This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer (raw, json) Hash identifier: u7HquKu7mgHWx7B0KUbQs4tzsVOzguY7eOXZb3qsG6M= Subject key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB2D0AED9BD1DCF156DC5C0A8774DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56841 IP: 2001:67c:ac8::/48 IP: 2001:67c:acc::/48 IP: 2001:67c:ad0::/48 IP: 2001:67c:2788::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2d:0a:ed:9b:d1:dc:f1:56:dc:5c:0a:87:74:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66501165645aa80dcba315885cf374acb6d21305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:1c:eb:26:2c:fb:82:6e:85:04:38:1a:62: 0b:10:ad:44:40:66:7d:a5:5c:61:a3:6b:de:4a:01: b1:a8:85:c1:b7:aa:b1:40:51:ab:ea:12:5e:e4:30: 26:47:ed:3c:3b:ed:80:85:61:01:41:05:0a:96:82: 8d:2d:5f:fc:67:e0:75:57:28:c0:db:b5:9c:61:60: 5b:97:95:cc:2c:66:6e:45:8a:8f:2d:fc:9b:3c:c8: 3d:05:45:5c:61:8d:03:c6:12:b5:05:e1:8d:2d:46: 49:b2:94:aa:c4:e7:d0:c6:c0:a1:32:ec:02:1a:18: 64:52:80:2d:5b:1a:5c:60:28:12:cd:b7:77:25:91: a0:37:86:8e:f2:36:60:33:5b:fb:cf:96:8e:05:cb: ee:f8:26:54:23:d3:3e:05:9d:66:11:86:bb:ce:99: f0:16:45:c3:02:e1:1b:45:3e:2d:f9:97:8c:dd:f9: 8f:51:1c:28:58:bc:75:5b:79:42:cb:0f:4c:a5:e2: d0:57:a3:0b:74:71:4c:df:03:bf:9f:7b:18:70:de: b4:d0:6d:64:b4:72:95:b9:92:d5:d5:f1:08:7c:4b: ac:e1:b0:dc:c9:cd:dc:c3:f8:fd:e4:52:c8:85:a5: a1:e5:36:e6:bf:1b:56:17:f5:0b:a7:6e:f3:a7:58: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ac8::/48 2001:67c:acc::/48 2001:67c:ad0::/48 2001:67c:2788::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56841 Signature Algorithm: sha256WithRSAEncryption 44:48:a4:02:14:a1:09:16:4c:6a:ac:fd:0f:15:41:ec:4a:1e: 7d:8b:58:67:d3:98:79:17:a0:e6:7c:b7:51:17:bc:68:d0:aa: 5a:11:9f:26:12:4b:ed:89:a2:2c:8c:f8:95:3f:db:6e:2b:74: a0:23:fb:74:c9:58:04:1a:7e:0f:ea:ab:40:ea:6c:1a:bd:6d: 5f:22:62:59:3e:ec:39:ed:e4:6c:b9:99:bf:21:89:69:4e:45: cd:81:a0:2f:76:4e:9a:1d:42:7f:f9:e8:a2:e6:6d:80:b0:66: 9a:32:20:c5:1c:d6:4a:3d:99:a9:66:41:11:9d:b5:02:fe:00: 9f:25:f7:8a:57:23:38:05:35:6a:29:21:e7:f0:5c:0f:40:d6: fd:c0:21:2b:65:04:d3:12:58:03:e2:da:4e:51:0a:a1:95:94: b8:3c:47:0e:1b:b4:a2:0b:af:f8:7f:be:ed:4e:bc:11:2e:f8: 08:01:5a:63:26:40:20:31:1e:f1:be:b1:dc:a4:ea:31:cd:03: a2:1e:f8:8e:26:2d:c8:c1:01:74:34:d5:e5:3d:11:52:cc:6d: c6:47:33:c8:a6:81:75:4c:06:d4:7d:fb:8d:4a:72:1c:60:85: 04:b4:17:2b:c0:d4:92:c7:ed:c8:0e:b6:51:52:1e:5b:3b:8d: dd:f1:65:66 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt9yy0K7ZvR3PFW3FwKh3TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjUwMTE2NTY0NWFhODBkY2JhMzE1ODg1Y2YzNzRhY2I2ZDIxMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34c6yYs+4JuhQQ4GmILEK1EQGZ9 pVxho2veSgGxqIXBt6qxQFGr6hJe5DAmR+08O+2AhWEBQQUKloKNLV/8Z+B1VyjA 27WcYWBbl5XMLGZuRYqPLfybPMg9BUVcYY0DxhK1BeGNLUZJspSqxOfQxsChMuwC GhhkUoAtWxpcYCgSzbd3JZGgN4aO8jZgM1v7z5aOBcvu+CZUI9M+BZ1mEYa7zpnw FkXDAuEbRT4t+ZeM3fmPURwoWLx1W3lCyw9MpeLQV6MLdHFM3wO/n3sYcN600G1k tHKVuZLV1fEIfEus4bDcyc3cw/j95FLIhaWh5TbmvxtWF/ULp27zp1jeEQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFGZQEWVkWqgNy6MViFzzdKy20hMFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzJkMjZh My0zNDZlLTRkMGQtYWMxZS0xZDAyMGVjZTA3ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMmQyNmEz LTM0NmUtNGQwZC1hYzFlLTFkMDIwZWNlMDdlYS8xL1psQVJaV1JhcUEzTG94V0lY UE4wckxiU0V3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfArIAwcAIAEGfArMAwcAIAEGfArQAwcA IAEGfCeIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDeCTANBgkqhkiG9w0BAQsF AAOCAQEAREikAhShCRZMaqz9DxVB7EoefYtYZ9OYeReg5ny3URe8aNCqWhGfJhJL 7YmiLIz4lT/bbit0oCP7dMlYBBp+D+qrQOpsGr1tXyJiWT7sOe3kbLmZvyGJaU5F zYGgL3ZOmh1Cf/noouZtgLBmmjIgxRzWSj2ZqWZBEZ21Av4AnyX3ilcjOAU1aikh 5/BcD0DW/cAhK2UE0xJYA+LaTlEKoZWUuDxHDhu0oguv+H++7U68ES74CAFaYyZA IDEe8b6x3KTqMc0Doh74jiYtyMEBdDTV5T0RUsxtxkczyKaBdUwG1H37jUpyHGCF BLQXK8DUksftyA62UVIeWzuN3fFlZg== -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:43 2026 by rpki-client