This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer (raw, json) Hash identifier: G0xK5i1EGjojo+zq629/K1DzIMUGI0OnKF/ayItMct4= Subject key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C668D7ACDD86A7F77F4A1E8BE6CC60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205614 AS: 212779 IP: 45.89.160.0/22 IP: 45.135.124.0/22 IP: 94.176.168.0/22 IP: 185.142.8.0/22 IP: 185.171.44.0/22 IP: 193.22.251.0/24 IP: 2a07:2800::/29 IP: 2a0d:1f80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:d7:ac:dd:86:a7:f7:7f:4a:1e:8b:e6:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2c:b7:4e:e7:8a:a8:2c:4c:51:6f:a5:c9:c0: 73:2f:1b:ea:d6:1a:2a:8f:14:7c:ba:80:a0:e2:8a: 10:07:46:02:97:d7:a3:ba:8d:e4:ba:6d:4c:e6:96: 2d:92:65:11:03:a7:95:18:4e:a4:9f:cf:99:7b:b0: 25:1c:06:09:0d:f3:9c:ee:e8:c8:34:11:1c:bf:30: 9f:e3:bf:c1:92:19:e0:a1:4e:2e:6a:29:78:4e:42: c1:ce:2b:e2:f9:1d:d0:d4:a5:6a:d8:3e:5e:48:9d: fd:65:05:09:3e:3c:cc:a4:75:56:d2:a0:2f:b6:a6: 11:b8:28:9d:06:3c:75:1a:ac:eb:d5:e9:88:e1:a3: 7a:a3:1f:5f:1c:cb:1a:0f:0e:af:a8:49:7d:ec:8f: 89:8b:d7:e1:eb:8d:1a:11:f7:e2:f1:ec:c9:2b:20: eb:2b:69:8a:d7:ff:83:21:ed:d0:9b:19:59:58:bb: 4f:cb:f3:59:1b:d0:12:ea:05:9c:30:bd:c9:90:c2: 4b:71:ca:5f:26:65:95:00:51:87:ff:b8:06:e6:1d: cc:5a:ae:fa:9d:4b:94:35:c0:eb:98:c5:eb:42:25: ca:f4:9a:66:bb:68:6e:85:1e:44:38:14:f1:58:b3: bc:3f:b3:99:2c:34:0b:d7:34:57:35:80:ca:96:fe: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.160.0/22 45.135.124.0/22 94.176.168.0/22 185.142.8.0/22 185.171.44.0/22 193.22.251.0/24 IPv6: 2a07:2800::/29 2a0d:1f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205614 212779 Signature Algorithm: sha256WithRSAEncryption 5e:8d:ce:2c:65:33:0e:70:03:9a:90:73:29:96:d1:96:89:cd: 0e:51:01:75:db:20:f7:23:5e:b7:80:4f:a4:60:b1:a4:db:32: 46:8a:39:72:84:09:70:16:22:28:59:27:e1:73:71:90:b3:a3: e2:69:76:69:59:16:22:5a:58:74:8f:e9:0f:07:a9:87:7b:7e: 22:17:9c:a2:da:1b:6b:a7:c6:17:c1:2e:24:80:b6:30:09:e2: 92:03:4b:4c:11:0a:f5:6e:56:1e:d2:26:c4:bd:45:d9:c5:f4: 50:b0:fb:64:8a:0b:ca:20:1d:cb:3b:2e:3b:72:22:ac:94:0f: c8:8a:8d:80:70:4a:ab:71:b4:b7:e4:4a:77:33:eb:1a:04:d1: 9f:34:fa:10:a8:64:89:23:77:96:7b:67:af:53:b0:e0:a2:db: 91:12:7f:4a:4f:dd:94:e9:6e:c9:4b:55:a3:82:82:b3:0a:28: b2:0f:3b:44:2c:49:88:3b:31:dd:45:8e:57:36:6a:9e:d9:c5: 02:28:b5:09:be:03:f2:a1:24:85:fd:5b:b3:15:b5:56:63:84: 1a:27:ce:33:36:db:20:21:61:ef:1a:5e:c4:2b:cc:f9:6b:f8: b0:66:15:ad:07:0f:71:ca:03:92:0c:c1:c6:87:f2:16:5d:be: c7:11:99:18 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt3xmjXrN2Gp/d/Sh6L5sxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA2MDk2Njk1ZjdlNjYxMGIxOWIwOGUxZDdmZDljNGQ5MTRhNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yy3TueKqCxMUW+lycBzLxvq1hoq jxR8uoCg4ooQB0YCl9ejuo3kum1M5pYtkmURA6eVGE6kn8+Ze7AlHAYJDfOc7ujI NBEcvzCf47/BkhngoU4uail4TkLBzivi+R3Q1KVq2D5eSJ39ZQUJPjzMpHVW0qAv tqYRuCidBjx1Gqzr1emI4aN6ox9fHMsaDw6vqEl97I+Ji9fh640aEffi8ezJKyDr K2mK1/+DIe3QmxlZWLtPy/NZG9AS6gWcML3JkMJLccpfJmWVAFGH/7gG5h3MWq76 nUuUNcDrmMXrQiXK9Jpmu2huhR5EOBTxWLO8P7OZLDQL1zRXNYDKlv7JewIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2Y1YmFh NC1mNjcwLTQzODUtYmMzOC1hNDE1MjU1OGQxOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZjViYWE0 LWY2NzAtNDM4NS1iYzM4LWE0MTUyNTU4ZDE4Yy8xL1pRWUpacFgzNW1FTEdiQ09I WF9aeE5rVXBQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQCLVmgAwQCLYd8AwQCXrCoAwQCuY4IAwQCuass AwQAwRb7MBQEAgACMA4DBQMqBygAAwUAKg0fgDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMDIy4CAwM/KzANBgkqhkiG9w0BAQsFAAOCAQEAXo3OLGUzDnADmpBzKZbR lonNDlEBddsg9yNet4BPpGCxpNsyRoo5coQJcBYiKFkn4XNxkLOj4ml2aVkWIlpY dI/pDweph3t+Ihecotoba6fGF8EuJIC2MAnikgNLTBEK9W5WHtImxL1F2cX0ULD7 ZIoLyiAdyzsuO3IirJQPyIqNgHBKq3G0t+RKdzPrGgTRnzT6EKhkiSN3lntnr1Ow 4KLbkRJ/Sk/dlOluyUtVo4KCswoosg87RCxJiDsx3UWOVzZqntnFAii1Cb4D8qEk hf1bsxW1VmOEGifOMzbbICFh7xpexCvM+Wv4sGYVrQcPccoDkgzBxofyFl2+xxGZ GA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:14 2026 by rpki-client