This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer (raw, json) Hash identifier: VjHFOcx4P5DxU7VrGjuVq1/qAds20d4uM6s9ZuovKIk= Subject key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E375D23DA2D4D50DE7793353B19B92C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60440 AS: 61081 IP: 5.133.80.0/22 IP: 185.24.72.0/22 IP: 2a04:2ac0::/29 IP: 2a09:6a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5d:23:da:2d:4d:50:de:77:93:35:3b:19:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:64:16:36:79:e3:7b:b8:24:e3:ee:9a:73: 19:b0:21:88:d8:f0:c3:57:35:8b:3b:a1:d5:57:c7: 9e:11:e8:60:9d:9d:86:48:54:f1:65:92:85:9d:be: 44:ac:c9:a0:dc:c8:e3:d9:66:57:fb:e2:ca:ad:09: ac:94:f4:01:57:74:3e:4e:a3:d3:94:2b:da:8b:8b: c9:0b:9a:4b:92:0b:44:36:53:71:1c:1e:7e:e8:4f: 36:e1:3f:d4:bf:cd:4a:1d:ad:c6:6d:10:2f:4a:08: f3:5d:4b:c8:2c:d9:f1:c1:49:59:d4:ba:7b:bb:69: 72:39:2f:42:40:d6:21:5e:c5:61:5c:1f:fd:d3:30: 55:25:14:5e:b8:48:fc:6e:9d:0a:9b:39:71:74:49: 39:ee:c7:d2:b4:d1:2c:9d:e8:f2:3c:05:3a:17:62: d9:93:38:9d:be:55:34:49:1b:c9:86:73:93:b0:24: 40:64:81:3b:9e:61:9f:c6:63:b5:61:0e:53:d2:94: b9:28:13:52:1e:47:5c:11:43:fd:07:8b:28:d3:fe: 2d:bd:0c:0c:9f:6c:05:ea:38:0e:f5:2d:6a:84:13: 54:1a:53:53:8d:04:72:74:bf:f2:93:72:15:ff:fd: ea:59:a5:48:f3:42:4c:a7:2d:d4:63:cd:27:2f:9d: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.80.0/22 185.24.72.0/22 IPv6: 2a04:2ac0::/29 2a09:6a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60440 61081 Signature Algorithm: sha256WithRSAEncryption 94:44:75:68:72:71:8a:dc:ca:24:54:48:67:d7:6c:5e:43:6e: 32:cf:07:05:cd:63:fc:d3:13:0e:c9:f0:c2:c5:15:de:89:a6: 33:de:62:b9:fa:73:38:65:21:96:85:ba:64:f9:18:f9:21:5b: 29:c7:bf:72:55:34:d8:ef:f6:0d:f6:e4:04:8c:f1:da:45:84: a6:d2:a0:48:58:8e:1a:9c:fd:38:88:99:52:90:fd:53:b9:1e: 2a:42:70:5c:b3:eb:b4:d8:58:1f:cc:b3:5b:39:4d:66:5d:ac: ee:d0:35:3e:68:8a:2a:8b:a3:70:ad:51:b1:39:bf:6d:d1:f4: b7:8e:cd:1b:36:35:c5:b5:4c:3c:8a:9e:0c:8f:04:58:12:59: cb:04:4c:cd:1b:ac:d8:50:a6:38:20:02:e5:e1:7b:f6:71:90: 55:85:da:65:ab:0c:15:63:42:7d:1d:95:cc:1b:3d:b4:d9:1b: 52:40:f7:83:8e:f1:cc:ac:1f:2d:ae:21:20:8c:b6:27:6f:ea: 73:c5:2a:06:76:44:97:f2:b2:36:9d:5a:0f:aa:ce:af:2b:af: a4:c3:ab:a8:b7:b5:3c:63:df:30:99:25:c6:4e:a1:7f:d9:e5: e3:de:1c:27:bb:69:77:eb:b9:92:d5:0d:16:6b:52:51:10:c3: 8a:19:3c:e8 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+N10j2i1NUN53kzU7GbksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWFiNDg1YWY5MjNkMWI0NmM1YTMyMWZjN2EzZjg1NmMwNGZiNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgtkFjZ543u4JOPumnMZsCGI2PDD VzWLO6HVV8eeEehgnZ2GSFTxZZKFnb5ErMmg3Mjj2WZX++LKrQmslPQBV3Q+TqPT lCvai4vJC5pLkgtENlNxHB5+6E824T/Uv81KHa3GbRAvSgjzXUvILNnxwUlZ1Lp7 u2lyOS9CQNYhXsVhXB/90zBVJRReuEj8bp0KmzlxdEk57sfStNEsnejyPAU6F2LZ kzidvlU0SRvJhnOTsCRAZIE7nmGfxmO1YQ5T0pS5KBNSHkdcEUP9B4so0/4tvQwM n2wF6jgO9S1qhBNUGlNTjQRydL/yk3IV//3qWaVI80JMpy3UY80nL525jQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFGWrSFr5I9G0bFoyH8ej+FbAT7b8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzE2NGQ4 ZC00MWFjLTQ1MjItYmIyNS04OTg2MzQ5NDIyODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvMTY0ZDhk LTQxYWMtNDUyMi1iYjI1LTg5ODYzNDk0MjI4NS8xL1phdElXdmtqMGJSc1dqSWZ4 NlA0VnNCUHR2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCBYVQAwQCuRhIMBQEAgACMA4DBQMqBCrAAwUD KglqADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA7BgCAwDumTANBgkqhkiG9w0B AQsFAAOCAQEAlER1aHJxitzKJFRIZ9dsXkNuMs8HBc1j/NMTDsnwwsUV3ommM95i ufpzOGUhloW6ZPkY+SFbKce/clU02O/2DfbkBIzx2kWEptKgSFiOGpz9OIiZUpD9 U7keKkJwXLPrtNhYH8yzWzlNZl2s7tA1PmiKKoujcK1RsTm/bdH0t47NGzY1xbVM PIqeDI8EWBJZywRMzRus2FCmOCAC5eF79nGQVYXaZasMFWNCfR2VzBs9tNkbUkD3 g47xzKwfLa4hIIy2J2/qc8UqBnZEl/KyNp1aD6rOryuvpMOrqLe1PGPfMJklxk6h f9nl494cJ7tpd+u5ktUNFmtSURDDihk86A== -----END CERTIFICATE-----Generated at Tue Jan 13 12:34:47 2026 by rpki-client