This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer (raw, json) Hash identifier: yz8PYQ4IJT0++ST7vSv6k+aLUOHqlrfxjXx3Covxy+Y= Subject key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D0AA176C6E7F9A6E7302FB57DF80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60749 IP: 185.89.164.0/22 IP: 2a03:8420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:aa:17:6c:6e:7f:9a:6e:73:02:fb:57:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdbc431b1c9886dc2b21008dccfde18db735371c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:38:c5:d2:6b:3f:1a:19:8a:57:29:85:dd: 68:9b:7c:8a:cc:bc:4a:ae:e4:de:55:99:d5:31:8c: c4:22:d5:23:de:db:01:1e:f8:88:80:dd:e5:f4:0a: fc:73:ff:f2:9c:42:dd:27:78:97:81:74:35:fb:f0: af:5a:ba:50:0d:d6:53:73:89:40:cf:3d:a8:40:59: 83:83:90:2d:72:5f:22:30:cb:4f:a9:96:bf:47:54: 11:82:4f:e0:c7:5a:45:7a:cf:98:20:af:fe:ab:72: 77:79:bd:ba:74:6a:0a:f7:e5:10:59:45:0a:28:1b: 3b:6e:c2:31:b6:54:b6:a7:59:3c:56:20:23:0c:e7: 51:2d:76:46:89:9a:36:6d:d9:be:2e:2b:90:0b:2c: 91:42:81:40:fc:12:6a:ff:95:18:98:85:a4:d3:93: 40:68:3f:1f:b0:04:6c:1c:7e:95:8c:58:fd:1e:b2: 06:8a:3b:18:89:51:88:6b:f0:17:2f:5b:e2:6a:bf: ca:d3:e6:71:0f:cf:6d:5e:d4:11:37:3a:73:32:7c: 3c:c2:9a:ea:74:99:5c:b9:bd:1a:8e:1d:3a:bd:b3: 2c:c9:41:f9:56:aa:77:da:5c:07:ea:10:b3:ba:b5: dc:0a:d0:58:63:62:6b:5e:aa:9c:b6:39:56:62:8b: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.164.0/22 IPv6: 2a03:8420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60749 Signature Algorithm: sha256WithRSAEncryption 1d:54:5a:2b:28:7a:9a:5f:1a:9a:18:76:33:c1:72:0e:a8:df: 48:3e:b2:72:65:27:c5:d3:6a:21:02:47:e6:fe:b4:c3:a1:d2: 80:bd:5f:6e:37:7a:d3:95:68:a7:5f:0a:27:f7:93:41:37:c3: 05:bc:0a:37:e7:52:0a:bd:23:6b:7d:25:6b:f6:ef:d4:22:55: c1:92:7a:6b:57:80:04:3b:2f:db:7d:3b:39:a0:ee:19:fa:9e: 46:79:b2:60:2b:71:3d:61:e8:8d:ea:07:36:2e:5c:d5:60:10: 26:24:51:fa:61:5e:af:8f:6a:a4:8a:cf:89:5d:12:73:e3:aa: 69:11:2e:26:08:f0:35:e9:5f:06:f2:11:73:a8:9d:4e:84:33: bf:b8:22:bf:ef:0c:e2:0b:64:e2:19:99:ab:6b:d1:5a:e0:d3: 79:f8:97:f9:05:bc:d9:0c:56:67:02:d7:f8:e3:e7:a0:f4:a9: 9b:02:01:f8:1a:77:40:10:a1:d8:8d:09:5d:45:cb:50:ce:fd: df:cf:9d:09:58:dc:d3:5e:97:62:32:cd:82:bb:0e:ed:39:e4: b9:5e:8c:c1:c2:42:89:8e:cc:f9:26:5b:22:4c:ba:ae:a4:89: a1:79:8d:5b:6f:0d:60:a6:ab:19:97:cf:dc:fa:bc:20:6b:b6: b3:06:89:01 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xtCqF2xuf5pucwL7V9+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGJjNDMxYjFjOTg4NmRjMmIyMTAwOGRjY2ZkZTE4ZGI3MzUzNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xk4xdJrPxoZilcphd1om3yKzLxK ruTeVZnVMYzEItUj3tsBHviIgN3l9Ar8c//ynELdJ3iXgXQ1+/CvWrpQDdZTc4lA zz2oQFmDg5Atcl8iMMtPqZa/R1QRgk/gx1pFes+YIK/+q3J3eb26dGoK9+UQWUUK KBs7bsIxtlS2p1k8ViAjDOdRLXZGiZo2bdm+LiuQCyyRQoFA/BJq/5UYmIWk05NA aD8fsARsHH6VjFj9HrIGijsYiVGIa/AXL1viar/K0+ZxD89tXtQRNzpzMnw8wprq dJlcub0ajh06vbMsyUH5Vqp32lwH6hCzurXcCtBYY2JrXqqctjlWYotfwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM28QxscmIbcKyEAjcz94Y23NTccMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzM2ODli ZS04MTUyLTRiYWQtYjk5Ni0zY2RhNzEzNzNkYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMzY4OWJl LTgxNTItNGJhZC1iOTk2LTNjZGE3MTM3M2RjOS8xL3pieERHeHlZaHR3cklRQ056 UDNoamJjMU54dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVmkMA0EAgACMAcDBQAqA4QgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtTTANBgkqhkiG9w0BAQsFAAOCAQEAHVRaKyh6ml8a mhh2M8FyDqjfSD6ycmUnxdNqIQJH5v60w6HSgL1fbjd605Vop18KJ/eTQTfDBbwK N+dSCr0ja30la/bv1CJVwZJ6a1eABDsv2307OaDuGfqeRnmyYCtxPWHojeoHNi5c 1WAQJiRR+mFer49qpIrPiV0Sc+OqaREuJgjwNelfBvIRc6idToQzv7giv+8M4gtk 4hmZq2vRWuDTefiX+QW82QxWZwLX+OPnoPSpmwIB+Bp3QBCh2I0JXUXLUM7938+d CVjc016XYjLNgrsO7TnkuV6MwcJCiY7M+SZbIky6rqSJoXmNW28NYKarGZfP3Pq8 IGu2swaJAQ== -----END CERTIFICATE-----Generated at Mon Jan 12 07:33:50 2026 by rpki-client