This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer File: zyd930p03lPkSDeVcTv7E1oRQN4.cer (raw, json) Hash identifier: ChgRLWcj4TTbeX9goL3cp1ErZJIsuoBTf5rmcikGig0= Subject key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A93D05F06A2D75DFD189D9F1598C3F78C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 21:54:57 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213413 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:d0:5f:06:a2:d7:5d:fd:18:9d:9f:15:98:c3:f7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 21:54:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf277ddf4a74de53e4483795713bfb135a1140de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:65:57:44:2f:e9:b8:32:1c:3d:f9:cd:0c: 1a:44:33:c2:b9:30:4c:41:93:b8:16:45:ec:df:c9: 2c:1a:f9:c9:b5:94:e0:9e:e0:d5:8a:78:b3:2b:12: d0:94:4e:7b:c3:97:56:3c:b1:d6:8a:df:a9:d6:ce: a7:d3:fa:d1:a2:d7:1b:80:32:d7:31:6a:db:aa:b8: 7c:26:a1:00:01:d9:35:b4:07:8f:0d:67:ee:bf:23: 95:33:a1:a9:59:f9:36:55:f3:ae:da:a8:03:90:4b: c7:cc:7f:d8:eb:a4:d5:54:79:fb:5c:1d:86:73:8a: 02:30:e2:7e:b3:c2:87:93:40:dd:d4:e1:7b:04:07: 85:36:1b:0c:b5:d1:dc:18:5b:1a:61:aa:cb:aa:59: 45:9b:f9:88:bd:ca:b7:98:46:fa:0c:e3:08:d5:25: df:19:64:bf:61:5a:75:d2:48:e6:70:15:3a:01:9a: 64:26:a4:b6:a4:f7:d9:bb:18:ec:2f:63:f4:1f:e8: 93:b9:69:73:19:dd:e9:9f:ef:41:91:e3:9c:c3:5d: d9:23:2c:2a:88:80:fe:b7:22:07:7b:ff:46:61:7a: ac:26:35:f4:97:06:0b:37:7a:43:cf:83:94:20:b4: 1e:fc:f6:7a:fe:3c:3f:cc:9e:1b:90:b3:be:2f:f2: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213413 Signature Algorithm: sha256WithRSAEncryption 1d:e2:3f:19:2e:35:9d:2c:4e:1f:5a:5f:c1:2c:4f:e1:f8:0b: 61:63:2c:97:bf:88:c1:8a:46:dc:4d:25:fa:89:90:e2:84:32: 6c:c7:13:32:9f:60:ec:82:d0:4b:7a:a6:5a:fa:7c:e9:83:d8: 04:17:7e:fa:93:20:2d:6e:e6:9a:08:02:4e:84:12:2c:be:ce: 69:f0:8c:dc:d2:1a:00:ca:91:43:f6:2f:60:75:77:46:a2:c5: 51:d1:c7:09:7c:7e:62:33:2c:f1:20:10:9e:f4:52:8b:94:86: a7:1d:ee:b8:e6:ed:6e:48:9b:23:2a:80:7a:cc:ff:c5:13:f3: 50:46:1b:f9:c7:38:4e:cc:bd:cf:97:47:7b:f7:ee:3c:e6:ba: 4a:ba:76:cd:63:e0:b3:22:fa:16:ba:22:cb:f2:4e:9a:f9:87: 5a:6a:3e:e0:90:63:70:49:21:66:57:c6:60:5c:05:05:f5:26: 5b:11:16:f4:5b:25:60:66:e0:04:0b:c4:02:74:5d:ad:23:91: 06:30:07:72:2c:ef:13:96:d6:58:ac:ac:f8:d4:50:ab:79:de: 21:93:32:46:fc:a0:34:28:68:bc:a7:db:f9:3a:99:eb:3d:62: 8e:c0:bb:1d:ff:a1:72:f2:fe:91:71:b3:3f:0f:50:0a:1f:87: e4:56:4c:65 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZqT0F8Gotdd/RidnxWYw/eMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MjE1NDU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI3N2RkZjRhNzRkZTUzZTQ0ODM3OTU3MTNiZmIxMzVhMTE0MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZdlV0Qv6bgyHD35zQwaRDPCuTBM QZO4FkXs38ksGvnJtZTgnuDVinizKxLQlE57w5dWPLHWit+p1s6n0/rRotcbgDLX MWrbqrh8JqEAAdk1tAePDWfuvyOVM6GpWfk2VfOu2qgDkEvHzH/Y66TVVHn7XB2G c4oCMOJ+s8KHk0Dd1OF7BAeFNhsMtdHcGFsaYarLqllFm/mIvcq3mEb6DOMI1SXf GWS/YVp10kjmcBU6AZpkJqS2pPfZuxjsL2P0H+iTuWlzGd3pn+9BkeOcw13ZIywq iID+tyIHe/9GYXqsJjX0lwYLN3pDz4OUILQe/PZ6/jw/zJ4bkLO+L/IpHwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFM8nfd9KdN5T5Eg3lXE7+xNaEUDeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc4ZTYx NjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzhl NjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2OTQyLzAvQ0YyNzdEREY0QTc0 REU1M0U0NDgzNzk1NzEzQkZCMTM1QTExNDBERS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQaUw DQYJKoZIhvcNAQELBQADggEBAB3iPxkuNZ0sTh9aX8EsT+H4C2FjLJe/iMGKRtxN JfqJkOKEMmzHEzKfYOyC0Et6plr6fOmD2AQXfvqTIC1u5poIAk6EEiy+zmnwjNzS GgDKkUP2L2B1d0aixVHRxwl8fmIzLPEgEJ70UouUhqcd7rjm7W5ImyMqgHrM/8UT 81BGG/nHOE7Mvc+XR3v37jzmukq6ds1j4LMi+ha6IsvyTpr5h1pqPuCQY3BJIWZX xmBcBQX1JlsRFvRbJWBm4AQLxAJ0Xa0jkQYwB3Is7xOW1lisrPjUUKt53iGTMkb8 oDQoaLyn2/k6mes9Yo7Aux3/oXLy/pFxsz8PUAofh+RWTGU= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:13 2025 by rpki-client