This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer (raw, json) Hash identifier: ZeB238comjCollnWCZqWPGYrg00dy33kaydRJuodTqA= Subject key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F1F6521E09C01ACF31C69ABA0ADA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207822 IP: 94.142.128.0/24 IP: 2001:678:b98::/48 IP: 2a0a:f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1f:65:21:e0:9c:01:ac:f3:1c:69:ab:a0:ad:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:d6:f1:86:7c:ca:ad:a5:17:c2:b4:4c:cb: 33:4f:d1:b1:7d:7d:8f:9d:20:b0:5c:7c:fd:e9:3d: 73:7f:60:8a:e8:41:48:05:86:39:6f:d7:6e:0c:f5: 53:e0:17:37:ac:37:24:a9:1b:37:f8:b6:c2:8c:73: 98:a0:cb:7b:31:37:1f:a6:9e:af:55:11:b2:aa:d5: 53:f0:f1:05:64:cd:fc:ef:19:02:eb:fb:42:be:94: 94:d4:2d:11:32:9f:f2:18:7f:b5:ad:24:f3:a5:78: 08:ed:84:67:6a:62:7c:c8:49:03:4d:d1:ef:9e:83: 74:c7:30:bb:f1:50:43:db:2a:f6:a1:80:e9:6f:6a: 7a:f1:4c:78:db:2e:b3:89:0d:94:cf:47:ab:88:6f: 56:a1:58:27:0d:b0:5c:04:6a:7f:7e:23:36:b0:95: 1a:a8:7a:e9:0e:7b:e2:25:66:97:d2:80:61:19:7a: be:14:5e:c3:56:32:45:f0:f4:3d:70:92:5c:30:96: 70:47:4c:27:31:ef:87:e7:2e:74:1c:99:01:b3:97: ce:eb:6d:97:ec:84:66:7b:25:03:ff:e2:5b:d7:9a: 7b:08:29:c2:3d:69:9a:77:0e:b9:ec:ef:ac:10:14: 48:14:be:39:4b:ae:ba:08:c1:09:6a:d0:4b:37:31: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.128.0/24 IPv6: 2001:678:b98::/48 2a0a:f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207822 Signature Algorithm: sha256WithRSAEncryption 4d:35:5e:c9:a0:ce:0e:8e:c8:61:5b:62:4e:d0:7b:64:b7:04: 73:2d:32:4c:3a:fd:8c:1f:15:68:8b:24:98:6c:06:68:44:91: b3:b4:0d:3f:6c:f1:9f:a8:3d:ab:d3:db:59:9c:b9:1e:04:84: 42:e4:d9:4a:a3:d4:f8:7e:d9:3a:64:cb:16:fe:a8:db:e2:ae: 4b:03:87:f8:5f:7a:07:ff:48:5f:49:ec:76:65:9e:dc:d3:c9: 3b:1f:25:d7:68:4f:3b:3c:4d:ec:5a:9d:29:26:8e:d1:62:94: 8b:0c:d6:8a:b4:cb:04:e7:e3:06:9a:93:e5:5c:dc:d6:60:77: 5d:44:26:7b:ad:8c:ea:3c:d4:75:e1:5c:f0:8f:74:5d:fe:72: 09:dc:18:0a:b8:a0:99:e6:87:ba:a6:6a:4f:fd:b5:11:42:46: 9a:fd:b8:3f:d9:61:52:ff:9c:f2:1d:a6:c3:a6:0b:cc:ee:a0: ae:97:56:12:4a:0a:43:f9:37:e8:4c:c7:f5:a4:f7:7d:f9:43: 84:1d:b0:92:98:aa:1d:e3:0a:08:19:b6:4e:5c:e1:a7:38:ef: 64:cf:1e:5c:3a:74:ad:ba:17:57:f3:47:4e:b0:69:35:4f:03: a1:7c:d9:8c:85:70:1f:75:a9:88:c7:7e:76:93:cf:a8:46:4f: 17:6b:65:56 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt8fx9lIeCcAazzHGmroK2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWFiNTFlOGU1OGNjMTRlZDljYjM1NzMxYWYxZDAxMWRiZTJlMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJvW8YZ8yq2lF8K0TMszT9GxfX2P nSCwXHz96T1zf2CK6EFIBYY5b9duDPVT4Bc3rDckqRs3+LbCjHOYoMt7MTcfpp6v VRGyqtVT8PEFZM387xkC6/tCvpSU1C0RMp/yGH+1rSTzpXgI7YRnamJ8yEkDTdHv noN0xzC78VBD2yr2oYDpb2p68Ux42y6ziQ2Uz0eriG9WoVgnDbBcBGp/fiM2sJUa qHrpDnviJWaX0oBhGXq+FF7DVjJF8PQ9cJJcMJZwR0wnMe+H5y50HJkBs5fO622X 7IRmeyUD/+Jb15p7CCnCPWmadw657O+sEBRIFL45S666CMEJatBLNzEFywIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFGWrUejljMFO2cs1cxrx0BHb4uEuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2NlZmYx YS1lYzY2LTRkNDUtYmE5Zi00ODhhMjIyOTljYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvY2VmZjFh LWVjNjYtNGQ0NS1iYTlmLTQ4OGEyMjI5OWNhMS8xL1phdFI2T1dNd1U3Wnl6VnpH dkhRRWR2aTRTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQAXo6AMBYEAgACMBADBwAgAQZ4C5gDBQMqCg8A MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrzjANBgkqhkiG9w0BAQsFAAOCAQEA TTVeyaDODo7IYVtiTtB7ZLcEcy0yTDr9jB8VaIskmGwGaESRs7QNP2zxn6g9q9Pb WZy5HgSEQuTZSqPU+H7ZOmTLFv6o2+KuSwOH+F96B/9IX0nsdmWe3NPJOx8l12hP OzxN7FqdKSaO0WKUiwzWirTLBOfjBpqT5Vzc1mB3XUQme62M6jzUdeFc8I90Xf5y CdwYCrigmeaHuqZqT/21EUJGmv24P9lhUv+c8h2mw6YLzO6grpdWEkoKQ/k36EzH 9aT3fflDhB2wkpiqHeMKCBm2TlzhpzjvZM8eXDp0rboXV/NHTrBpNU8DoXzZjIVw H3WpiMd+dpPPqEZPF2tlVg== -----END CERTIFICATE-----Generated at Fri Jan 9 16:24:30 2026 by rpki-client