This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer (raw, json) Hash identifier: 8W9Z0vEGX5yfASwrC54fflyAivr+MxKT/6XcSzKrvLo= Subject key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4D3DDD27D6470C06E2A75D31AA030 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42151 IP: 45.147.148.0/22 IP: 195.242.142.0/23 IP: 2a11:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d3:dd:d2:7d:64:70:c0:6e:2a:75:d3:1a:a0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef501d2d052185d4f6569218c28bf35859000fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:25:1d:92:c4:8d:20:dd:2f:0b:04:ef:04: 7d:94:e5:78:d6:d8:ca:02:6e:fe:c2:fe:c8:07:78: 11:46:03:60:db:a2:86:70:64:d8:e4:af:b0:1a:b6: 64:3e:ba:8b:93:cb:4f:97:c6:c1:bb:70:b2:2c:8a: 5c:bb:62:87:53:ef:b1:e3:33:cc:3e:64:aa:5c:11: 20:b4:8a:d5:13:b5:36:c6:2f:21:b9:42:d2:09:fd: aa:48:5b:c8:b3:2e:63:a4:3a:9d:99:b8:b8:65:3f: c3:fb:9e:b3:9c:74:fc:88:42:f4:d6:5b:e3:53:b8: 3b:bf:ed:a3:44:1b:1f:26:6c:aa:56:ab:e9:31:20: 42:df:4a:da:17:57:04:8b:72:29:f2:63:a3:5d:3b: 83:94:5b:1f:4c:09:ca:93:cd:d0:90:44:7c:52:fe: 5f:fe:38:c6:e7:e2:25:10:0f:45:23:36:c6:5e:80: 7b:ee:11:e8:00:3e:7b:ab:5f:6f:dc:58:d8:e8:f8: 43:c1:5b:34:27:b0:1f:42:c4:38:c7:4b:f7:e6:48: dd:40:25:b4:ff:21:ec:92:6b:fb:b2:73:cf:4e:d2: 77:50:d4:be:e4:ea:a6:5e:9d:4a:d0:03:4b:e6:04: e6:1a:17:8c:4d:35:1c:1c:7b:bf:86:01:bf:58:7b: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.148.0/22 195.242.142.0/23 IPv6: 2a11:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42151 Signature Algorithm: sha256WithRSAEncryption 38:f3:bb:29:49:5f:ef:cd:9c:46:5d:7e:b0:c7:81:c9:cb:e9: b6:97:24:bb:54:e8:f9:53:05:e4:da:98:25:98:26:fb:6f:ff: 8c:12:e5:67:84:64:1c:26:19:c7:0a:ac:4f:0b:10:bb:ec:9f: ee:e6:0f:06:3c:30:4b:0b:2f:9d:ac:e8:7b:f1:b6:77:51:a8: 00:2b:ac:05:f2:0c:e0:87:29:06:59:77:bc:08:34:ac:4f:96: 00:d0:d2:b1:09:97:4e:f1:a9:86:63:58:0a:58:74:06:81:9e: a0:21:1c:bc:20:7b:5e:e1:ed:b9:fa:5b:e9:3f:a8:bb:85:fa: f5:c3:29:2f:08:2b:fc:37:b3:d9:60:4b:e3:03:de:09:7b:20: d7:6e:b6:49:66:7c:c7:c3:19:f5:71:4d:3a:e3:8a:9b:0a:f7: 46:cd:6d:fb:f9:91:9f:39:63:26:09:25:50:07:1e:5c:62:0f: ad:14:6e:06:a9:e9:e2:12:a8:1f:4a:b9:22:c2:8b:9f:7f:77: a4:42:1a:5b:95:f9:69:75:23:2b:f4:16:a3:f1:70:18:b3:10: 49:77:00:de:aa:84:ef:9a:ed:ef:2f:23:4c:dd:27:bd:e6:5d: 85:8c:a1:6a:00:d3:59:39:f1:15:e2:28:40:c2:7e:71:cb:53: 10:e5:55:8a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pNPd0n1kcMBuKnXTGqAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY1MDFkMmQwNTIxODVkNGY2NTY5MjE4YzI4YmYzNTg1OTAwMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cYlHZLEjSDdLwsE7wR9lOV41tjK Am7+wv7IB3gRRgNg26KGcGTY5K+wGrZkPrqLk8tPl8bBu3CyLIpcu2KHU++x4zPM PmSqXBEgtIrVE7U2xi8huULSCf2qSFvIsy5jpDqdmbi4ZT/D+56znHT8iEL01lvj U7g7v+2jRBsfJmyqVqvpMSBC30raF1cEi3Ip8mOjXTuDlFsfTAnKk83QkER8Uv5f /jjG5+IlEA9FIzbGXoB77hHoAD57q19v3FjY6PhDwVs0J7AfQsQ4x0v35kjdQCW0 /yHskmv7snPPTtJ3UNS+5OqmXp1K0ANL5gTmGheMTTUcHHu/hgG/WHvZvwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM71AdLQUhhdT2VpIYwovzWFkAD8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzk5OTY0 Ny0xZTdmLTQ5OWItOWQ0OC1mOTUwMzI3Zjg4ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvOTk5NjQ3 LTFlN2YtNDk5Yi05ZDQ4LWY5NTAzMjdmODhkMy8xL3p2VUIwdEJTR0YxUFpXa2hq Q2lfTllXUUFQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZOUAwQBw/KOMA0EAgACMAcDBQMqERaAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCkpzANBgkqhkiG9w0BAQsFAAOCAQEAOPO7 KUlf782cRl1+sMeBycvptpcku1To+VMF5NqYJZgm+2//jBLlZ4RkHCYZxwqsTwsQ u+yf7uYPBjwwSwsvnazoe/G2d1GoACusBfIM4IcpBll3vAg0rE+WANDSsQmXTvGp hmNYClh0BoGeoCEcvCB7XuHtufpb6T+ou4X69cMpLwgr/Dez2WBL4wPeCXsg1262 SWZ8x8MZ9XFNOuOKmwr3Rs1t+/mRnzljJgklUAceXGIPrRRuBqnp4hKoH0q5IsKL n393pEIaW5X5aXUjK/QWo/FwGLMQSXcA3qqE75rt7y8jTN0nveZdhYyhagDTWTnx FeIoQMJ+cctTEOVVig== -----END CERTIFICATE-----Generated at Sun Jan 25 20:27:42 2026 by rpki-client