This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer File: znys-nNc7q_dKiFMCe5yRpQlJQ4.cer (raw, json) Hash identifier: 5/kgF2PpBkRuHzGmTX6bHxmGUsxG3ogG7XBV3EpcYjw= Subject key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F147BE0575D738F4C3E531908462130 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201089 IP: 185.124.148.0/22 IP: 193.58.117.0/24 IP: 2a13:4940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7b:e0:57:5d:73:8f:4c:3e:53:19:08:46:21:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:a4:50:83:40:02:b9:7f:03:bc:85:3e:df: b4:23:39:fb:0c:c7:12:b4:29:25:02:23:2d:81:de: 4b:ac:d2:73:4d:8d:4c:5d:df:44:e4:7e:27:3a:24: 77:1f:b1:8d:d6:68:f7:20:98:33:58:af:e0:f0:d4: 7a:3d:b0:ed:b8:df:1c:1e:4d:c5:f9:f0:43:81:bd: b3:3f:3a:1e:e8:8a:99:64:01:62:d9:86:5b:6c:3d: b8:45:f1:f7:00:f2:c5:18:26:be:59:38:75:58:e1: 86:ee:6a:67:e3:8f:d1:b8:cb:6f:18:35:67:ed:b4: f1:49:c6:e2:36:f1:c5:29:ae:ae:46:6c:c8:9e:48: ea:db:ee:58:80:68:3f:66:01:48:8a:83:fb:ca:63: eb:b6:00:53:40:fa:53:b5:e3:bb:8a:6e:c4:f5:cb: ea:0c:c7:d7:f5:68:e7:29:ca:02:e2:e3:1c:4b:cf: ea:ab:58:c4:67:43:bd:f1:92:5e:b4:06:bc:af:55: c4:37:3c:b2:11:c2:92:e7:6a:63:69:e4:f4:b3:87: 92:30:8c:2e:1c:3f:12:4c:67:d3:51:4b:5f:c9:51: 5a:2b:9e:44:fb:af:f5:01:a0:c2:a3:f3:a7:d5:2c: 9e:29:0b:0f:8f:be:4d:54:96:c5:31:a8:4a:46:2a: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.148.0/22 193.58.117.0/24 IPv6: 2a13:4940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201089 Signature Algorithm: sha256WithRSAEncryption 7f:94:d9:83:8a:28:54:12:1a:6e:b5:17:0b:6e:d3:03:63:63: 2d:41:7e:35:b0:f4:d9:94:8d:c0:5e:72:5b:f0:de:3e:87:8b: dd:b1:2f:2c:27:d5:1d:b5:26:ca:05:e8:28:77:83:48:7d:f0: 0b:b8:60:3d:ac:08:cf:44:ab:2e:03:dc:63:ae:71:6a:b2:31: 38:61:a3:52:3e:f7:03:9c:6a:20:74:77:ae:e0:6c:d7:d8:a7: 3b:ed:76:7d:29:2b:54:dd:65:9e:4f:0a:e0:a7:17:b0:08:2a: 29:2b:6d:47:08:f4:90:fa:c8:2c:bc:f3:ea:75:b9:85:d4:5f: af:a2:10:5f:d1:7a:95:51:5e:de:d9:e0:ed:a1:c4:5d:fe:9e: 86:eb:5b:8b:05:89:7f:4b:43:25:65:c2:42:dc:dd:15:bb:73: 5b:d3:9c:ec:7e:dd:c6:98:a2:41:e4:99:47:86:55:df:62:f7: 1e:1c:16:5d:8a:ab:8c:1e:b8:cd:33:7a:59:2d:89:8a:8d:f3: 09:2f:c2:5a:62:a0:b8:33:40:03:b9:54:d9:9f:ac:ef:a4:8e: 40:e3:25:f5:51:64:dc:57:35:2f:b0:f4:23:b0:62:38:c0:d3: 36:10:b1:b9:a4:a7:e9:c2:21:5b:46:b0:f3:e1:c2:da:ab:dd: 83:4e:44:45 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FHvgV11zj0w+UxkIRiEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTdjYWNmYTczNWNlZWFmZGQyYTIxNGMwOWVlNzI0Njk0MjUyNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxikUINAArl/A7yFPt+0Izn7DMcS tCklAiMtgd5LrNJzTY1MXd9E5H4nOiR3H7GN1mj3IJgzWK/g8NR6PbDtuN8cHk3F +fBDgb2zPzoe6IqZZAFi2YZbbD24RfH3APLFGCa+WTh1WOGG7mpn44/RuMtvGDVn 7bTxScbiNvHFKa6uRmzInkjq2+5YgGg/ZgFIioP7ymPrtgBTQPpTteO7im7E9cvq DMfX9WjnKcoC4uMcS8/qq1jEZ0O98ZJetAa8r1XENzyyEcKS52pjaeT0s4eSMIwu HD8STGfTUUtfyVFaK55E+6/1AaDCo/On1SyeKQsPj75NVJbFMahKRiogAQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM58rPpzXO6v3SohTAnuckaUJSUOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2E2MzZl ZC1kMjBmLTQ4MDItOTI4Ni1iODRlZGEyZTg0NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTYzNmVk LWQyMGYtNDgwMi05Mjg2LWI4NGVkYTJlODQ2YS8xL3pueXMtbk5jN3FfZEtpRk1D ZTV5UnBRbEpRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXyUAwQAwTp1MA0EAgACMAcDBQMqE0lAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRgTANBgkqhkiG9w0BAQsFAAOCAQEAf5TZ g4ooVBIabrUXC27TA2NjLUF+NbD02ZSNwF5yW/DePoeL3bEvLCfVHbUmygXoKHeD SH3wC7hgPawIz0SrLgPcY65xarIxOGGjUj73A5xqIHR3ruBs19inO+12fSkrVN1l nk8K4KcXsAgqKSttRwj0kPrILLzz6nW5hdRfr6IQX9F6lVFe3tng7aHEXf6ehutb iwWJf0tDJWXCQtzdFbtzW9Oc7H7dxpiiQeSZR4ZV32L3HhwWXYqrjB64zTN6WS2J io3zCS/CWmKguDNAA7lU2Z+s76SOQOMl9VFk3Fc1L7D0I7BiOMDTNhCxuaSn6cIh W0aw8+HC2qvdg05ERQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:59 2026 by rpki-client