This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer (raw, json) Hash identifier: J+/H9izeRxvuuen8qS+nWfMrd+goWSavsL2Wb0zlVx4= Subject key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352FB7F9ADA33CDDEBE651D1CD6E31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48727 IP: 185.124.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2f:b7:f9:ad:a3:3c:dd:eb:e6:51:d1:cd:6e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:1c:86:9c:12:f5:80:2b:32:84:1a:f0:2b: 9c:8d:5d:93:a6:a7:02:83:61:80:46:89:81:4a:44: 7f:4c:7c:b8:55:a0:4d:51:4c:00:6c:77:1e:b3:31: 6e:f1:d3:7a:93:87:a9:d7:fb:50:f2:51:6e:e3:73: 0e:c5:4f:65:42:a1:d3:c3:29:68:08:ec:ea:23:ea: d1:14:06:49:fd:14:a0:a8:63:b9:1c:da:95:f3:42: 0d:e2:b3:24:a8:a3:4c:4b:82:b3:e1:39:4e:24:fd: fc:4f:84:64:37:90:e6:8c:5c:75:0c:68:23:e2:27: d1:0b:44:37:c2:6d:a2:c8:9b:68:fc:ad:75:00:51: 2a:fe:97:0c:97:0c:56:98:fa:d1:30:f9:65:19:0f: fc:f0:37:58:e5:97:89:8b:f4:2a:a9:d5:1d:20:5f: af:eb:87:09:77:c5:ea:81:26:dc:75:25:16:42:fc: a9:d2:70:20:54:84:6f:ec:4a:8e:7a:67:8f:a3:c1: 7b:52:bd:f5:dd:f3:da:29:01:b1:93:81:9b:2f:a3: 44:24:22:57:63:a8:7b:1c:96:71:37:94:2f:cd:49: 6b:19:dc:b7:40:c8:f9:cd:5e:d5:3f:ed:f4:1b:40: 7e:25:64:8f:00:37:ab:a4:b1:5e:92:48:53:60:e6: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48727 Signature Algorithm: sha256WithRSAEncryption 60:df:42:17:84:c1:4d:23:9c:2e:13:55:94:bd:86:e5:33:ff: c0:73:34:d3:14:d4:a2:36:a3:37:3a:52:f3:49:cc:f8:18:20: ab:b8:59:ec:b1:b3:ee:b3:1b:57:0a:4f:4f:1c:ba:f1:59:a7: 95:5f:c5:fa:06:74:95:73:24:30:8b:f0:f8:9a:82:a8:cc:14: bc:1d:ec:82:a1:62:92:07:0d:be:91:9b:d9:82:6d:55:1a:20: 1c:d2:61:05:93:91:b9:65:f4:ea:29:7b:2d:8f:08:dd:fc:df: c8:41:ed:91:a7:a7:7b:a8:cd:b8:5a:d8:eb:fb:bf:ca:02:a5: 54:a1:a1:ae:fc:3b:d7:d6:31:2f:3c:0d:c0:d5:b6:7a:41:d3: 1d:84:06:89:36:8b:e7:90:1a:60:a0:48:52:c5:0b:fb:9c:0a: 88:50:f8:f8:5e:6d:da:0d:18:2d:8e:12:02:42:59:a5:19:ea: af:6e:11:8e:0c:ba:56:e4:22:59:66:aa:b8:25:da:7b:52:90: 85:79:92:58:af:df:c0:71:51:da:05:77:92:f1:98:19:03:a0: b3:36:87:ad:1b:9b:f8:84:cf:87:51:12:ec:6a:aa:10:c1:58: c6:0c:37:56:62:44:df:22:69:62:f0:84:b5:99:fb:44:b9:d7: 69:39:0a:2e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NS+3+a2jPN3r5lHRzW4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdlZTRiMDMyNzk5NjMwNGNmMThhMTI4ZTI2NTU3ODBjOWQ2YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0chpwS9YArMoQa8CucjV2TpqcC g2GARomBSkR/THy4VaBNUUwAbHceszFu8dN6k4ep1/tQ8lFu43MOxU9lQqHTwylo COzqI+rRFAZJ/RSgqGO5HNqV80IN4rMkqKNMS4Kz4TlOJP38T4RkN5DmjFx1DGgj 4ifRC0Q3wm2iyJto/K11AFEq/pcMlwxWmPrRMPllGQ/88DdY5ZeJi/QqqdUdIF+v 64cJd8XqgSbcdSUWQvyp0nAgVIRv7EqOemePo8F7Ur313fPaKQGxk4GbL6NEJCJX Y6h7HJZxN5QvzUlrGdy3QMj5zV7VP+30G0B+JWSPADerpLFekkhTYObOeQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM1+5LAyeZYwTPGKEo4mVXgMnWubMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2VjYWVi My1mNDJmLTRiYWMtYTQ5ZS0yNDJmZmRhYTI2NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZWNhZWIz LWY0MmYtNGJhYy1hNDllLTI0MmZmZGFhMjY3MC8xL3pYN2tzREo1bGpCTThZb1Nq aVpWZUF5ZGE1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXyAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC+VzANBgkqhkiG9w0BAQsFAAOCAQEAYN9CF4TBTSOcLhNVlL2G5TP/wHM00xTU ojajNzpS80nM+Bggq7hZ7LGz7rMbVwpPTxy68VmnlV/F+gZ0lXMkMIvw+JqCqMwU vB3sgqFikgcNvpGb2YJtVRogHNJhBZORuWX06il7LY8I3fzfyEHtkaene6jNuFrY 6/u/ygKlVKGhrvw719YxLzwNwNW2ekHTHYQGiTaL55AaYKBIUsUL+5wKiFD4+F5t 2g0YLY4SAkJZpRnqr24Rjgy6VuQiWWaquCXae1KQhXmSWK/fwHFR2gV3kvGYGQOg szaHrRub+ITPh1ES7GqqEMFYxgw3VmJE3yJpYvCEtZn7RLnXaTkKLg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:39 2026 by rpki-client