This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer File: rzkvKN7GuMzrfNcOevcdjNyqmgY.cer (raw, json) Hash identifier: KV6TaefiUzfobDiWSoLxL0pv4huFpw0JJvQTurNXhXM= Subject key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80014DDC041188F82B3ED9F189EABB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196646 IP: 5.11.88.0/21 IP: 2a03:6040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:01:4d:dc:04:11:88:f8:2b:3e:d9:f1:89:ea:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:63:b5:42:e9:8d:c8:e1:60:6e:84:b3:ed: 89:cc:1a:5d:da:dd:b4:8c:10:84:e7:ad:3d:4e:f7: f7:4f:8e:59:b0:02:c8:61:36:94:8b:da:6e:88:4e: 48:f0:21:d0:3a:3c:c7:39:f5:51:04:a6:42:e2:95: b5:93:68:57:d9:05:70:d7:d5:36:9b:7e:cb:54:bf: 05:2c:e6:a4:e9:bc:bb:a8:b9:7d:03:d3:cb:80:ec: e0:02:d9:4e:4c:43:b9:92:0a:41:7d:41:f4:bb:4a: 44:60:ad:02:7e:71:d2:71:9f:1d:6b:b2:e8:1e:ee: 1c:9b:a4:5b:6e:46:f3:19:c1:cd:42:1e:4c:d1:f2: 63:8a:d4:89:35:17:f4:cc:3a:b8:df:87:7a:6c:38: 54:80:82:96:3e:7d:f3:f3:64:13:ea:e9:60:83:69: 7e:37:a7:00:db:8f:ff:9d:a5:03:ac:a5:2e:db:34: fd:0e:87:05:db:f7:32:ad:1a:ba:ae:0f:a4:5a:8d: ee:64:af:02:0d:e1:9c:e5:3a:a2:c2:d8:2f:3c:30: ad:47:f1:b2:ed:47:50:6f:79:94:94:d1:d0:2b:e8: 42:7a:b3:71:10:9e:be:40:f5:cd:ea:1d:cb:a9:fa: 3c:0d:d1:d4:f3:38:39:cb:30:0b:91:73:f7:23:cc: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.88.0/21 IPv6: 2a03:6040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196646 Signature Algorithm: sha256WithRSAEncryption 24:c3:91:9a:82:17:3c:fd:3b:51:fe:78:0c:3b:f1:36:b1:c1: 53:cd:d3:27:ac:f8:0b:9f:ce:dd:99:98:0a:c8:a4:74:af:39: 9c:3e:1b:ea:bd:34:af:6f:d2:f7:26:61:63:4a:02:7d:1f:be: 5d:cc:94:3b:c0:26:3b:a0:fa:ac:9e:92:8f:8f:73:ef:5a:0f: 8a:f5:0e:09:80:f2:14:db:b5:2e:f5:8e:d0:d6:7b:05:28:63: da:db:94:15:18:26:64:13:2b:d9:be:b4:6c:e0:ca:61:99:48: d3:41:36:b3:78:3c:b9:b8:d8:ee:03:ee:f9:2d:b1:c8:92:fc: 2e:d1:d4:8a:5b:fb:01:2c:79:dc:6f:9c:31:2a:2e:26:80:4f: af:32:4b:a0:2f:a9:28:15:d3:47:e0:1d:fb:c9:72:2f:9a:10: 63:ca:d0:f4:22:3f:04:22:42:36:9b:d5:00:c4:ae:56:8e:42: e5:d4:e2:4c:98:28:8d:56:26:52:5e:3b:cc:be:9f:77:76:19: 5a:ba:de:2d:de:97:e3:16:c0:6e:d7:ec:79:01:ab:2a:ff:78: 07:50:88:af:8c:c8:da:74:b7:6c:cf:0b:95:8a:65:94:7e:5e: 98:c9:16:7e:30:c8:96:97:ef:16:79:79:4b:02:d8:4e:f6:0a: f2:a0:22:17 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gAFN3AQRiPgrPtnxieq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjM5MmYyOGRlYzZiOGNjZWI3Y2Q3MGU3YWY3MWQ4Y2RjYWE5YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5RjtULpjcjhYG6Es+2JzBpd2t20 jBCE5609Tvf3T45ZsALIYTaUi9puiE5I8CHQOjzHOfVRBKZC4pW1k2hX2QVw19U2 m37LVL8FLOak6by7qLl9A9PLgOzgAtlOTEO5kgpBfUH0u0pEYK0CfnHScZ8da7Lo Hu4cm6RbbkbzGcHNQh5M0fJjitSJNRf0zDq434d6bDhUgIKWPn3z82QT6ulgg2l+ N6cA24//naUDrKUu2zT9DocF2/cyrRq6rg+kWo3uZK8CDeGc5TqiwtgvPDCtR/Gy 7UdQb3mUlNHQK+hCerNxEJ6+QPXN6h3Lqfo8DdHU8zg5yzALkXP3I8x7/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK85LyjexrjM63zXDnr3HYzcqpoGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzJmMzZk NC03MmUxLTQwNDYtYjczZi1hYjllYWRiMWQ3OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMmYzNmQ0 LTcyZTEtNDA0Ni1iNzNmLWFiOWVhZGIxZDc5Ny8xL3J6a3ZLTjdHdU16cmZOY09l dmNkak55cW1nWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBQtYMA0EAgACMAcDBQAqA2BAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMAJjANBgkqhkiG9w0BAQsFAAOCAQEAJMORmoIXPP07 Uf54DDvxNrHBU83TJ6z4C5/O3ZmYCsikdK85nD4b6r00r2/S9yZhY0oCfR++XcyU O8AmO6D6rJ6Sj49z71oPivUOCYDyFNu1LvWO0NZ7BShj2tuUFRgmZBMr2b60bODK YZlI00E2s3g8ubjY7gPu+S2xyJL8LtHUilv7ASx53G+cMSouJoBPrzJLoC+pKBXT R+Ad+8lyL5oQY8rQ9CI/BCJCNpvVAMSuVo5C5dTiTJgojVYmUl47zL6fd3YZWrre Ld6X4xbAbtfseQGrKv94B1CIr4zI2nS3bM8LlYpllH5emMkWfjDIlpfvFnl5SwLY TvYK8qAiFw== -----END CERTIFICATE-----Generated at Fri Jan 2 16:56:59 2026 by rpki-client