This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer (raw, json) Hash identifier: kVEbBMKjRg1wiNFnB6EzpesD9qvc8wEHy3f4rLT32r4= Subject key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35CB0183A37264A8A8DFA07E049005 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25530 IP: 62.113.32.0 -- 62.113.57.255 IP: 185.171.80.0/22 IP: 2a0a:b100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:01:83:a3:72:64:a8:a8:df:a0:7e:04:90:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:68:e2:64:4e:20:68:d2:60:a8:ec:35:47: c0:a3:f7:23:63:f3:8b:ab:25:37:08:c8:05:9f:c1: f7:83:d3:d1:0f:41:0b:aa:15:14:a2:b5:d9:03:ad: 69:21:1d:fb:01:8f:7f:3b:e5:69:79:67:ef:d9:12: 44:00:da:e0:18:64:8f:5c:5a:12:9d:94:eb:2a:7c: a5:96:be:8e:c1:15:cb:9f:09:ce:7a:d5:85:d6:20: fe:18:a1:21:26:49:e1:14:cb:9c:40:83:a4:19:46: f0:84:8c:36:3c:57:92:9e:e2:13:1e:d0:85:85:69: c6:ee:1f:bb:71:a4:9a:09:c7:0c:02:95:6a:34:81: 0a:64:5e:0c:fd:79:3b:27:d5:60:8f:d2:ab:93:f0: 21:19:57:f2:c3:e7:60:96:8f:e9:13:fc:8b:27:46: 3e:57:06:ce:d9:18:da:91:a9:d1:d7:bc:9b:ef:72: 56:6c:51:9c:ef:4b:6a:9a:0f:78:80:80:35:ce:71: 7b:32:13:fc:ff:23:9f:8f:3f:a2:b4:1b:9c:02:a2: d8:02:79:c4:da:f2:32:16:ad:a5:1c:e7:72:34:b7: 16:bf:06:90:96:8c:21:ef:61:64:1d:a2:b7:af:0b: 3e:bb:3e:5b:c7:a3:34:d9:fb:95:31:e5:39:2c:cf: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.32.0-62.113.57.255 185.171.80.0/22 IPv6: 2a0a:b100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25530 Signature Algorithm: sha256WithRSAEncryption 42:21:fb:a4:db:a7:c1:91:e4:c2:7b:d4:52:8b:c8:fd:83:c4: 06:1c:8d:6a:3b:ad:b4:92:7d:9f:73:26:d0:dd:f1:12:65:36: df:d2:df:11:31:0b:50:8b:20:2b:a6:36:17:c1:4e:d2:22:2d: f2:df:5c:c9:52:eb:21:41:2e:31:e5:6e:9b:36:1d:4a:c6:68: 52:74:63:9b:fb:2a:ae:72:91:87:bb:55:95:83:0c:69:40:96: 43:23:ca:ca:55:5d:95:5b:fc:a5:96:b9:31:2a:b6:69:16:55: 05:f4:40:9b:1c:ec:e6:fb:57:a6:b6:6d:f6:5f:fa:fe:13:56: 74:72:d9:48:0d:d8:c7:f3:8f:57:6a:b3:10:1d:5b:5c:bc:31: 12:da:aa:f1:5d:fa:a7:87:4f:d7:e2:d1:9d:ca:0b:f0:49:ac: 3c:3b:05:23:ca:ad:02:fc:2e:d3:c1:6e:ee:d1:af:fc:01:bb: 1e:f3:63:c9:75:78:5b:77:2b:14:c1:b4:d3:2f:74:98:ca:31: 45:2f:9d:36:2a:fb:67:93:f9:3b:d3:93:c5:3c:1c:36:3b:07: b6:1e:db:22:eb:9a:0f:33:28:91:b0:ed:59:01:20:29:14:e1: 0b:c6:79:25:1a:4b:53:90:51:28:5f:59:2b:27:c4:5b:da:0e: 55:cd:66:b4 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt7NcsBg6NyZKio36B+BJAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTU2MzYwNjI0Y2MxYjRjNDlkYTcyYmMzMjVmNWJiNmFiNGQ4MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaFo4mROIGjSYKjsNUfAo/cjY/OL qyU3CMgFn8H3g9PRD0ELqhUUorXZA61pIR37AY9/O+VpeWfv2RJEANrgGGSPXFoS nZTrKnyllr6OwRXLnwnOetWF1iD+GKEhJknhFMucQIOkGUbwhIw2PFeSnuITHtCF hWnG7h+7caSaCccMApVqNIEKZF4M/Xk7J9Vgj9Krk/AhGVfyw+dglo/pE/yLJ0Y+ VwbO2RjakanR17yb73JWbFGc70tqmg94gIA1znF7MhP8/yOfjz+itBucAqLYAnnE 2vIyFq2lHOdyNLcWvwaQlowh72FkHaK3rws+uz5bx6M02fuVMeU5LM+0DQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFM5WNgYkzBtMSdpyvDJfW7arTYMAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzk1Nzdm OC1iOGI4LTQ5OTQtYjg1NS1hOThlZjMwMDg1ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOTU3N2Y4 LWI4YjgtNDk5NC1iODU1LWE5OGVmMzAwODU4MC8xL3psWTJCaVRNRzB4SjJuSzhN bDlidHF0Tmd3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAU+cSADBAE+cTgDBAK5q1AwDQQCAAIwBwMF AyoKsQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICY7owDQYJKoZIhvcNAQELBQAD ggEBAEIh+6Tbp8GR5MJ71FKLyP2DxAYcjWo7rbSSfZ9zJtDd8RJlNt/S3xExC1CL ICumNhfBTtIiLfLfXMlS6yFBLjHlbps2HUrGaFJ0Y5v7Kq5ykYe7VZWDDGlAlkMj yspVXZVb/KWWuTEqtmkWVQX0QJsc7Ob7V6a2bfZf+v4TVnRy2UgN2Mfzj1dqsxAd W1y8MRLaqvFd+qeHT9fi0Z3KC/BJrDw7BSPKrQL8LtPBbu7Rr/wBux7zY8l1eFt3 KxTBtNMvdJjKMUUvnTYq+2eT+TvTk8U8HDY7B7Ye2yLrmg8zKJGw7VkBICkU4QvG eSUaS1OQUShfWSsnxFvaDlXNZrQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:14 2026 by rpki-client