This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer File: zxT86bGaXupTLhfYPajB3NHeGMA.cer (raw, json) Hash identifier: 7b+6s9GeIZqarDw0ssqHLP5FVGii/O8djSuDO1DjP0o= Subject key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355807B7B92D883826A39144E538E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48444 IP: 193.219.118.0/24 IP: 2001:67c:788::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:07:b7:b9:2d:88:38:26:a3:91:44:e5:38:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:f9:66:4c:1d:b8:ee:a5:58:64:44:5b:db: ea:c2:83:16:3d:11:61:0d:04:7f:d5:1c:18:95:10: a7:87:f1:49:05:f4:50:04:9d:b5:92:b0:92:90:58: 14:d7:60:1e:b8:51:b0:e1:47:d3:79:ef:1d:00:f7: 03:a5:64:a1:f7:f1:fe:61:c2:e3:63:77:2e:ec:59: 8f:4b:e2:36:0e:6f:dd:0d:d5:9f:5e:25:1b:cd:72: bb:77:64:7a:07:e3:77:5b:8b:bc:31:ad:f4:42:1c: 4c:10:f8:ff:41:0d:0a:3a:d6:31:9b:cf:8a:ce:90: 1a:75:74:b1:09:a6:c3:7a:d6:44:8f:a9:be:87:76: 7b:99:f6:ba:ae:e4:d9:b1:b0:8f:89:5f:4b:48:6d: b8:33:b4:51:1d:37:b4:8a:1f:46:1a:1c:2f:c9:49: 8e:d0:bc:cb:bb:bf:f1:8c:aa:08:76:64:90:d3:03: b4:de:71:90:1c:b8:07:81:c5:08:dd:f9:98:12:7b: 5d:1d:1b:4e:a0:cd:a7:39:1a:5a:15:d0:48:e9:30: 8a:a6:8c:c3:67:39:d1:cc:bd:1a:d2:c1:1e:aa:09: 6a:a9:b7:2d:fb:38:ac:8d:9c:13:72:20:cd:f0:fa: 9d:57:8b:55:73:08:71:58:75:24:d1:79:e2:89:44: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.118.0/24 IPv6: 2001:67c:788::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48444 Signature Algorithm: sha256WithRSAEncryption 92:f7:f7:cf:a7:0f:57:6c:7e:4b:3e:aa:c6:d5:37:4c:57:94: ae:ca:ec:a1:4c:d3:7c:0e:60:08:5e:64:9f:4d:f7:2d:7c:3c: ee:dd:ab:22:e0:b0:bc:d9:a4:9a:cd:84:8b:bd:03:96:8e:39: dc:f9:32:b0:b7:d0:c9:13:02:10:9f:d4:f4:9e:d7:d6:55:25: 04:9a:43:d3:f7:6c:9e:74:c3:9d:62:35:99:44:92:ee:88:b5: 7d:9a:94:a6:bf:45:29:8b:2b:88:5d:4a:77:2b:ee:72:cb:a6: e4:7c:53:f1:c0:b4:0e:25:50:9b:8b:d9:61:d9:51:31:ba:d8: f2:c0:64:99:85:f7:ec:74:8a:44:04:84:fe:42:60:7f:58:4c: 58:60:4f:c9:88:f0:80:61:bf:8d:d9:e5:b2:5e:8d:42:2c:be: 42:21:74:74:80:cb:ea:0a:08:54:e8:76:05:8f:03:bd:b0:33: 1e:44:53:91:49:e0:5e:3f:15:fd:e0:f7:25:04:26:04:f5:07: cc:c7:57:e7:00:a2:b6:55:33:78:f9:de:f2:40:01:0d:dd:55: 5f:ff:d7:5e:4e:eb:82:7c:22:9a:88:7c:2e:c5:27:da:f6:0c: 96:3b:ba:a6:6a:d2:bf:34:3f:c5:23:18:40:a1:b9:16:52:6f: d4:95:df:dd -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4NVgHt7ktiDgmo5FE5TjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjE0ZmNlOWIxOWE1ZWVhNTMyZTE3ZDgzZGE4YzFkY2QxZGUxOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti75ZkwduO6lWGREW9vqwoMWPRFh DQR/1RwYlRCnh/FJBfRQBJ21krCSkFgU12AeuFGw4UfTee8dAPcDpWSh9/H+YcLj Y3cu7FmPS+I2Dm/dDdWfXiUbzXK7d2R6B+N3W4u8Ma30QhxMEPj/QQ0KOtYxm8+K zpAadXSxCabDetZEj6m+h3Z7mfa6ruTZsbCPiV9LSG24M7RRHTe0ih9GGhwvyUmO 0LzLu7/xjKoIdmSQ0wO03nGQHLgHgcUI3fmYEntdHRtOoM2nORpaFdBI6TCKpozD ZznRzL0a0sEeqglqqbct+zisjZwTciDN8PqdV4tVcwhxWHUk0XniiURPwwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFM8U/Omxml7qUy4X2D2owdzR3hjAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2FkM2Fl NS1jZTJhLTQ4NWYtYWFiMy01OWMxMDg3ZTQ4NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYWQzYWU1 LWNlMmEtNDg1Zi1hYWIzLTU5YzEwODdlNDg1Ni8xL3p4VDg2YkdhWHVwVExoZllQ YWpCM05IZUdNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwdt2MA8EAgACMAkDBwAgAQZ8B4gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAL08MA0GCSqGSIb3DQEBCwUAA4IBAQCS9/fPpw9X bH5LPqrG1TdMV5SuyuyhTNN8DmAIXmSfTfctfDzu3asi4LC82aSazYSLvQOWjjnc +TKwt9DJEwIQn9T0ntfWVSUEmkPT92yedMOdYjWZRJLuiLV9mpSmv0UpiyuIXUp3 K+5yy6bkfFPxwLQOJVCbi9lh2VExutjywGSZhffsdIpEBIT+QmB/WExYYE/JiPCA Yb+N2eWyXo1CLL5CIXR0gMvqCghU6HYFjwO9sDMeRFORSeBePxX94PclBCYE9QfM x1fnAKK2VTN4+d7yQAEN3VVf/9deTuuCfCKaiHwuxSfa9gyWO7qmatK/ND/FIxhA obkWUm/Uld/d -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:18 2026 by rpki-client