This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer File: zpZPmDefAyCnGR5tZ4iABTWIWSg.cer (raw, json) Hash identifier: i/RcmEc31caJJQYEh30jYzoTY0eCppX0igVQwS9eQzQ= Subject key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34DB7453C0B055CFDFF67885775DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214955 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4d:b7:45:3c:0b:05:5c:fd:ff:67:88:57:75:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce964f98379f0320a7191e6d6788800535885928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:2c:d7:af:86:37:35:38:2d:90:a3:1b:8a: 02:c0:6c:d1:c4:7a:12:db:6c:6b:6d:c9:5b:f8:c7: 92:2b:14:f8:ee:7e:2f:05:44:2c:db:b2:a7:d7:c6: d6:0c:50:aa:e1:9d:0e:3f:fa:05:ed:13:bf:53:ef: d9:e2:98:12:ca:ab:0b:da:5e:a1:2f:e6:c6:cc:c1: e8:87:a7:89:58:b3:e8:92:18:93:cd:42:cb:ca:4c: d5:aa:1e:28:e1:a9:b2:0a:32:73:94:6e:6b:be:30: ca:f9:64:10:13:11:df:99:d1:7c:f7:ac:59:a2:c1: 4d:f7:88:28:f8:72:ff:63:da:f5:c8:67:03:77:03: 88:38:7e:57:94:ff:49:54:7c:25:7f:bd:8b:0f:3f: 32:f4:51:25:b6:12:62:56:d0:3e:1d:59:cf:06:c9: 37:2a:5f:37:c1:a1:07:db:91:c3:87:b8:be:de:40: eb:cb:2f:3a:73:d7:49:a0:21:b1:80:d5:12:78:b0: 47:70:27:c9:02:15:86:33:b3:ed:4f:de:a1:3b:42: 38:34:dc:14:e3:db:13:6a:c5:57:82:aa:4b:05:9a: 76:d4:07:49:e4:a8:36:19:55:c8:ee:d2:99:cb:4a: ff:76:d9:d6:24:ab:bc:3f:51:bc:03:cd:61:94:62: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214955 Signature Algorithm: sha256WithRSAEncryption 26:f0:c5:75:52:28:5e:7b:49:31:2c:bc:73:7f:01:aa:1f:16: 67:7f:f4:3a:60:b9:1f:7c:7e:d2:eb:71:8c:d1:a4:6f:cd:ea: 60:07:78:59:10:2b:81:10:69:5a:bf:6e:eb:4f:e1:85:a4:3b: 3b:ba:9c:2c:d3:81:1a:27:cf:45:22:7e:6f:95:0e:f8:fa:d2: 04:c8:c0:9c:f1:85:f3:4e:ad:2e:1b:34:52:20:80:69:cd:2e: 6c:fc:2b:f5:26:a9:2a:1c:db:b8:1a:0e:97:b7:29:4e:91:47: 5c:f9:f5:45:fc:4f:fe:14:dd:66:89:06:34:7a:b3:51:24:4f: bc:cb:2c:45:19:11:10:24:05:f0:c5:a9:b5:9d:66:75:5f:06: 68:f4:eb:1c:f5:c1:a2:1b:67:65:0b:ff:44:e1:09:d5:77:ba: 9c:d8:0b:8d:4f:67:5b:43:1c:a6:1a:8d:9e:af:69:03:8c:e7: d0:f1:e6:95:7c:23:51:56:42:97:ba:f6:d8:44:64:1e:30:4c: 3e:7f:03:54:48:1a:38:ee:d4:ea:7b:40:0a:f6:ed:60:bc:42: e3:09:11:f3:d9:e5:57:4f:06:37:3d:74:91:75:a3:68:fb:86: d5:f8:98:e2:17:39:eb:92:52:af:26:34:8f:20:7f:e1:1f:d6: 67:6c:a9:41 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4o023RTwLBVz9/2eIV3XfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTk2NGY5ODM3OWYwMzIwYTcxOTFlNmQ2Nzg4ODAwNTM1ODg1OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0s16+GNzU4LZCjG4oCwGzRxHoS 22xrbclb+MeSKxT47n4vBUQs27Kn18bWDFCq4Z0OP/oF7RO/U+/Z4pgSyqsL2l6h L+bGzMHoh6eJWLPokhiTzULLykzVqh4o4amyCjJzlG5rvjDK+WQQExHfmdF896xZ osFN94go+HL/Y9r1yGcDdwOIOH5XlP9JVHwlf72LDz8y9FElthJiVtA+HVnPBsk3 Kl83waEH25HDh7i+3kDryy86c9dJoCGxgNUSeLBHcCfJAhWGM7PtT96hO0I4NNwU 49sTasVXgqpLBZp21AdJ5Kg2GVXI7tKZy0r/dtnWJKu8P1G8A81hlGKfVQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFM6WT5g3nwMgpxkebWeIgAU1iFkoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNmOTll NjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2Y5 OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3NzkyLzAvQ0U5NjRGOTgzNzlG MDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDR6sw DQYJKoZIhvcNAQELBQADggEBACbwxXVSKF57STEsvHN/AaofFmd/9DpguR98ftLr cYzRpG/N6mAHeFkQK4EQaVq/butP4YWkOzu6nCzTgRonz0Uifm+VDvj60gTIwJzx hfNOrS4bNFIggGnNLmz8K/UmqSoc27gaDpe3KU6RR1z59UX8T/4U3WaJBjR6s1Ek T7zLLEUZERAkBfDFqbWdZnVfBmj06xz1waIbZ2UL/0ThCdV3upzYC41PZ1tDHKYa jZ6vaQOM59Dx5pV8I1FWQpe69thEZB4wTD5/A1RIGjju1Op7QAr27WC8QuMJEfPZ 5VdPBjc9dJF1o2j7htX4mOIXOeuSUq8mNI8gf+Ef1mdsqUE= -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:40 2026 by rpki-client