This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer (raw, json) Hash identifier: t2EKsoEuBaAXlSGQ0DgbWQCqplSbQEgNGZDMVEIVbzY= Subject key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E384084B700A59B1E7988950E8209FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205806 IP: 149.249.160.0 -- 149.249.243.255 IP: 185.147.168.0/22 IP: 185.178.24.0/22 IP: 185.206.44.0/22 IP: 213.208.40.0 -- 213.208.51.255 IP: 2a11:d480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:40:84:b7:00:a5:9b:1e:79:88:95:0e:82:09:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:c7:63:5c:bf:14:73:f9:a4:a2:fd:78:80: b6:97:0b:97:98:f0:06:21:ff:75:8a:87:fe:cd:59: 18:7c:0e:4b:b1:19:71:b7:23:19:fb:83:17:ee:0a: 3e:f6:9d:4d:b9:a4:91:67:f5:8b:f6:6d:1f:19:62: 16:ce:f8:c4:42:71:f7:90:45:22:19:5f:a3:f6:b1: 68:c8:56:31:a6:eb:12:76:54:f1:e4:a7:9b:52:a6: 45:c1:a5:6a:02:ae:70:a6:a6:43:2a:3a:8b:13:9c: f0:67:df:f9:46:3a:f6:ec:a4:48:32:d0:e4:65:ee: e1:f4:2a:19:96:b5:c3:e0:be:f8:26:78:dc:34:a7: 35:c0:6e:ad:c7:ce:06:18:be:e9:b1:eb:29:9b:ee: 96:7a:4a:fd:14:7c:6a:74:c0:57:d3:78:5d:ab:a0: d1:71:78:b8:f7:e4:e0:ea:36:9e:4e:bb:9d:a0:45: 2d:46:b7:4a:2c:c1:b5:68:04:fd:25:fd:a9:94:bc: ec:25:86:ab:91:a6:c9:02:aa:4c:c3:27:e4:50:b3: 17:6b:4f:5a:de:ce:68:69:1c:36:6e:4c:2c:9c:67: dd:1f:81:ea:50:1c:64:a1:c8:77:c3:4c:e4:6a:11: c3:46:91:17:a5:c3:8a:1a:32:9b:9c:c0:0c:a1:b9: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.160.0-149.249.243.255 185.147.168.0/22 185.178.24.0/22 185.206.44.0/22 213.208.40.0-213.208.51.255 IPv6: 2a11:d480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205806 Signature Algorithm: sha256WithRSAEncryption 0a:44:10:87:12:71:72:e9:38:7d:53:64:6b:88:af:e8:7a:f6: 8b:41:e1:17:a7:46:26:85:70:6e:e7:22:26:87:ec:6c:b8:7d: 9c:5f:fa:79:c1:d7:95:7d:ec:4e:06:9a:d6:6b:b6:f7:bb:e4: 8f:79:c2:18:e7:dd:ed:7a:f5:08:95:74:87:b0:84:2b:63:bb: 77:7b:b9:04:aa:2d:78:f7:fd:dd:ca:d2:65:eb:77:99:46:98: 10:10:85:79:25:1c:9c:c5:92:34:64:4e:62:a1:5d:af:19:39: fb:b6:b7:78:d7:c5:ee:d0:df:da:85:b5:35:1b:8b:7b:b3:a1: c6:35:fb:c7:a0:0d:d9:ee:3f:1d:33:ff:15:1c:fb:0c:ab:d6: fb:d4:79:d4:27:97:97:da:64:38:9f:18:79:25:a1:33:34:45: e2:4f:88:6d:c6:41:5f:b6:7d:16:ac:3c:d7:74:92:44:c3:32: 2b:a0:f4:df:54:1b:fe:dd:f9:4b:ab:3f:50:c6:23:98:fa:92: d7:71:59:33:89:ca:79:c2:f9:0d:84:33:f3:fd:2d:aa:3a:2b: 2e:bc:24:55:94:c5:c7:e7:83:3b:5d:10:35:80:e9:66:b4:30: 3c:24:d4:fd:4f:61:79:a3:b3:3b:09:1a:69:25:db:ec:49:93: a1:7b:03:fb -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt+OECEtwClmx55iJUOggn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGVmOThhZGJmNDJkNWJhY2QyNGNhZGIwYWRmMDkyYzQ1NzZkYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSDHY1y/FHP5pKL9eIC2lwuXmPAG If91iof+zVkYfA5LsRlxtyMZ+4MX7go+9p1NuaSRZ/WL9m0fGWIWzvjEQnH3kEUi GV+j9rFoyFYxpusSdlTx5KebUqZFwaVqAq5wpqZDKjqLE5zwZ9/5Rjr27KRIMtDk Ze7h9CoZlrXD4L74JnjcNKc1wG6tx84GGL7psespm+6Wekr9FHxqdMBX03hdq6DR cXi49+Tg6jaeTrudoEUtRrdKLMG1aAT9Jf2plLzsJYarkabJAqpMwyfkULMXa09a 3s5oaRw2bkwsnGfdH4HqUBxkoch3w0zkahHDRpEXpcOKGjKbnMAMobmlVwIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFGTvmK2/QtW6zSTK2wrfCSxFdtrzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2U0OWJj NS02OGM1LTRjZTItYTliOS0wM2M2ZmVhZjFkOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvZTQ5YmM1 LTY4YzUtNGNlMi1hOWI5LTAzYzZmZWFmMWQ5Zi8xL1pPLVlyYjlDMWJyTkpNcmJD dDhKTEVWMjJ2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUF BwEHAQH/BEcwRTA0BAIAATAuMAwDBAWV+aADBAKV+fADBAK5k6gDBAK5shgDBAK5 ziwwDAMEA9XQKAMEAtXQMDANBAIAAjAHAwUDKhHUgDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMDI+4wDQYJKoZIhvcNAQELBQADggEBAApEEIcScXLpOH1TZGuIr+h6 9otB4RenRiaFcG7nIiaH7Gy4fZxf+nnB15V97E4GmtZrtve75I95whjn3e169QiV dIewhCtju3d7uQSqLXj3/d3K0mXrd5lGmBAQhXklHJzFkjRkTmKhXa8ZOfu2t3jX xe7Q39qFtTUbi3uzocY1+8egDdnuPx0z/xUc+wyr1vvUedQnl5faZDifGHkloTM0 ReJPiG3GQV+2fRasPNd0kkTDMiug9N9UG/7d+UurP1DGI5j6ktdxWTOJynnC+Q2E M/P9Lao6Ky68JFWUxcfngztdEDWA6Wa0MDwk1P1PYXmjszsJGmkl2+xJk6F7A/s= -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:44 2026 by rpki-client