This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer File: zt0NcV6X-5H3jQf-EGltpgFgURU.cer (raw, json) Hash identifier: Bg1d4WfNJDv+TUAkB+r0KOAXUOJKkBlzv3zd/w/GbDY= Subject key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB1DAE7C6DEC87C5FE15FCDB8BFBC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.202.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1d:ae:7c:6d:ec:87:c5:fe:15:fc:db:8b:fb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cedd0d715e97fb91f78d07fe10696da601605115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:54:f1:59:0e:69:92:3c:4e:24:92:94:3a:2e: c3:a5:5b:be:17:b4:04:da:61:db:81:09:eb:8d:35: 6d:c3:1a:82:b4:f9:ee:60:43:39:cd:a8:4d:0b:50: 05:0f:34:62:1a:fe:0e:16:1f:d0:99:41:f3:fb:1c: 91:f6:f5:d8:12:dd:7e:1b:ca:72:15:52:5b:f4:f4: 62:23:cf:00:fa:b7:9c:5b:0f:0e:04:9f:0c:40:c1: 6d:e3:cf:8d:aa:35:b4:fb:01:a5:13:37:dc:b9:d1: b0:b3:fb:ab:8e:5f:6f:b7:21:e6:91:48:e6:e1:80: 86:31:be:c6:ad:9d:b8:ca:26:6d:07:4d:6e:01:14: f8:76:c1:2f:a4:c2:0f:b6:a3:cd:f2:d2:ec:51:d3: 7f:6a:49:5d:8f:76:df:3b:1e:a1:23:e5:b2:c7:c2: 01:37:52:30:dc:e1:bd:98:cb:8c:93:98:7e:09:61: e0:41:76:13:0e:13:78:89:01:07:bb:de:fa:31:5c: fe:52:6a:5c:a7:c8:03:5f:24:a3:2b:32:f0:e8:b8: a4:95:f1:a9:2d:29:37:98:f5:0f:83:25:b2:8a:e3: c1:8d:f1:a8:95:6d:9d:8e:be:6c:ae:30:45:c0:7d: 80:99:69:68:dc:fc:6d:7b:de:d5:68:90:03:9f:36: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.224.0/22 Signature Algorithm: sha256WithRSAEncryption 09:22:99:cc:64:41:f9:d3:e3:73:14:e5:e0:89:ad:2f:bb:44: 35:8b:7c:9f:8e:30:04:6b:d0:63:dd:49:4a:28:42:8a:2c:52: a9:9d:a3:93:86:1e:fd:77:71:04:dc:74:db:72:21:68:56:9b: 75:38:d9:4f:8e:ce:35:5c:2c:10:9c:44:d9:0b:7e:c6:14:52: a5:b9:dd:a3:0a:df:96:e6:d7:2c:a9:43:f6:3f:dd:0c:ea:ab: 1e:79:ef:19:91:c1:e2:22:e8:09:f5:24:af:86:22:c3:ab:9d: dc:63:15:42:30:64:b6:49:3e:ae:97:b0:31:12:b6:d5:8e:53: 5d:0e:e5:52:5e:2b:3c:3b:42:e5:55:10:e6:dd:81:5a:1a:87: 37:cb:9e:c6:b4:74:70:43:ef:d1:7d:4e:da:23:4e:d7:74:ec: e7:38:0a:1c:bb:8c:49:a4:95:82:d0:ac:83:81:73:3e:b5:69: bf:b4:ce:2a:34:4b:d6:81:2d:fd:06:c1:ed:38:08:e8:15:34: 86:f8:ef:38:4b:8d:3b:0f:e0:f4:fd:1c:18:cb:99:ce:f5:d5: 8d:be:b4:ff:13:25:81:9c:d3:59:a4:0c:5a:ef:15:da:37:ff: 1b:89:0b:f7:f1:28:9b:db:e6:b4:ae:46:99:dd:b4:a2:ce:e4: 7a:08:b7:10 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yx2ufG3sh8X+Ffzbi/vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWRkMGQ3MTVlOTdmYjkxZjc4ZDA3ZmUxMDY5NmRhNjAxNjA1MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VTxWQ5pkjxOJJKUOi7DpVu+F7QE 2mHbgQnrjTVtwxqCtPnuYEM5zahNC1AFDzRiGv4OFh/QmUHz+xyR9vXYEt1+G8py FVJb9PRiI88A+recWw8OBJ8MQMFt48+NqjW0+wGlEzfcudGws/urjl9vtyHmkUjm 4YCGMb7GrZ24yiZtB01uART4dsEvpMIPtqPN8tLsUdN/akldj3bfOx6hI+Wyx8IB N1Iw3OG9mMuMk5h+CWHgQXYTDhN4iQEHu976MVz+Umpcp8gDXySjKzLw6LiklfGp LSk3mPUPgyWyiuPBjfGolW2djr5srjBFwH2AmWlo3Pxte97VaJADnza1GQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM7dDXFel/uR940H/hBpbaYBYFEVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzMzYTE5 ZC0yYzAzLTQ0ZDAtOGNiYy1hYWYzMjE3MWVhYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzNhMTlk LTJjMDMtNDRkMC04Y2JjLWFhZjMyMTcxZWFhMS8xL3p0ME5jVjZYLTVIM2pRZi1F R2x0cGdGZ1VSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCucrgMA0GCSqGSIb3DQEBCwUAA4IBAQAJIpnM ZEH50+NzFOXgia0vu0Q1i3yfjjAEa9Bj3UlKKEKKLFKpnaOThh79d3EE3HTbciFo Vpt1ONlPjs41XCwQnETZC37GFFKlud2jCt+W5tcsqUP2P90M6qseee8ZkcHiIugJ 9SSvhiLDq53cYxVCMGS2ST6ul7AxErbVjlNdDuVSXis8O0LlVRDm3YFaGoc3y57G tHRwQ+/RfU7aI07XdOznOAocu4xJpJWC0KyDgXM+tWm/tM4qNEvWgS39BsHtOAjo FTSG+O84S407D+D0/RwYy5nO9dWNvrT/EyWBnNNZpAxa7xXaN/8biQv38Sib2+a0 rkaZ3bSizuR6CLcQ -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:13 2026 by rpki-client