This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer File: zvhOR0nMzVg_78d5fD1nsQiYoYg.cer (raw, json) Hash identifier: aWipBnsuUjfYuy51/dFNCCJrz/31O2kk9UL3FmFDdoA= Subject key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFECDFD8ABD7CEB274512F87152B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43627 IP: 46.36.64.0/19 IP: 185.61.64.0/22 IP: 213.164.119.0 -- 213.164.127.255 IP: 2a02:6be0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fe:cd:fd:8a:bd:7c:eb:27:45:12:f8:71:52:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef84e4749cccd583fefc7797c3d67b10898a188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:be:aa:ae:4d:6b:a1:37:9b:90:15:a3:6e: 7e:43:f7:a8:6e:bb:f9:55:44:0c:bb:a3:b8:b4:44: 32:a6:87:d8:c5:3a:8c:26:96:5c:42:ed:c0:53:f1: 4d:df:62:d4:7a:18:e8:e2:75:ec:05:41:6f:37:d6: 6b:34:52:7a:5e:12:b5:e3:dc:a2:37:fa:de:17:45: 5b:50:0f:04:cb:24:7c:94:79:6a:5a:cc:c6:d7:c2: 48:fe:f9:22:ae:d4:a5:bc:88:5e:8f:42:3b:eb:41: 6c:52:88:a5:f4:48:d7:a2:81:32:dc:f1:4b:bf:94: c1:eb:fa:6c:1d:c8:3a:c7:42:9a:a4:ee:17:0c:d2: 06:ad:c4:aa:18:48:34:18:3f:c7:69:1d:29:cf:8f: c5:18:86:8b:32:d9:a0:61:23:77:2e:16:cf:dc:f0: e9:54:89:19:d7:39:44:a8:11:14:6f:82:cd:bf:df: 0b:97:96:94:b3:79:e6:f2:e8:ec:8b:74:2c:4d:23: bf:f0:af:9e:57:8c:82:71:fb:4a:c5:e0:82:9c:9a: 75:40:5c:72:39:4b:0f:a0:14:13:4b:14:5b:d3:e9: 97:62:46:cd:cf:60:01:a4:b5:c1:84:f9:bb:92:f4: a1:84:f5:0b:0f:bb:62:8d:5b:9e:f8:e6:cd:70:6c: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.64.0/19 185.61.64.0/22 213.164.119.0-213.164.127.255 IPv6: 2a02:6be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43627 Signature Algorithm: sha256WithRSAEncryption 9a:0c:be:2f:80:5d:7f:d3:de:67:be:17:1a:62:73:d2:93:2d: 94:d1:fa:04:64:7c:39:c4:d3:02:44:fc:77:b0:47:f2:2b:37: 1b:0e:fa:31:cc:ce:56:a8:ab:59:19:f4:3d:ca:47:b0:82:80: c5:c9:e7:13:b2:83:1f:39:5a:b7:25:1f:c3:b6:ee:d4:f7:58: ae:d2:0a:34:45:55:e9:5c:0c:f1:78:2b:e2:88:00:53:b6:19: b2:c9:10:fb:46:c1:2c:e1:a0:ec:fa:41:6a:f5:28:40:5c:03: 17:92:05:fe:ef:4b:3c:a5:c6:bb:a5:ac:2f:31:85:3c:17:31: 7c:b6:e9:fb:fc:02:ad:7b:5e:bf:e3:94:a1:bf:a5:e2:a0:b2: 8f:9c:cf:b4:2b:fc:49:3d:8f:9d:76:bf:c5:f7:05:45:20:c8: 2d:48:61:74:a8:6c:02:ea:9c:a3:fa:ae:0e:67:a3:4d:fb:c2: 3f:c3:23:bb:dd:1e:0e:74:f5:4c:2f:71:1d:46:fb:9e:ab:63: 0e:cb:d5:9b:36:ed:e3:c8:05:19:1b:95:f2:3f:14:f1:ad:b0: e5:15:2e:7c:68:1b:04:de:ac:ff:52:21:f0:10:80:e1:f7:b2: d1:3b:7b:b7:79:a0:1c:d7:98:49:67:4a:ee:dd:c2:4b:ba:c2: 4d:cf:2f:96 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt6Wv7N/Yq9fOsnRRL4cVK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY4NGU0NzQ5Y2NjZDU4M2ZlZmM3Nzk3YzNkNjdiMTA4OThhMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bm+qq5Na6E3m5AVo25+Q/eobrv5 VUQMu6O4tEQypofYxTqMJpZcQu3AU/FN32LUehjo4nXsBUFvN9ZrNFJ6XhK149yi N/reF0VbUA8EyyR8lHlqWszG18JI/vkirtSlvIhej0I760FsUoil9EjXooEy3PFL v5TB6/psHcg6x0KapO4XDNIGrcSqGEg0GD/HaR0pz4/FGIaLMtmgYSN3LhbP3PDp VIkZ1zlEqBEUb4LNv98Ll5aUs3nm8ujsi3QsTSO/8K+eV4yCcftKxeCCnJp1QFxy OUsPoBQTSxRb0+mXYkbNz2ABpLXBhPm7kvShhPULD7tijVue+ObNcGxrjwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFM74TkdJzM1YP+/HeXw9Z7EImKGIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzE2YWZl NS1hNDQzLTQyMzctYWQ3ZC1kYWI2ZTJjNWZkZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMTZhZmU1 LWE0NDMtNDIzNy1hZDdkLWRhYjZlMmM1ZmRkOS8xL3p2aE9SMG5NelZnXzc4ZDVm RDFuc1FpWW9ZZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQFLiRAAwQCuT1AMAwDBADVpHcDBAfVpAAwDQQC AAIwBwMFACoCa+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKprMA0GCSqGSIb3 DQEBCwUAA4IBAQCaDL4vgF1/095nvhcaYnPSky2U0foEZHw5xNMCRPx3sEfyKzcb DvoxzM5WqKtZGfQ9ykewgoDFyecTsoMfOVq3JR/Dtu7U91iu0go0RVXpXAzxeCvi iABTthmyyRD7RsEs4aDs+kFq9ShAXAMXkgX+70s8pca7pawvMYU8FzF8tun7/AKt e16/45Shv6XioLKPnM+0K/xJPY+ddr/F9wVFIMgtSGF0qGwC6pyj+q4OZ6NN+8I/ wyO73R4OdPVML3EdRvueq2MOy9WbNu3jyAUZG5XyPxTxrbDlFS58aBsE3qz/UiHw EIDh97LRO3u3eaAc15hJZ0ru3cJLusJNzy+W -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:41 2026 by rpki-client