This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer (raw, json) Hash identifier: pZz5xBBsjVU7VruaMr1VhSmCdSxPvFsMp6LJZIIEM0c= Subject key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA740BB21696BBF9D3323B915962F29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.62.229.0/24 IP: 2a13:840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:40:bb:21:69:6b:bf:9d:33:23:b9:15:96:2f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:92:4f:7d:67:dd:a3:59:00:6f:35:7b:f1: 74:91:ef:77:0a:51:46:59:5a:9d:52:cf:f5:05:fb: 36:10:2b:f5:42:f3:38:df:83:eb:47:10:33:b0:d9: 83:c9:4f:05:7a:aa:cd:64:91:da:b4:e2:b3:19:3a: d2:8b:cc:f7:5a:ee:c0:4d:2d:72:62:04:16:1e:d0: 85:d5:11:94:3a:f4:5b:72:f2:90:85:74:cd:61:8d: 2f:30:db:2e:f3:52:5b:1b:75:8e:75:be:4b:21:18: 96:92:b0:1c:4f:d5:3b:3a:36:b5:c3:81:49:36:09: 30:d3:a1:99:f1:7b:cf:65:11:74:4b:29:6d:2a:9b: 8a:d4:8b:2b:7a:e5:35:eb:39:fe:cd:2e:aa:29:f6: 8b:57:21:26:48:c2:36:d3:38:25:7e:52:29:30:83: 4d:ea:23:2b:17:fd:8e:85:d8:eb:b3:7e:4d:88:3a: 0c:dc:32:2f:7a:68:cf:8c:59:50:8b:46:e9:c3:18: 66:ce:b1:6d:0a:58:1e:91:34:d5:6e:81:e6:cb:16: fb:1a:e0:ad:1b:84:fa:b0:04:40:0f:03:ce:4f:c8: 29:dd:e2:a1:9a:4b:39:c4:72:1e:1a:5d:53:55:92: 8d:f1:84:ac:9c:c6:09:af:a2:9c:a6:e6:a5:45:70: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.229.0/24 IPv6: 2a13:840::/29 Signature Algorithm: sha256WithRSAEncryption 22:e1:be:18:0a:d4:71:37:12:82:f7:df:e8:05:96:a9:fd:72: 66:2a:7c:52:ca:ef:21:d8:b5:fe:5d:18:52:49:de:d3:38:6a: 71:bf:94:a5:55:ba:29:a5:8a:9f:26:79:68:ce:7f:85:82:62: 6d:fb:c3:ed:2b:2a:ac:ec:69:bf:5f:68:cc:06:3f:73:57:d1: 7d:a7:ae:8c:ef:06:33:05:9d:92:aa:bd:ab:43:8c:32:2f:2b: 24:27:83:4f:08:25:90:3e:94:54:6a:b6:f9:cb:1a:cc:91:c4: f0:07:2b:3e:04:7f:df:9b:0e:43:f9:af:da:3d:f6:3e:75:19: a9:ec:b5:d3:3b:e9:79:ce:e1:9d:ce:b7:09:98:c4:52:06:7b: 6f:8e:e6:32:4d:f2:aa:9b:b1:22:b6:7f:b3:96:c7:f3:91:d7: 49:7c:4d:f8:5b:7f:8d:dc:78:c2:46:e5:93:c8:58:cd:81:16: 0b:61:c6:63:1d:f9:75:11:17:93:bd:01:d5:f6:00:03:5f:dc: 33:fc:97:3e:53:41:5f:6d:e1:26:9b:51:24:de:38:d0:0c:af: 19:ed:4e:7e:8a:a4:a1:8f:c8:69:fd:56:94:c4:9f:c0:23:e5: 5a:35:dd:ec:84:25:7b:f7:0c:6a:56:b9:02:26:3c:2c:8d:eb: bd:9d:3f:a4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+p0C7IWlrv50zI7kVli8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTRhYmM4ZTQ1ZGUyMzFmYjgyOWJjYTIyYmIyZjBiMzFlMWY3YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPyST31n3aNZAG81e/F0ke93ClFG WVqdUs/1Bfs2ECv1QvM434PrRxAzsNmDyU8FeqrNZJHatOKzGTrSi8z3Wu7ATS1y YgQWHtCF1RGUOvRbcvKQhXTNYY0vMNsu81JbG3WOdb5LIRiWkrAcT9U7Oja1w4FJ Ngkw06GZ8XvPZRF0SyltKpuK1IsreuU16zn+zS6qKfaLVyEmSMI20zglflIpMINN 6iMrF/2Ohdjrs35NiDoM3DIvemjPjFlQi0bpwxhmzrFtClgekTTVboHmyxb7GuCt G4T6sARADwPOT8gp3eKhmks5xHIeGl1TVZKN8YSsnMYJr6KcpualRXB8WQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGVKvI5F3iMfuCm8oiuy8LMeH3r1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzYxNTVk NS0zMWJhLTQyMzktYTc1My1mMjg3YjdiNmQ3YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvNjE1NWQ1 LTMxYmEtNDIzOS1hNzUzLWYyODdiN2I2ZDdiMi8xL1pVcThqa1hlSXgtNEtieWlL N0x3c3g0ZmV2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuT7lMA0EAgACMAcDBQMqEwhAMA0GCSqGSIb3 DQEBCwUAA4IBAQAi4b4YCtRxNxKC99/oBZap/XJmKnxSyu8h2LX+XRhSSd7TOGpx v5SlVboppYqfJnlozn+FgmJt+8PtKyqs7Gm/X2jMBj9zV9F9p66M7wYzBZ2Sqr2r Q4wyLyskJ4NPCCWQPpRUarb5yxrMkcTwBys+BH/fmw5D+a/aPfY+dRmp7LXTO+l5 zuGdzrcJmMRSBntvjuYyTfKqm7Eitn+zlsfzkddJfE34W3+N3HjCRuWTyFjNgRYL YcZjHfl1EReTvQHV9gADX9wz/Jc+U0FfbeEmm1Ek3jjQDK8Z7U5+iqShj8hp/VaU xJ/AI+VaNd3shCV79wxqVrkCJjwsjeu9nT+k -----END CERTIFICATE-----Generated at Tue Jan 13 10:54:45 2026 by rpki-client