This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer (raw, json) Hash identifier: 12BIZX69lFewrMpd8jDuxQ3B07BeBT/asKvFr/BHYAg= Subject key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA45A8BC525A653FDC7C8EB7F35CC7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.102.184.0/21 IP: 2a00:1070::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:45:a8:bc:52:5a:65:3f:dc:7c:8e:b7:f3:5c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:d5:c9:2b:88:c8:c2:2e:ea:7e:f0:26:46: bf:a9:c0:05:b7:b7:75:23:10:c2:0c:c8:ec:0c:85: 05:6f:36:29:70:48:70:66:cb:67:a9:e8:75:59:5d: a4:8d:f3:15:cf:fb:d9:50:94:29:63:5c:93:6b:67: a3:98:6d:85:38:7c:be:de:37:e0:94:02:61:73:5c: db:9b:e6:9a:8b:20:57:6f:74:37:aa:e3:b1:f2:a7: 49:ca:8a:aa:12:d9:67:93:93:d7:4e:d3:8d:b9:24: f1:e7:5b:18:d7:09:51:bf:b2:db:2e:15:a3:35:6b: 32:a9:4c:7a:fc:bd:67:dc:c1:8d:67:b8:77:8d:2b: 4f:2f:cb:64:13:0e:c7:34:10:bf:50:55:40:cc:b3: 04:fa:55:5e:fa:fa:04:36:76:1c:6c:aa:92:0a:de: f1:68:b7:55:09:9a:76:16:ff:fa:4a:d7:62:ff:6c: d1:b4:c7:b1:5e:9d:a4:67:23:50:fb:a6:02:4d:12: 7c:25:85:e1:6c:bc:27:65:88:ca:8a:47:8f:9d:09: 40:68:a7:01:02:c8:41:45:69:d7:12:ae:ce:8c:ea: 6f:51:3b:10:06:b7:d3:b3:b7:8f:ce:93:f0:b1:76: 6c:ab:b7:57:d2:da:87:12:11:c7:6d:ea:2b:49:d4: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.184.0/21 IPv6: 2a00:1070::/32 Signature Algorithm: sha256WithRSAEncryption 2f:2b:e4:a7:8f:e3:bc:b5:2c:a9:62:b3:f5:55:c7:df:44:06: 13:2b:79:b4:4d:3b:9b:8e:00:1e:87:b0:5f:9a:bb:1d:b7:ab: dc:c6:3e:ce:91:ef:2a:ce:e3:e1:64:d7:84:6b:e2:e3:24:17: 94:62:63:75:de:a1:69:88:d9:1d:57:13:56:28:65:26:cb:e9: 52:f6:97:1b:c6:70:c4:28:45:ca:94:eb:26:df:94:67:1c:65: 4f:87:b3:f7:b2:5e:0d:da:d8:04:39:0e:83:8c:8e:65:ab:d2: 39:6e:36:ef:02:e9:8a:f4:13:81:b9:3b:16:9b:e7:e9:e0:b1: 4a:e5:f8:f5:d0:0f:03:ee:6b:20:7f:5b:b8:24:ee:b8:ac:47: 63:48:a4:a9:b0:17:7b:4f:da:d6:91:08:e1:be:cd:a5:d5:63: 08:d0:3b:d7:a7:a5:79:2a:51:35:5c:ad:ac:fe:2b:e6:ea:42: 2c:29:58:a9:48:32:b4:a4:00:63:c2:3b:79:be:33:3b:43:83: ed:d0:2b:d0:bb:be:04:0a:ad:a9:ed:2c:b9:9c:0d:53:9f:ff: f4:5d:23:20:24:60:98:94:3b:c9:48:fe:2e:75:b7:a0:4f:f1: 3b:5b:5f:f8:ee:d1:22:d5:a6:b8:68:a6:fe:f7:b6:15:42:3c: 43:7a:d0:59 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9ykWovFJaZT/cfI6381zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWMzYjM0N2EyMTZiYzQzN2IwYmQ0Y2YwYmM4Y2RhNjVlOGMyZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtADVySuIyMIu6n7wJka/qcAFt7d1 IxDCDMjsDIUFbzYpcEhwZstnqeh1WV2kjfMVz/vZUJQpY1yTa2ejmG2FOHy+3jfg lAJhc1zbm+aaiyBXb3Q3quOx8qdJyoqqEtlnk5PXTtONuSTx51sY1wlRv7LbLhWj NWsyqUx6/L1n3MGNZ7h3jStPL8tkEw7HNBC/UFVAzLME+lVe+voENnYcbKqSCt7x aLdVCZp2Fv/6Stdi/2zRtMexXp2kZyNQ+6YCTRJ8JYXhbLwnZYjKikePnQlAaKcB AshBRWnXEq7OjOpvUTsQBrfTs7ePzpPwsXZsq7dX0tqHEhHHbeorSdSwgwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFM7Ds0eiFrxDewvUzwvIzaZejC07MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzdhNjgz Yi1mYTc4LTQxMTItYjZiNi0xNTVmYjNmZTI4N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvN2E2ODNi LWZhNzgtNDExMi1iNmI2LTE1NWZiM2ZlMjg3ZS8xL3pzT3pSNklXdkVON0M5VFBD OGpOcGw2TUxUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDW2a4MA0EAgACMAcDBQAqABBwMA0GCSqGSIb3 DQEBCwUAA4IBAQAvK+Snj+O8tSypYrP1VcffRAYTK3m0TTubjgAeh7Bfmrsdt6vc xj7Oke8qzuPhZNeEa+LjJBeUYmN13qFpiNkdVxNWKGUmy+lS9pcbxnDEKEXKlOsm 35RnHGVPh7P3sl4N2tgEOQ6DjI5lq9I5bjbvAumK9BOBuTsWm+fp4LFK5fj10A8D 7msgf1u4JO64rEdjSKSpsBd7T9rWkQjhvs2l1WMI0DvXp6V5KlE1XK2s/ivm6kIs KVipSDK0pABjwjt5vjM7Q4Pt0CvQu74ECq2p7Sy5nA1Tn//0XSMgJGCYlDvJSP4u dbegT/E7W1/47tEi1aa4aKb+97YVQjxDetBZ -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:22 2026 by rpki-client