WfADQzReK6VpZcs0JT4O2YHkwSxuT1kaZQzLfAhIOQPczM+pil2SDdZdluQMEI +yykfNxfO3+sYxMMuTV4L6sghjqwKS+yITMMIFYsnSw/HuxEkW7N9G77l9O7xnTk Ha9IYvlbHprFEkwAmzeUJxLahdu/oUTnW1+oah6Gmtkmuegv0gJIN8nYRVF5OTvd rWEly4cPVb1jh7bYWpNll1Dk4P2o/K1leNTAKqQgidKiND/M0awjjSfsawIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFM4rzBDRaw/tKFXpKV/ECdZQe0PWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2RmNzU3 Yy00OTlkLTQwMjAtYTVjMy02MTE2MWE2NWQzZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZGY3NTdj LTQ5OWQtNDAyMC1hNWMzLTYxMTYxYTY1ZDNkNi8xL3ppdk1FTkZyRC0wb1Zla3BY OFFKMWxCN1E5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwS5ZAwQCwWo8MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDEaTANBgkqhkiG9w0BAQsFAAOCAQEAP00GUA+ZVDGBDsgjvi8gjbcB cXMFBLOjkhcx6xqr/0oS57cTlY4hPdKQrOh+VHvjb5GLa736ts5dqKbNqUnMO2wn o0xxFuJ5DQG1zRLTYNOo0Ka0sVEynrwYEFgGKYZVEqeDwGtf1DWVFWvrjDYBCp0e SaIb6FS2N9Q2+tuaRBaAzVMAx/svsujrmMLlpsQklyx5UT+zQbw4adrCoA2I+lqt MwBQ47K6K6JKcXyVz6adf7b2pCcfQ82+dIrtWaEprBd7jw4xyUe5Iu3F9jzb+F17 Eo+xydnPMWrEl/mLiztUhsVnZgjuPPmbgSU5VgQdgH8bIh2h5UTUAHRxjBuOLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:27 2025 by rpki-client