This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer (raw, json) Hash identifier: 4k1WqrVWIUmjvOrvIpBdq/OPvAWEPlE0uVMubUi9eBo= Subject key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FED5CC99BAD74A4016891F45E5DB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62039 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ed:5c:c9:9b:ad:74:a4:01:68:91:f4:5e:5d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:88:ba:ca:d1:80:de:d5:43:c4:17:c4:ef: 17:e7:a4:4f:52:5e:4a:63:e8:cc:67:31:2c:26:99: 41:48:54:e5:2e:38:1b:48:c2:c8:7f:12:2e:c2:ce: c9:fe:31:a4:2d:ea:bc:7e:d5:9e:d2:f6:12:81:03: 8c:82:3e:7c:56:48:7c:0b:53:92:dc:2c:44:b0:62: c2:bc:3e:34:f2:f6:a8:4e:0a:ac:30:65:9c:a6:2a: b4:f2:a7:86:8a:5e:05:06:6a:95:27:f1:f6:27:fa: 3d:30:5c:89:8e:c9:79:b9:a5:87:72:72:e4:62:fb: af:42:a0:0a:fe:85:15:33:c9:2c:7b:a7:60:f0:e9: 60:c6:dd:66:73:6e:95:17:bb:2c:9d:84:22:d5:e3: 43:97:78:ad:26:e2:2f:23:db:9f:4e:ae:6e:24:73: 9b:2c:43:b4:21:b0:f3:c7:cf:ee:e6:2e:09:3e:85: ca:28:bd:39:03:be:06:f6:8b:f0:35:c2:29:8c:57: 63:f9:e5:d9:07:4f:76:94:22:d3:ab:52:16:5a:43: 3c:60:a7:c1:31:f3:91:8d:28:12:76:2d:8d:e4:60: 5e:e9:16:7a:38:82:c4:e0:b1:42:fc:e6:46:b2:aa: 4f:ed:31:5f:51:be:73:cf:32:71:37:22:62:0f:20: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 62039 Signature Algorithm: sha256WithRSAEncryption 94:1c:d5:bb:f5:74:2b:c9:33:b3:8d:6b:c9:46:2e:62:51:b3: 05:b2:c2:50:8c:87:c8:68:ec:a9:87:4e:d0:78:02:24:19:ff: 5d:f3:c7:d7:b6:8c:90:e6:97:77:00:67:3e:3b:71:a4:2a:35: 77:cd:5d:3b:6d:2d:2c:30:2e:f0:32:54:59:f5:74:e3:c2:97: f5:90:6a:dd:35:87:73:97:6b:57:91:ac:59:cb:13:a4:57:d9: 0d:92:82:62:05:71:26:ba:f7:32:84:bc:a8:f3:cd:99:b3:7a: a2:0f:52:50:53:ff:3e:c6:8b:f3:05:6f:d7:36:71:e6:0f:da: 76:1c:09:d6:04:99:5f:c8:1b:57:20:42:99:db:e7:73:c7:15: 1a:9b:bf:63:13:06:e1:be:55:de:23:97:12:b2:7a:77:8b:61: 3c:c8:df:48:b5:77:f1:69:82:31:3d:b6:25:e4:71:8b:26:21: ba:66:29:19:fb:a2:bd:9b:79:40:6c:ba:be:18:35:00:47:a0: 5d:74:19:81:6a:5e:5e:a0:c3:0c:14:61:f3:40:cd:27:7d:12: 9a:ad:2b:5f:84:23:10:c7:95:6f:0e:63:84:b7:63:b9:ef:4d: 93:5e:48:6f:ee:9d:8a:d2:ec:b7:83:b2:c8:ef:81:3c:3e:83: aa:b4:46:34 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8f+1cyZutdKQBaJH0Xl2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzEwNDkwOTY3NTI4Y2EwYjZhMGE5Y2I3MzY0M2M5YWQyY2MxYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z2IusrRgN7VQ8QXxO8X56RPUl5K Y+jMZzEsJplBSFTlLjgbSMLIfxIuws7J/jGkLeq8ftWe0vYSgQOMgj58Vkh8C1OS 3CxEsGLCvD408vaoTgqsMGWcpiq08qeGil4FBmqVJ/H2J/o9MFyJjsl5uaWHcnLk YvuvQqAK/oUVM8kse6dg8Olgxt1mc26VF7ssnYQi1eNDl3itJuIvI9ufTq5uJHOb LEO0IbDzx8/u5i4JPoXKKL05A74G9ovwNcIpjFdj+eXZB092lCLTq1IWWkM8YKfB MfORjSgSdi2N5GBe6RZ6OILE4LFC/OZGsqpP7TFfUb5zzzJxNyJiDyC6LQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGcQSQlnUoygtqCpy3NkPJrSzBu9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzk1ZDI0 NS04ODI4LTQxZTAtOGVhOC1mMGFlMDIzYWI1OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvOTVkMjQ1 LTg4MjgtNDFlMC04ZWE4LWYwYWUwMjNhYjU5Mi8xL1p4QkpDV2RTaktDMm9Lbkxj MlE4bXRMTUc3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDyVzANBgkqhkiG9w0BAQsFAAOCAQEAlBzVu/V0K8kz s41ryUYuYlGzBbLCUIyHyGjsqYdO0HgCJBn/XfPH17aMkOaXdwBnPjtxpCo1d81d O20tLDAu8DJUWfV048KX9ZBq3TWHc5drV5GsWcsTpFfZDZKCYgVxJrr3MoS8qPPN mbN6og9SUFP/PsaL8wVv1zZx5g/adhwJ1gSZX8gbVyBCmdvnc8cVGpu/YxMG4b5V 3iOXErJ6d4thPMjfSLV38WmCMT22JeRxiyYhumYpGfuivZt5QGy6vhg1AEegXXQZ gWpeXqDDDBRh80DNJ30Smq0rX4QjEMeVbw5jhLdjue9Nk15Ib+6ditLst4OyyO+B PD6DqrRGNA== -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:48 2026 by rpki-client