This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer File: zlv1IB8YtAK45ii8d_IlL3aecPI.cer (raw, json) Hash identifier: 1EbpBqL2OJFJ+6VPkhaDdYGMaBvqQiBINm7BlEwtXnU= Subject key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910770F60B0EEDD088ECA3D7693E1B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16084 AS: 43450 AS: 43453 IP: 193.26.32.0/19 IP: 194.76.140.0/23 IP: 217.67.32.0/20 IP: 2a02:d20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:0f:60:b0:ee:dd:08:8e:ca:3d:76:93:e1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:77:34:b9:ea:08:51:84:ee:20:e5:d3:e8:e1: 20:ee:2c:c3:4f:45:d1:df:42:15:a9:85:f2:2e:a0: ca:8e:9a:d8:eb:a4:67:37:80:4d:5c:35:1d:f4:81: 2c:61:97:61:cb:e5:4c:1a:3b:1e:70:fb:4c:b5:cc: 88:5f:03:94:f8:ed:63:67:d1:31:c9:00:43:17:43: 94:86:98:7e:53:61:8d:33:7f:8e:ad:86:1d:49:96: 39:e8:32:52:2c:fe:8b:4f:f3:e0:a2:3e:e7:25:c4: 94:a6:f5:20:5e:d3:27:95:9a:8b:04:08:a7:7e:b6: fc:3e:15:dc:93:d1:e0:fd:d0:cd:1a:5b:d4:76:e4: fe:6b:8f:9e:68:67:01:24:a1:f5:c8:00:28:bd:88: 59:33:9a:72:43:cd:90:28:25:21:56:66:99:bd:fd: 96:95:a8:03:e7:bd:1a:68:88:17:4a:ab:dc:0e:4a: 41:cd:c4:e4:e6:6b:c7:b0:56:d4:d4:eb:d2:84:e8: 17:2c:dd:ca:ed:e7:88:e7:28:b8:25:83:66:2b:d1: a8:0d:10:49:41:2a:93:d9:89:21:4f:f1:38:91:fe: aa:b8:cf:4a:a8:a2:c6:03:12:fc:d2:9e:31:f6:d3: 36:ae:99:fb:40:89:c1:9f:9c:ae:36:77:1e:8c:df: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.32.0/19 194.76.140.0/23 217.67.32.0/20 IPv6: 2a02:d20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16084 43450 43453 Signature Algorithm: sha256WithRSAEncryption 2b:2c:43:ae:ea:41:3c:e1:b4:61:49:27:1f:b9:05:59:75:28: 0c:a6:c5:cf:62:1f:0f:0d:ee:89:22:22:11:d8:6b:ba:4a:3a: a1:96:a0:27:36:a6:66:b2:43:b3:53:ca:5f:c6:55:c0:2c:55: ba:45:31:5f:c5:35:fc:e0:8f:3f:e3:c3:6c:b8:5e:23:50:12: 49:53:01:06:02:a7:bc:a4:33:db:5f:34:65:81:6c:03:36:19: 76:d4:64:19:a8:62:26:42:48:de:95:5b:06:49:90:0b:fa:3d: 34:0f:ec:13:88:83:56:16:4a:20:08:80:11:ab:a7:67:39:fe: ae:06:e4:60:95:c1:96:6e:91:de:25:8c:ec:db:dc:99:f0:a5: 07:5e:4b:6a:f0:cd:da:dd:5d:0c:45:e2:6f:2b:d0:07:eb:0c: 9f:49:6b:b5:37:a3:9b:38:0c:ad:0a:d1:a3:25:f5:d6:32:e4: a5:c0:0a:9a:24:c4:8f:23:ce:a1:a4:1f:3f:10:9f:0b:96:b9: 28:42:46:6b:76:ad:62:0c:88:e1:85:ce:9d:19:61:e0:72:fe: a0:7e:9d:7b:3d:8a:09:06:0f:55:43:0f:21:79:bc:92:f7:24: bc:ee:c1:8e:c5:8e:6a:aa:c1:b2:e1:75:6e:27:66:c2:de:c0: 24:d5:61:62 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt5EHcPYLDu3QiOyj12k+GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTViZjUyMDFmMThiNDAyYjhlNjI4YmM3N2YyMjUyZjc2OWU3MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xc0ueoIUYTuIOXT6OEg7izDT0XR 30IVqYXyLqDKjprY66RnN4BNXDUd9IEsYZdhy+VMGjsecPtMtcyIXwOU+O1jZ9Ex yQBDF0OUhph+U2GNM3+OrYYdSZY56DJSLP6LT/Pgoj7nJcSUpvUgXtMnlZqLBAin frb8PhXck9Hg/dDNGlvUduT+a4+eaGcBJKH1yAAovYhZM5pyQ82QKCUhVmaZvf2W lagD570aaIgXSqvcDkpBzcTk5mvHsFbU1OvShOgXLN3K7eeI5yi4JYNmK9GoDRBJ QSqT2YkhT/E4kf6quM9KqKLGAxL80p4x9tM2rpn7QInBn5yuNncejN+SrQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFM5b9SAfGLQCuOYovHfyJS92nnDyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzFjNzkx Ny04YWE2LTRjNDMtOTJkZC03NDc2ZjQyZjJkOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMWM3OTE3 LThhYTYtNGM0My05MmRkLTc0NzZmNDJmMmQ5Yy8xL3psdjFJQjhZdEFLNDVpaThk X0lsTDNhZWNQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFwRogAwQBwkyMAwQE2UMgMA0EAgACMAcDBQMq Ag0gMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAj7UAgMAqboCAwCpvTANBgkqhkiG 9w0BAQsFAAOCAQEAKyxDrupBPOG0YUknH7kFWXUoDKbFz2IfDw3uiSIiEdhruko6 oZagJzamZrJDs1PKX8ZVwCxVukUxX8U1/OCPP+PDbLheI1ASSVMBBgKnvKQz2180 ZYFsAzYZdtRkGahiJkJI3pVbBkmQC/o9NA/sE4iDVhZKIAiAEaunZzn+rgbkYJXB lm6R3iWM7NvcmfClB15LavDN2t1dDEXibyvQB+sMn0lrtTejmzgMrQrRoyX11jLk pcAKmiTEjyPOoaQfPxCfC5a5KEJGa3atYgyI4YXOnRlh4HL+oH6dez2KCQYPVUMP IXm8kvckvO7BjsWOaqrBsuF1bidmwt7AJNVhYg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:06 2026 by rpki-client