This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer File: ZszxnXthCIDbItQOybrgKxIBN2M.cer (raw, json) Hash identifier: QZk/Rz9YLpD6M9AMZCod6+fMgPB4oj2Y7PMBKzxStVY= Subject key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7741B990041C199F601336BE0D3CB801 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:52:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58339 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:41:b9:90:04:1c:19:9f:60:13:36:be:0d:3c:b8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 01:52:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ccf19d7b610880db22d40ec9bae02b12013763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:e2:3f:c0:66:9d:49:ef:89:84:2d:f9:ae: 24:a9:3b:8b:20:95:9c:8b:10:a0:98:98:16:d8:79: f3:87:cd:64:2f:8a:df:64:3d:2f:fc:0e:e3:86:e9: e9:52:3f:60:0d:0f:53:63:8a:a1:bc:01:99:9e:24: 37:f7:92:fe:29:ce:d7:f9:7f:7d:e6:03:d5:1c:5a: c6:10:78:46:4b:b3:91:6c:88:1f:bb:44:0d:5b:80: 91:27:4f:84:57:58:14:f5:2b:37:eb:9d:8b:ea:66: 07:01:25:af:19:06:f9:fc:1b:25:25:1a:1c:5a:ab: d1:96:e7:59:8f:10:89:02:0c:17:f8:e6:a6:7b:ee: 42:d8:b4:e9:6a:21:2a:50:1b:52:01:ce:08:e0:c4: 6a:d3:2b:a7:db:4a:c6:a0:13:cb:e9:ac:ef:fa:73: 89:aa:63:8b:80:8a:c8:a1:7e:65:1e:84:46:71:96: 9b:d3:7a:6e:07:92:fb:7b:b5:8c:1b:86:22:d2:04: 69:54:7d:f9:cb:4e:4a:0e:bc:fb:43:e5:e6:a5:c8: 77:0d:1e:ca:6d:31:0a:88:41:80:dc:75:4d:37:04: df:e2:d1:4e:3d:14:a3:7c:34:f5:96:99:77:fd:15: 0d:9a:72:18:2e:dd:0f:1b:52:a5:c6:d8:0b:bc:eb: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 58339 Signature Algorithm: sha256WithRSAEncryption 94:f4:fa:fc:da:d6:3f:ca:6f:46:99:96:98:5f:ea:8f:ce:59: de:5b:aa:3e:92:c2:87:83:b6:ff:f0:ee:11:df:e5:82:91:88: ec:6a:24:53:7f:ea:dc:d4:7f:c4:a0:23:5f:4b:8c:e3:12:4e: 64:9a:17:1b:d4:25:5d:82:db:65:b1:84:8c:e5:2a:1b:45:00: e1:80:c3:16:bb:7a:ba:85:13:ce:2a:cd:f1:94:0d:84:7c:f2: 99:49:38:d1:6a:1e:da:2c:ed:35:2c:3c:f3:38:8d:d7:13:f8: 3d:1d:12:d4:03:74:8f:f4:c3:3b:08:2b:91:3c:f6:ef:65:22: 5d:ee:7a:0a:ce:ca:94:17:5d:46:f8:e8:24:79:e9:f0:f1:de: 8b:d4:9a:8a:55:ef:98:8f:27:ee:1c:5e:5c:f6:2e:87:f5:c2: 05:c3:52:79:03:bb:9f:41:11:6a:17:22:94:cc:47:e0:f0:2c: 90:59:fd:1d:a7:d2:99:dc:c9:a3:c7:7b:33:d5:e6:62:ca:ef: 08:02:aa:0d:a7:b2:43:f8:0e:78:af:16:e0:f5:6d:7a:9b:34: 5a:44:b7:29:f4:76:c3:ac:8d:42:c9:7c:f7:31:38:fc:00:4f: df:eb:11:ea:9a:cf:4b:22:1e:4d:31:7d:35:3a:a4:14:54:a6: e0:ef:85:be -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3QbmQBBwZn2ATNr4NPLgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDE1MjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmNjZjE5ZDdiNjEwODgwZGIyMmQ0MGVjOWJhZTAyYjEyMDEzNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkjiP8BmnUnviYQt+a4kqTuLIJWc ixCgmJgW2Hnzh81kL4rfZD0v/A7jhunpUj9gDQ9TY4qhvAGZniQ395L+Kc7X+X99 5gPVHFrGEHhGS7ORbIgfu0QNW4CRJ0+EV1gU9Ss3652L6mYHASWvGQb5/BslJRoc WqvRludZjxCJAgwX+Oame+5C2LTpaiEqUBtSAc4I4MRq0yun20rGoBPL6azv+nOJ qmOLgIrIoX5lHoRGcZab03puB5L7e7WMG4Yi0gRpVH35y05KDrz7Q+Xmpch3DR7K bTEKiEGA3HVNNwTf4tFOPRSjfDT1lpl3/RUNmnIYLt0PG1KlxtgLvOt93QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFGbM8Z17YQiA2yLUDsm64CsSATdjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FjZWNm ZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEyOS8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNl Y2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5LzIvNjZDQ0YxOUQ3QjYx MDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA4+Mw DQYJKoZIhvcNAQELBQADggEBAJT0+vza1j/Kb0aZlphf6o/OWd5bqj6SwoeDtv/w 7hHf5YKRiOxqJFN/6tzUf8SgI19LjOMSTmSaFxvUJV2C22WxhIzlKhtFAOGAwxa7 erqFE84qzfGUDYR88plJONFqHtos7TUsPPM4jdcT+D0dEtQDdI/0wzsIK5E89u9l Il3uegrOypQXXUb46CR56fDx3ovUmopV75iPJ+4cXlz2Lof1wgXDUnkDu59BEWoX IpTMR+DwLJBZ/R2n0pncyaPHezPV5mLK7wgCqg2nskP4DnivFuD1bXqbNFpEtyn0 dsOsjULJfPcxOPwAT9/rEeqaz0siHk0xfTU6pBRUpuDvhb4= -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:25 2026 by rpki-client