This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer File: ZlBwd85_MPwGht0JNKiZl98x6Ew.cer (raw, json) Hash identifier: rnAF85wTEgknJ5omDKe9fTgOSV6l+f5AyiMecrcY04A= Subject key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5ACBE4F5A7DACBBB34B444FF0D2BE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202527 IP: 193.111.47.0/24 IP: 2a12:ce40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:cb:e4:f5:a7:da:cb:bb:34:b4:44:ff:0d:2b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66507077ce7f30fc0686dd0934a89997df31e84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:df:f0:fa:40:98:3b:8f:1b:ed:a7:b8:05: 37:61:88:06:98:c5:b2:9b:da:70:0e:d3:2d:ec:97: 4f:06:cb:0b:11:56:4a:cc:94:e2:89:cf:ca:2a:ce: c2:3a:08:54:f8:49:a6:af:48:cc:f6:49:35:bf:4d: f4:ee:45:f7:58:b4:12:a0:91:58:5c:3b:af:be:7b: cc:3c:ed:6c:da:74:91:fe:37:86:9e:6c:f9:96:8c: 3a:f7:05:d6:eb:c6:6d:d8:c9:82:04:33:d2:3d:7a: 4e:cc:4b:a6:b9:31:c5:59:89:1f:35:69:1d:b6:b4: 16:8b:c7:6a:f6:23:e5:ee:18:1b:e7:84:4e:bf:c9: 23:06:68:19:3a:a2:07:ba:ed:ae:b9:fb:07:f3:51: 75:66:2d:be:fa:60:7d:6b:af:f1:7b:fb:61:c3:75: 35:23:31:99:6a:b1:eb:c1:90:28:a3:f0:42:bc:f5: 35:46:c1:eb:ba:8f:1e:23:38:08:1c:9d:cf:fc:15: d7:fd:c7:5a:90:51:fc:3c:b9:50:b5:29:00:36:07: 7f:de:8f:3f:61:4b:c8:ca:23:35:30:94:b7:00:21: 3b:b3:f6:55:09:8a:de:66:67:14:0b:e5:56:ac:e2: d8:81:31:96:f6:cb:1b:45:24:d2:3e:c0:da:56:9b: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.47.0/24 IPv6: 2a12:ce40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202527 Signature Algorithm: sha256WithRSAEncryption 53:4f:02:82:62:fe:b8:bd:18:1d:45:36:57:b2:09:18:9c:2f: f7:89:54:d2:71:61:c7:cc:f1:dc:62:6c:87:3a:43:55:87:6e: b2:67:01:d6:5a:c8:84:f5:07:a6:f2:e3:aa:3d:ec:59:99:91: 38:31:8c:7f:6b:42:e8:72:ae:5e:42:4f:3b:c1:90:72:e1:0a: 15:d1:06:60:6c:ae:0e:ce:3c:1e:e8:71:02:14:f5:80:63:50: ee:39:31:8e:a9:45:67:38:bd:64:51:b6:28:01:aa:5f:e4:6d: 11:ac:a3:4a:4c:24:16:3f:85:59:0c:40:bb:26:1f:6b:43:a4: 65:36:e9:e3:51:a6:ad:80:6a:88:05:41:bf:f2:d2:78:54:70: f0:6e:d3:eb:30:c5:83:47:e5:7e:b9:e6:6a:aa:c6:38:63:3f: 64:01:bd:32:3c:5e:74:5a:a0:29:5e:52:9a:ed:bb:3c:07:3f: f9:3c:78:c9:97:ed:7a:3e:79:eb:35:49:3e:0c:99:5b:db:44: f4:03:65:b3:b0:e8:d7:51:23:9f:89:3a:e7:db:1c:f2:e3:1d: 5b:fd:df:24:d3:02:fd:af:96:83:fd:9b:e0:0f:68:1b:d9:78: 27:a8:0e:62:94:61:c1:fa:10:9c:fc:62:cf:13:ef:d0:e8:bb: 71:ce:77:68 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9Wsvk9afay7s0tET/DSvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjUwNzA3N2NlN2YzMGZjMDY4NmRkMDkzNGE4OTk5N2RmMzFlODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA143f8PpAmDuPG+2nuAU3YYgGmMWy m9pwDtMt7JdPBssLEVZKzJTiic/KKs7COghU+Emmr0jM9kk1v0307kX3WLQSoJFY XDuvvnvMPO1s2nSR/jeGnmz5low69wXW68Zt2MmCBDPSPXpOzEumuTHFWYkfNWkd trQWi8dq9iPl7hgb54ROv8kjBmgZOqIHuu2uufsH81F1Zi2++mB9a6/xe/thw3U1 IzGZarHrwZAoo/BCvPU1RsHruo8eIzgIHJ3P/BXX/cdakFH8PLlQtSkANgd/3o8/ YUvIyiM1MJS3ACE7s/ZVCYreZmcUC+VWrOLYgTGW9ssbRSTSPsDaVpu0mQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGZQcHfOfzD8BobdCTSomZffMehMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2EzNjM2 NS04NTUyLTRhOTctOGJmYS1jY2FmNDRkNDE2NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYTM2MzY1 LTg1NTItNGE5Ny04YmZhLWNjYWY0NGQ0MTY0OC8xL1psQndkODVfTVB3R2h0MEpO S2labDk4eDZFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwW8vMA0EAgACMAcDBQMqEs5AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXHzANBgkqhkiG9w0BAQsFAAOCAQEAU08CgmL+uL0Y HUU2V7IJGJwv94lU0nFhx8zx3GJshzpDVYdusmcB1lrIhPUHpvLjqj3sWZmRODGM f2tC6HKuXkJPO8GQcuEKFdEGYGyuDs48HuhxAhT1gGNQ7jkxjqlFZzi9ZFG2KAGq X+RtEayjSkwkFj+FWQxAuyYfa0OkZTbp41GmrYBqiAVBv/LSeFRw8G7T6zDFg0fl frnmaqrGOGM/ZAG9MjxedFqgKV5Smu27PAc/+Tx4yZftej556zVJPgyZW9tE9ANl s7Do11Ejn4k659sc8uMdW/3fJNMC/a+Wg/2b4A9oG9l4J6gOYpRhwfoQnPxizxPv 0Oi7cc53aA== -----END CERTIFICATE-----Generated at Wed Jan 7 05:18:58 2026 by rpki-client