This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer File: Zs01lGjIuqmPw8ou8tkFg6aeABY.cer (raw, json) Hash identifier: Q4hLubbZYAx1qNCwjBVBTUf0TdIbVEuY9+kiqnOyrrw= Subject key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2B54D157411CC405D66C433CECEF3E1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 08:02:17 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.152.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:d1:57:41:1c:c4:05:d6:6c:43:3c:ec:ef:3e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 08:02:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:05:57:49:81:6f:a6:f6:c2:e2:86:43:7d: 43:4a:fc:9f:5d:9c:9f:cd:0c:36:4e:a1:fb:dc:fc: ac:87:59:bc:61:1b:d1:94:b3:ab:dd:6d:40:4f:3f: 36:47:63:a3:9b:f3:e7:de:f6:40:cb:2c:08:5a:1e: 64:e6:25:99:59:c6:b3:1c:d8:81:3a:c4:cd:29:54: 4e:4d:69:20:ba:80:a6:b1:90:6a:47:d9:6b:83:cf: fb:75:49:d2:d9:64:5f:67:16:9f:70:cc:d4:16:3a: dd:2f:72:72:92:78:84:c4:e5:fa:6e:bc:84:3b:1e: 14:c1:97:3d:37:51:b3:09:e5:b6:a1:53:c6:b1:f8: e2:2d:c3:94:a7:86:93:5c:95:b8:16:59:d4:70:72: 06:2d:78:35:22:6a:37:30:5c:1d:45:0c:9d:15:f5: f3:47:ac:4e:2f:d5:74:61:c4:9f:33:66:56:9f:db: 54:ac:b6:ff:ad:d1:3c:67:bb:8d:ae:cf:6d:0c:3d: d8:ce:08:ef:a5:7f:7b:59:ff:92:4a:ae:1d:a8:18: 08:47:81:1f:cb:28:cb:fe:91:58:7d:13:fd:f7:99: fc:eb:ab:85:59:27:f1:f2:87:55:22:2d:22:dc:79: 0b:f1:25:55:11:7a:4e:e0:9b:d0:52:8a:ac:da:e0: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.52.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:e8:21:17:fe:1e:4f:98:fa:ae:6d:6a:1f:ba:e0:f9:3f:c2: 40:e0:ff:c4:db:ca:0f:1f:5a:ea:be:cf:ea:63:26:e6:58:0a: 4f:cc:bc:ce:68:aa:e7:6e:39:7a:aa:32:22:37:e0:d4:ba:02: 24:b5:8f:4d:b0:65:83:ee:a8:97:de:7b:ce:88:57:13:68:8d: a6:e6:b3:dd:62:a2:5d:0e:47:17:56:d2:30:84:ee:f4:82:aa: 04:e7:90:ce:76:5e:eb:02:c2:42:91:93:a7:12:91:14:62:53: 29:d0:7e:12:6b:c6:7c:39:7d:1d:bf:03:5a:94:34:e9:7d:7c: 28:f1:d0:56:1d:1b:a5:ac:f0:29:6d:d9:8f:42:96:96:9c:5b: 1f:c7:28:9d:38:8b:eb:00:1e:07:8c:52:d2:b6:ad:e6:f1:c8: 15:06:fb:07:71:29:5f:a1:16:a4:5f:67:83:41:59:f0:b0:39: 23:f0:6b:26:2f:b4:85:60:e4:51:56:28:4b:35:c3:3b:27:fc: df:65:d7:2c:84:fb:a6:05:d2:c6:cb:6d:30:37:86:0f:80:43: fa:f9:3a:bc:f5:30:80:50:29:d0:92:f3:68:b0:37:a3:db:17: bf:ab:03:e2:6f:87:ec:23:ac:fc:c5:e3:8b:57:5a:bd:db:c1: d9:25:b5:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZsrVNFXQRzEBdZsQzzs7z4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MDgwMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmNkMzU5NDY4YzhiYWE5OGZjM2NhMmVmMmQ5MDU4M2E2OWUwMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoFV0mBb6b2wuKGQ31DSvyfXZyf zQw2TqH73Pysh1m8YRvRlLOr3W1ATz82R2Ojm/Pn3vZAyywIWh5k5iWZWcazHNiB OsTNKVROTWkguoCmsZBqR9lrg8/7dUnS2WRfZxafcMzUFjrdL3JykniExOX6bryE Ox4UwZc9N1GzCeW2oVPGsfjiLcOUp4aTXJW4FlnUcHIGLXg1Imo3MFwdRQydFfXz R6xOL9V0YcSfM2ZWn9tUrLb/rdE8Z7uNrs9tDD3YzgjvpX97Wf+SSq4dqBgIR4Ef yyjL/pFYfRP995n866uFWSfx8odVIi0i3HkL8SVVEXpO4JvQUoqs2uA+7QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGbNNZRoyLqpj8PKLvLZBYOmngAWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzczNzBj NC1lNGNkLTRkYjMtOWI4Ni1lMzU5YWUwYTY4MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNzM3MGM0 LWU0Y2QtNGRiMy05Yjg2LWUzNTlhZTBhNjgzOC8xL1pzMDFsR2pJdXFtUHc4b3U4 dGtGZzZhZUFCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZg0MA0GCSqGSIb3DQEBCwUAA4IBAQBs6CEX /h5PmPqubWofuuD5P8JA4P/E28oPH1rqvs/qYybmWApPzLzOaKrnbjl6qjIiN+DU ugIktY9NsGWD7qiX3nvOiFcTaI2m5rPdYqJdDkcXVtIwhO70gqoE55DOdl7rAsJC kZOnEpEUYlMp0H4Sa8Z8OX0dvwNalDTpfXwo8dBWHRulrPApbdmPQpaWnFsfxyid OIvrAB4HjFLStq3m8cgVBvsHcSlfoRakX2eDQVnwsDkj8GsmL7SFYORRVihLNcM7 J/zfZdcshPumBdLGy20wN4YPgEP6+Tq89TCAUCnQkvNosDej2xe/qwPib4fsI6z8 xeOLV1q928HZJbWe -----END CERTIFICATE-----Generated at Sun Dec 21 02:42:06 2025 by rpki-client