This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer File: zmdqMChOFLAsxt2qA053VAbkYaY.cer (raw, json) Hash identifier: Dxrt2dqR65/XUElVQMhXzzVpcEqNhdK7x+Md8bfire4= Subject key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2D3B0947D4DC9A38C65D213EC0AA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208905 IP: 45.80.88.0/22 IP: 78.138.56.0/23 IP: 78.138.59.0 -- 78.138.60.255 IP: 83.229.31.0/24 IP: 2a0e:9cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d3:b0:94:7d:4d:c9:a3:8c:65:d2:13:ec:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce676a30284e14b02cc6ddaa034e775406e461a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:46:60:b5:99:61:ba:2d:f2:16:6f:e6:9e: fb:5d:79:99:af:90:42:32:35:20:ce:ed:58:d6:db: 8b:0b:30:f5:17:1a:af:b0:4b:83:9b:18:fe:3a:4e: b0:ee:83:87:f6:f0:05:7f:0b:4d:a7:2e:50:29:c7: d6:ea:d6:16:96:77:00:cf:38:1a:34:a7:ce:4b:bb: 58:1c:56:d8:8a:b4:d4:49:26:e0:77:df:2b:d9:cf: fa:d1:a3:5e:11:61:d3:25:45:82:ff:2b:51:9d:a7: 23:91:ee:a9:02:b2:1a:05:08:af:b4:6a:90:ba:db: 8c:5b:40:da:13:19:04:82:2d:21:b5:c2:e4:31:f3: 55:cf:8e:8b:15:b4:60:08:11:2a:12:90:2e:5e:3e: 35:83:88:6f:d7:93:62:39:d4:81:2a:4b:cf:c0:29: dc:9c:4d:6d:3d:db:a4:83:fc:b6:ae:83:3c:de:44: 40:8e:05:ec:ef:bb:28:bd:e9:06:ce:6d:6f:25:3e: 4a:05:94:f6:2f:03:21:ba:4a:00:1e:7b:60:8a:f5: 78:38:69:58:24:b2:54:99:9b:8e:1b:f5:e1:c7:0a: 9d:8b:02:be:fe:99:b3:59:89:68:97:ba:05:9d:85: c9:aa:53:8a:68:60:c6:b5:b2:bf:71:da:63:95:93: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.88.0/22 78.138.56.0/23 78.138.59.0-78.138.60.255 83.229.31.0/24 IPv6: 2a0e:9cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208905 Signature Algorithm: sha256WithRSAEncryption 11:3d:f6:9e:d1:2b:bc:84:33:b5:fc:64:47:f0:b8:08:c6:72: 9a:47:da:a5:3e:4c:b4:c2:e7:0e:00:41:da:79:e4:00:6e:eb: aa:76:35:08:b8:81:62:98:43:5b:c7:b2:0b:19:40:06:a8:c1: 46:9c:c4:a5:2f:28:a5:a7:bd:53:67:d1:f1:99:de:05:9e:9f: 43:ca:b3:c2:ee:43:36:0d:aa:42:fc:37:ac:b7:e4:68:c0:15: 78:3b:c1:0a:12:56:0d:06:f3:cb:99:69:55:b2:87:2c:9b:a4: 69:7e:e7:a9:3c:cd:48:dd:d6:10:d0:2e:3f:bd:37:6b:59:3a: 2b:42:e3:0c:e8:20:d4:ab:1a:34:69:50:c8:50:48:a6:e3:a6: 5a:0e:c0:95:ac:89:99:8b:9e:bc:1d:75:e8:14:80:01:03:0a: eb:c2:b1:96:cb:ea:b8:19:76:00:98:53:b7:a8:86:94:76:39: c5:f2:be:fa:b9:d6:89:c3:89:fd:2d:45:46:2e:b1:aa:6b:21: 20:0b:d8:56:9e:25:53:ca:24:d7:69:52:a8:b9:d5:90:82:51: c9:4d:32:e9:c1:6e:ce:b0:e2:cd:3e:26:13:e8:b8:bf:96:bf: b7:f2:b7:19:81:d8:0e:70:7c:77:91:50:eb:03:f4:66:c1:a1: d4:4d:1c:8d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt4otOwlH1NyaOMZdIT7AqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTY3NmEzMDI4NGUxNGIwMmNjNmRkYWEwMzRlNzc1NDA2ZTQ2MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00RGYLWZYbot8hZv5p77XXmZr5BC MjUgzu1Y1tuLCzD1FxqvsEuDmxj+Ok6w7oOH9vAFfwtNpy5QKcfW6tYWlncAzzga NKfOS7tYHFbYirTUSSbgd98r2c/60aNeEWHTJUWC/ytRnacjke6pArIaBQivtGqQ utuMW0DaExkEgi0htcLkMfNVz46LFbRgCBEqEpAuXj41g4hv15NiOdSBKkvPwCnc nE1tPdukg/y2roM83kRAjgXs77sovekGzm1vJT5KBZT2LwMhukoAHntgivV4OGlY JLJUmZuOG/XhxwqdiwK+/pmzWYlol7oFnYXJqlOKaGDGtbK/cdpjlZMmIQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFM5najAoThSwLMbdqgNOd1QG5GGmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2I4NjA1 YS0yMTM2LTQzODktYTQwNS1lYTYwNjU3MDk0NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYjg2MDVh LTIxMzYtNDM4OS1hNDA1LWVhNjA2NTcwOTQ2YS8xL3ptZHFNQ2hPRkxBc3h0MnFB MDUzVkFia1lhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCLVBYAwQBToo4MAwDBABOijsDBABOijwDBABT 5R8wDQQCAAIwBwMFAyoOnMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzAJMA0G CSqGSIb3DQEBCwUAA4IBAQARPfae0Su8hDO1/GRH8LgIxnKaR9qlPky0wucOAEHa eeQAbuuqdjUIuIFimENbx7ILGUAGqMFGnMSlLyilp71TZ9Hxmd4Fnp9DyrPC7kM2 DapC/Dest+RowBV4O8EKElYNBvPLmWlVsocsm6RpfuepPM1I3dYQ0C4/vTdrWTor QuMM6CDUqxo0aVDIUEim46ZaDsCVrImZi568HXXoFIABAwrrwrGWy+q4GXYAmFO3 qIaUdjnF8r76udaJw4n9LUVGLrGqayEgC9hWniVTyiTXaVKoudWQglHJTTLpwW7O sOLNPiYT6Li/lr+38rcZgdgOcHx3kVDrA/RmwaHUTRyN -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:53 2026 by rpki-client