This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer File: ZHVxhUcvFtU-62ihQONRP6McMdg.cer (raw, json) Hash identifier: xu2rinHwYCW6zIzeif98f/UXijc0RPXyL15riI61gvc= Subject key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DAC83C42AD4BFC986043348A71D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208923 IP: 185.70.224.0/22 IP: 2a05:2c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:da:c8:3c:42:ad:4b:fc:98:60:43:34:8a:71:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64757185472f16d53eeb68a140e3513fa31c31d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:db:2e:e6:3b:48:5d:d4:fe:ba:a6:35:09: 37:01:87:e2:0b:82:4c:83:07:74:c4:64:23:6a:7b: 77:72:c3:63:56:54:16:47:97:63:f2:a4:24:bb:9a: 42:8e:cd:96:1a:af:11:2d:91:66:b5:3e:68:98:1c: bf:1f:78:9b:ab:86:08:c7:be:a1:9a:3b:81:9c:dc: f0:b1:95:74:24:38:cc:5a:d4:a5:96:32:ea:c2:46: 60:77:61:5a:8b:57:66:2a:4f:0f:82:89:bf:84:ba: 37:cc:b8:7b:17:4f:d0:82:a5:34:fb:b0:03:a2:ae: 72:2d:7f:22:ae:c8:b0:ee:d2:42:21:78:55:9a:56: 6a:b3:6d:4a:57:57:c6:86:1c:9b:83:3f:7c:42:05: 2a:ac:30:14:f7:8f:40:99:98:b0:b0:77:07:00:91: 03:8c:b7:ca:bd:fe:8e:80:cf:13:93:97:0f:5a:ff: bf:4e:6a:1d:bd:58:02:ed:25:0f:7f:8d:20:ce:6d: c2:2e:e6:42:c1:a4:cc:d5:56:24:07:3e:07:39:cf: 30:f4:66:7a:cb:2e:91:e2:bd:1d:ef:14:72:08:3f: 41:02:95:6c:d1:6b:c0:15:ff:49:33:9d:33:4c:72: cc:d7:55:12:88:fc:9f:87:58:de:96:fb:a5:ba:a2: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.224.0/22 IPv6: 2a05:2c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208923 Signature Algorithm: sha256WithRSAEncryption 3b:cf:25:fd:f3:a9:84:8d:08:44:b5:73:88:91:af:e7:8b:d5: ab:76:9a:51:b8:32:0a:a4:c0:52:a1:44:a6:77:7d:89:ef:99: 52:96:11:51:4c:97:4f:de:f0:1e:56:bb:36:b9:c9:74:81:f2: e5:67:5f:81:63:cd:9d:bd:33:fd:4c:40:f0:4d:90:ac:4d:c8: 46:c3:61:9b:73:0f:69:97:d4:86:f6:ac:92:82:91:62:66:05: 97:61:00:27:fc:29:92:52:aa:77:50:4a:26:11:32:6a:de:a5: d3:44:0b:14:78:6f:e9:e6:12:9b:29:8a:ad:c9:92:10:0e:d7: 76:b7:04:55:22:07:e7:e5:1e:73:76:4b:72:7b:92:59:12:0e: 10:2c:9f:4c:28:2e:bf:09:d0:84:82:f8:f4:40:d8:4f:57:ad: 9b:85:5c:87:8b:93:a8:fc:f0:8d:80:72:c1:6b:e4:ae:92:3a: cd:73:5e:88:cb:c0:17:b8:d2:fc:05:a9:1f:2c:44:18:ac:39: 85:02:92:4d:c5:21:23:0f:3f:77:be:0f:77:34:ef:4f:14:b2: 1b:89:f6:51:b4:0e:73:f9:01:e3:99:b3:77:a2:2f:de:bb:69: 73:2e:5f:61:b8:2b:51:de:3f:13:4e:e2:11:a5:f3:73:b0:5c: 20:d9:fb:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WNrIPEKtS/yYYEM0inHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc1NzE4NTQ3MmYxNmQ1M2VlYjY4YTE0MGUzNTEzZmEzMWMzMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKTbLuY7SF3U/rqmNQk3AYfiC4JM gwd0xGQjant3csNjVlQWR5dj8qQku5pCjs2WGq8RLZFmtT5omBy/H3ibq4YIx76h mjuBnNzwsZV0JDjMWtSlljLqwkZgd2Fai1dmKk8Pgom/hLo3zLh7F0/QgqU0+7AD oq5yLX8irsiw7tJCIXhVmlZqs21KV1fGhhybgz98QgUqrDAU949AmZiwsHcHAJED jLfKvf6OgM8Tk5cPWv+/TmodvVgC7SUPf40gzm3CLuZCwaTM1VYkBz4HOc8w9GZ6 yy6R4r0d7xRyCD9BApVs0WvAFf9JM50zTHLM11USiPyfh1jelvuluqJ8vwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGR1cYVHLxbVPutooUDjUT+jHDHYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzEyMTQ0 Ny1kMmM4LTRjYTgtOTZjNy04MWQxMDA3M2RlZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMTIxNDQ3 LWQyYzgtNGNhOC05NmM3LTgxZDEwMDczZGVlNC8xL1pIVnhoVWN2RnRVLTYyaWhR T05SUDZNY01kZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUbgMA0EAgACMAcDBQMqBSyAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwGzANBgkqhkiG9w0BAQsFAAOCAQEAO88l/fOphI0I RLVziJGv54vVq3aaUbgyCqTAUqFEpnd9ie+ZUpYRUUyXT97wHla7NrnJdIHy5Wdf gWPNnb0z/UxA8E2QrE3IRsNhm3MPaZfUhvaskoKRYmYFl2EAJ/wpklKqd1BKJhEy at6l00QLFHhv6eYSmymKrcmSEA7XdrcEVSIH5+Uec3ZLcnuSWRIOECyfTCguvwnQ hIL49EDYT1etm4Vch4uTqPzwjYBywWvkrpI6zXNeiMvAF7jS/AWpHyxEGKw5hQKS TcUhIw8/d74PdzTvTxSyG4n2UbQOc/kB45mzd6Iv3rtpcy5fYbgrUd4/E07iEaXz c7BcINn7gQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:56:43 2026 by rpki-client