This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer (raw, json) Hash identifier: A8YKTA/mZ/aPdVpFFyqgXeKfqfcOhcTToSC4RyQE9Aw= Subject key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6952F1909A4F188098CB063690983 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59411 IP: 185.232.44.0/24 IP: 2a11:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:2f:19:09:a4:f1:88:09:8c:b0:63:69:09:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:32:5b:85:b1:1a:07:8c:12:7a:05:65:c9: bc:b8:ed:76:c3:69:eb:88:12:05:b7:ef:d6:0e:fb: 03:c7:10:8b:91:bc:06:ba:9b:a9:21:fc:fd:1f:ab: 56:b6:26:87:0b:d0:5a:92:e9:12:78:ca:56:b8:7d: 38:e1:32:5e:e8:87:91:a2:ac:91:53:0a:05:df:dd: 9b:f4:8e:90:02:45:66:e8:9c:d8:88:5d:d3:78:fa: 67:ae:42:8c:78:09:b3:36:2b:b1:9d:bf:ea:5b:ef: 9e:84:59:0d:50:d0:1c:c4:73:4a:f6:28:f7:48:c1: 33:ba:96:52:0e:c0:ef:b2:0a:4e:12:bc:9e:4a:9a: 83:bf:f9:eb:63:0c:8e:db:16:65:3b:77:76:4f:0e: a6:ae:92:c4:0f:74:53:27:f7:1b:ab:20:b9:02:e4: 5f:70:80:c7:d5:a4:e8:44:d9:1b:f5:02:00:2c:5d: 21:5a:0e:05:22:7c:36:ad:24:30:be:0d:90:95:80: 9a:cd:dc:bf:e4:9d:fe:ee:ad:3e:a8:42:5d:db:5f: e7:4c:fd:fe:61:26:7d:c2:5a:ff:4c:c5:1d:ce:8a: 54:c6:5a:82:a7:5d:22:10:62:ee:4d:52:1f:5e:53: 3f:92:be:0e:d5:7d:da:ac:a8:dc:a2:8d:3b:4d:e0: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.44.0/24 IPv6: 2a11:fe80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59411 Signature Algorithm: sha256WithRSAEncryption b0:f8:d2:4a:b8:7c:cc:0c:b2:74:a0:db:ed:64:3d:21:74:60: d7:33:35:a3:0a:22:bd:d7:76:ce:eb:4a:61:ed:47:d5:74:1c: 4b:15:3a:89:ea:d5:90:8b:18:78:57:83:03:d8:ce:f1:f4:de: 3a:ab:01:3f:fa:b4:4d:31:51:26:ca:cd:d2:fe:7c:59:9c:3c: c8:96:ef:03:3c:26:74:43:aa:26:9b:da:57:02:f3:32:d3:b1: 42:3e:55:2e:23:ff:46:9d:ae:f8:7e:5b:b5:0a:41:06:77:5c: b9:2a:ce:53:6b:28:61:49:be:4d:c9:8e:76:6c:f8:6e:a9:49: 4b:d7:6c:32:dd:b1:39:a7:f8:80:2c:c7:d6:b3:ee:ac:14:5b: 7f:ac:8b:95:1f:78:fe:1b:26:04:c6:01:1f:4a:52:dc:3e:31: ae:44:be:66:6b:16:22:2e:f6:5f:c4:07:d9:b0:2d:74:e3:3d: 8d:75:99:0b:59:71:09:4e:4f:42:be:ea:bb:e1:95:57:f3:41: 01:a0:8e:8d:cb:64:bf:c6:1e:66:0e:6a:e0:4b:48:9e:26:3a: b0:89:1c:5a:b7:95:88:b2:e1:f7:ef:ce:f5:e5:8e:e7:d9:88: f0:20:09:5e:1e:23:f6:3e:1c:71:dd:79:49:d3:6a:9c:95:86: ca:3d:05:6e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xpUvGQmk8YgJjLBjaQmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTgzZDMyMmVmMjRjODcxOThiNzY1ZWExZDFjNDJjMjgzYTdmOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8yW4WxGgeMEnoFZcm8uO12w2nr iBIFt+/WDvsDxxCLkbwGupupIfz9H6tWtiaHC9BakukSeMpWuH044TJe6IeRoqyR UwoF392b9I6QAkVm6JzYiF3TePpnrkKMeAmzNiuxnb/qW++ehFkNUNAcxHNK9ij3 SMEzupZSDsDvsgpOEryeSpqDv/nrYwyO2xZlO3d2Tw6mrpLED3RTJ/cbqyC5AuRf cIDH1aToRNkb9QIALF0hWg4FInw2rSQwvg2QlYCazdy/5J3+7q0+qEJd21/nTP3+ YSZ9wlr/TMUdzopUxlqCp10iEGLuTVIfXlM/kr4O1X3arKjcoo07TeCbWQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGWD0yLvJMhxmLdl6h0cQsKDp/j2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2YwOTcx YS04ODkxLTRiNTMtOTQ0Yy01YmU5ZTExN2RiZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvZjA5NzFh LTg4OTEtNGI1My05NDRjLTViZTllMTE3ZGJkYS8xL1pZUFRJdThreUhHWXQyWHFI UnhDd29Pbi1QWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuegsMA0EAgACMAcDBQMqEf6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDoEzANBgkqhkiG9w0BAQsFAAOCAQEAsPjSSrh8zAyy dKDb7WQ9IXRg1zM1owoivdd2zutKYe1H1XQcSxU6ierVkIsYeFeDA9jO8fTeOqsB P/q0TTFRJsrN0v58WZw8yJbvAzwmdEOqJpvaVwLzMtOxQj5VLiP/Rp2u+H5btQpB BndcuSrOU2soYUm+TcmOdmz4bqlJS9dsMt2xOaf4gCzH1rPurBRbf6yLlR94/hsm BMYBH0pS3D4xrkS+ZmsWIi72X8QH2bAtdOM9jXWZC1lxCU5PQr7qu+GVV/NBAaCO jctkv8YeZg5q4EtIniY6sIkcWreViLLh9+/O9eWO59mI8CAJXh4j9j4ccd15SdNq nJWGyj0Fbg== -----END CERTIFICATE-----Generated at Mon Jan 12 14:57:17 2026 by rpki-client