This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer File: ZWat35yg3kmm7vSYWDhPVPR6VvA.cer (raw, json) Hash identifier: TSvFknbSMT4bqHnLX9mk3ubgc6tWTC00FyyQ/y6dBGk= Subject key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C660102733A54BF604A34B3FC70A2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43229 AS: 51682 IP: 46.16.248.0/21 IP: 185.213.12.0/22 IP: 2a0a:a180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:60:10:27:33:a5:4b:f6:04:a3:4b:3f:c7:0a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6566addf9ca0de49a6eef49858384f54f47a56f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:d6:eb:c0:2b:5b:e1:ec:fa:5c:6c:b5:35: 43:11:b0:e8:37:51:09:8f:f6:86:15:46:70:53:8b: ce:c3:d9:1a:5b:69:ad:ec:46:ff:a7:37:dd:4a:71: c0:4f:85:a7:2b:c6:10:d3:08:5f:48:39:cd:50:73: 0c:42:cc:40:44:e6:52:7c:52:99:f3:d3:c5:fa:13: 60:17:0d:30:da:d1:f9:66:9f:07:5a:16:4c:09:07: 63:f3:18:c8:ec:61:86:6d:b8:71:67:3e:08:69:04: ba:33:8f:5d:f3:7b:22:68:95:c2:e9:87:07:73:38: 1e:b8:ae:3b:cf:67:96:ba:07:28:97:0e:ab:af:5e: 33:a9:53:26:10:39:4c:af:79:c1:18:e9:28:29:04: dc:39:b6:b1:50:4e:7c:79:31:7e:03:0e:8d:e6:17: 6b:89:ef:45:72:0f:53:90:cb:34:99:4e:5f:9b:77: 1f:df:17:91:a9:79:9b:d8:d1:41:6c:b6:f8:0a:ba: 32:2a:07:59:b7:aa:9a:53:4f:e2:96:62:bd:4d:9f: 0d:67:5f:26:7b:92:73:66:d4:bd:fd:c9:9f:eb:4b: 11:45:98:97:3d:aa:fb:07:e9:52:9c:32:b2:a3:90: 5a:bc:52:a7:d8:c9:e3:21:24:97:9c:2f:17:3d:61: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.248.0/21 185.213.12.0/22 IPv6: 2a0a:a180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43229 51682 Signature Algorithm: sha256WithRSAEncryption 45:25:24:7b:70:63:4f:82:36:83:c5:a6:35:d4:2c:c3:d1:a2: ef:df:ff:a6:23:eb:0e:b9:9b:c0:1c:1a:70:f6:cd:a1:95:db: 36:28:73:4d:06:b6:13:46:01:f9:c4:76:f8:8e:2c:2b:b7:6d: b9:16:a8:12:51:46:fb:00:03:1e:fc:66:e2:44:9c:33:f3:b3: 37:40:88:0d:92:ac:da:13:3b:2d:4a:16:36:9d:3d:96:d3:65: dc:41:e4:6d:45:67:d1:5f:54:94:18:55:a8:e2:9e:5b:e1:b1: a4:c0:37:11:6e:52:bf:93:60:05:af:bf:5d:f9:7e:96:91:b2: 7a:8c:bf:70:87:4d:f6:c9:84:ce:7b:ee:84:08:65:8f:f9:fd: 3f:eb:2c:d1:35:02:16:f6:47:fc:e4:34:4a:fd:07:89:3b:f4: ad:0d:ee:79:57:a7:2a:e0:88:52:73:17:ef:e2:f0:7e:e8:98: 67:95:db:74:46:bd:95:7e:2b:10:db:ee:a7:62:bb:49:56:c4: f2:3b:4f:31:2d:e0:a0:2e:e0:d5:62:b1:65:73:33:53:00:b9: cb:d7:94:2a:36:57:50:74:5a:14:43:32:80:f1:12:26:a1:19: f4:8c:73:41:c2:cd:dd:b3:31:6c:1a:31:0d:a5:a1:b8:d8:aa: 5d:1e:8d:b3 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3xmAQJzOlS/YEo0s/xwoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTY2YWRkZjljYTBkZTQ5YTZlZWY0OTg1ODM4NGY1NGY0N2E1NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4rW68ArW+Hs+lxstTVDEbDoN1EJ j/aGFUZwU4vOw9kaW2mt7Eb/pzfdSnHAT4WnK8YQ0whfSDnNUHMMQsxAROZSfFKZ 89PF+hNgFw0w2tH5Zp8HWhZMCQdj8xjI7GGGbbhxZz4IaQS6M49d83siaJXC6YcH czgeuK47z2eWugcolw6rr14zqVMmEDlMr3nBGOkoKQTcObaxUE58eTF+Aw6N5hdr ie9Fcg9TkMs0mU5fm3cf3xeRqXmb2NFBbLb4CroyKgdZt6qaU0/ilmK9TZ8NZ18m e5JzZtS9/cmf60sRRZiXPar7B+lSnDKyo5BavFKn2MnjISSXnC8XPWGExwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFGVmrd+coN5Jpu70mFg4T1T0elbwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2JkNTZk Ny0zODk5LTQwZTUtOTYxMi0zZjI4YjZhZGJkYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYmQ1NmQ3 LTM4OTktNDBlNS05NjEyLTNmMjhiNmFkYmRhOS8xL1pXYXQzNXlnM2ttbTd2U1lX RGhQVlBSNlZ2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLhD4AwQCudUMMA0EAgACMAcDBQAqCqGAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCo3QIDAMniMA0GCSqGSIb3DQEBCwUAA4IB AQBFJSR7cGNPgjaDxaY11CzD0aLv3/+mI+sOuZvAHBpw9s2hlds2KHNNBrYTRgH5 xHb4jiwrt225FqgSUUb7AAMe/GbiRJwz87M3QIgNkqzaEzstShY2nT2W02XcQeRt RWfRX1SUGFWo4p5b4bGkwDcRblK/k2AFr79d+X6WkbJ6jL9wh032yYTOe+6ECGWP +f0/6yzRNQIW9kf85DRK/QeJO/StDe55V6cq4IhScxfv4vB+6Jhnldt0Rr2VfisQ 2+6nYrtJVsTyO08xLeCgLuDVYrFlczNTALnL15QqNldQdFoUQzKA8RImoRn0jHNB ws3dszFsGjENpaG42KpdHo2z -----END CERTIFICATE-----Generated at Fri Jan 9 08:00:44 2026 by rpki-client