This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer (raw, json) Hash identifier: pxuMoFitiVCGnpoFjukVJZqxKBDYjYyH36acc+23UNw= Subject key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADB5D03B4C104BD1FA167D6CFFF1B3111 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 19:21:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42151 IP: 45.147.148.0/22 IP: 195.242.142.0/23 IP: 2a11:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:5d:03:b4:c1:04:bd:1f:a1:67:d6:cf:ff:1b:31:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 19:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cef501d2d052185d4f6569218c28bf35859000fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:25:1d:92:c4:8d:20:dd:2f:0b:04:ef:04: 7d:94:e5:78:d6:d8:ca:02:6e:fe:c2:fe:c8:07:78: 11:46:03:60:db:a2:86:70:64:d8:e4:af:b0:1a:b6: 64:3e:ba:8b:93:cb:4f:97:c6:c1:bb:70:b2:2c:8a: 5c:bb:62:87:53:ef:b1:e3:33:cc:3e:64:aa:5c:11: 20:b4:8a:d5:13:b5:36:c6:2f:21:b9:42:d2:09:fd: aa:48:5b:c8:b3:2e:63:a4:3a:9d:99:b8:b8:65:3f: c3:fb:9e:b3:9c:74:fc:88:42:f4:d6:5b:e3:53:b8: 3b:bf:ed:a3:44:1b:1f:26:6c:aa:56:ab:e9:31:20: 42:df:4a:da:17:57:04:8b:72:29:f2:63:a3:5d:3b: 83:94:5b:1f:4c:09:ca:93:cd:d0:90:44:7c:52:fe: 5f:fe:38:c6:e7:e2:25:10:0f:45:23:36:c6:5e:80: 7b:ee:11:e8:00:3e:7b:ab:5f:6f:dc:58:d8:e8:f8: 43:c1:5b:34:27:b0:1f:42:c4:38:c7:4b:f7:e6:48: dd:40:25:b4:ff:21:ec:92:6b:fb:b2:73:cf:4e:d2: 77:50:d4:be:e4:ea:a6:5e:9d:4a:d0:03:4b:e6:04: e6:1a:17:8c:4d:35:1c:1c:7b:bf:86:01:bf:58:7b: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.148.0/22 195.242.142.0/23 IPv6: 2a11:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42151 Signature Algorithm: sha256WithRSAEncryption 08:d5:07:b5:0b:e3:22:64:48:6c:7e:e9:34:4b:a3:83:5f:21: 9d:ac:0b:95:c1:f3:6b:cf:78:31:79:46:bb:b6:61:c7:94:01: 97:03:e8:28:ca:24:3d:41:4f:9c:7d:bc:f1:ae:f3:0c:71:80: 1d:32:0a:30:c2:c4:05:d7:2c:d9:f0:47:0c:35:81:23:92:d2: 92:bd:8c:1e:c7:0c:3b:62:ae:c1:fa:1f:44:47:2d:05:98:6a: 03:8a:9d:ad:19:9b:b8:e9:45:a7:bd:fa:09:45:2a:5a:0c:38: 2a:a4:9e:e0:9c:91:58:0e:bc:b3:57:49:d4:25:07:6c:4a:40: aa:cd:0c:7d:e1:53:4c:08:5f:72:fb:c0:d4:0f:da:b4:87:74: a0:2a:b7:69:bc:79:41:fa:19:bd:ce:c6:6e:32:0b:94:df:d3: f0:d3:e6:fb:81:8e:f6:ba:e1:39:64:e7:d8:13:ce:53:0f:f6: 23:f1:fd:24:bc:56:19:24:20:31:28:21:ca:73:e0:53:a1:46: 6f:23:65:a5:ae:2f:bf:86:d8:3a:55:b5:e3:70:c2:fc:01:18: ac:55:59:06:12:87:bd:69:20:a9:e2:7f:7e:73:ca:0e:68:2a: 8e:6b:95:39:8b:65:15:54:cc:23:48:db:23:73:1c:7d:59:e6: a0:72:21:06 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZrbXQO0wQS9H6Fn1s//GzERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTkyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY1MDFkMmQwNTIxODVkNGY2NTY5MjE4YzI4YmYzNTg1OTAwMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cYlHZLEjSDdLwsE7wR9lOV41tjK Am7+wv7IB3gRRgNg26KGcGTY5K+wGrZkPrqLk8tPl8bBu3CyLIpcu2KHU++x4zPM PmSqXBEgtIrVE7U2xi8huULSCf2qSFvIsy5jpDqdmbi4ZT/D+56znHT8iEL01lvj U7g7v+2jRBsfJmyqVqvpMSBC30raF1cEi3Ip8mOjXTuDlFsfTAnKk83QkER8Uv5f /jjG5+IlEA9FIzbGXoB77hHoAD57q19v3FjY6PhDwVs0J7AfQsQ4x0v35kjdQCW0 /yHskmv7snPPTtJ3UNS+5OqmXp1K0ANL5gTmGheMTTUcHHu/hgG/WHvZvwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM71AdLQUhhdT2VpIYwovzWFkAD8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzk5OTY0 Ny0xZTdmLTQ5OWItOWQ0OC1mOTUwMzI3Zjg4ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvOTk5NjQ3 LTFlN2YtNDk5Yi05ZDQ4LWY5NTAzMjdmODhkMy8xL3p2VUIwdEJTR0YxUFpXa2hq Q2lfTllXUUFQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZOUAwQBw/KOMA0EAgACMAcDBQMqERaAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCkpzANBgkqhkiG9w0BAQsFAAOCAQEACNUH tQvjImRIbH7pNEujg18hnawLlcHza894MXlGu7Zhx5QBlwPoKMokPUFPnH288a7z DHGAHTIKMMLEBdcs2fBHDDWBI5LSkr2MHscMO2KuwfofREctBZhqA4qdrRmbuOlF p736CUUqWgw4KqSe4JyRWA68s1dJ1CUHbEpAqs0MfeFTTAhfcvvA1A/atId0oCq3 abx5QfoZvc7GbjILlN/T8NPm+4GO9rrhOWTn2BPOUw/2I/H9JLxWGSQgMSghynPg U6FGbyNlpa4vv4bYOlW143DC/AEYrFVZBhKHvWkgqeJ/fnPKDmgqjmuVOYtlFVTM I0jbI3McfVnmoHIhBg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:07 2025 by rpki-client