This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer (raw, json) Hash identifier: D8F/s/8V/XmOaocB825DidGhlsj2SkOyIEXLxWqmCi4= Subject key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F228AD2DBEF0AD4815AF6E81BEF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34350 AS: 48455 IP: 80.70.48.0/20 IP: 195.162.2.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f2:28:ad:2d:be:f0:ad:48:15:af:6e:81:be:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdee78ad857607523b50b60acd9e22ca5a107854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:7a:c3:e7:fb:78:b2:52:e8:cb:67:5a:71: 72:44:18:b8:90:53:70:b6:fe:c3:bb:cf:09:fd:35: ef:a6:18:07:6e:b1:94:78:72:8f:70:da:51:19:67: 32:a4:83:63:df:d6:07:74:b9:18:51:75:dd:e0:25: ef:a5:b9:35:24:04:30:cc:be:7b:1c:57:7b:03:db: 9d:91:5a:b1:19:e3:04:e0:6b:e8:f1:74:c6:42:a5: dd:a3:f2:49:05:e4:cf:27:44:52:1f:58:40:14:4d: 40:72:95:ea:31:2e:6b:87:8d:02:5f:d7:f8:4b:44: 4b:00:37:2b:3f:64:08:83:4d:a7:0a:3c:73:88:98: 78:fd:e4:48:c1:78:c5:8a:32:27:f8:11:73:eb:b7: da:1b:a8:e9:92:dd:cf:8c:fb:e1:3b:a4:f3:d7:cc: c4:5e:7c:83:92:66:b3:30:1d:ca:f2:91:c4:04:17: f5:ea:b7:c4:34:30:0c:25:29:4e:63:12:cd:4a:81: 8d:fc:10:82:47:28:9e:9d:7f:94:6c:dc:e2:07:3e: 44:86:a4:b1:3c:97:d1:1d:b8:c0:29:7c:60:44:35: 92:f6:9b:9c:7d:17:04:0c:41:42:3e:a2:7a:68:90: c5:64:10:57:93:62:34:00:64:5c:13:d8:ec:f6:1c: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.48.0/20 195.162.2.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34350 48455 Signature Algorithm: sha256WithRSAEncryption 29:eb:20:dc:85:aa:0d:e7:60:e3:86:bb:76:07:39:4b:2e:6e: 46:4c:57:32:9f:1e:52:f8:69:76:5e:87:18:3c:3e:0c:f7:5c: ea:0f:8a:a2:aa:99:16:72:99:cd:ca:31:13:2c:4d:32:9a:af: cc:c5:96:57:51:d1:c9:dd:f9:bd:3b:c6:a7:ba:f2:70:cf:ae: 0c:f5:37:6f:a6:9e:36:9d:04:6d:06:79:20:b1:52:8f:d5:65: fa:0c:05:3b:f9:97:9a:e1:ef:a9:00:ed:e5:a5:02:32:7a:26: 63:35:96:73:d1:f6:8f:ef:34:3d:7a:c7:97:1d:2d:52:4d:a9: 6c:7d:11:1a:93:0f:80:43:fc:bb:0c:00:8d:d8:d1:1b:51:06: 4a:cb:ad:89:1c:c7:62:57:71:d1:07:ed:06:1a:73:42:25:ab: d2:4e:25:5e:1b:9d:49:95:7e:6a:24:dd:e7:46:a0:24:00:23: ee:88:3d:e4:98:fc:96:d2:c0:60:22:48:15:88:01:10:31:30: 4d:c0:2e:5f:6b:91:4f:04:96:1c:b3:30:91:50:04:4c:04:0a: c1:95:18:82:a4:46:27:93:e6:26:47:70:ed:1d:a2:c2:e0:bd: 8f:c3:86:17:94:5d:53:4e:c4:96:09:be:13:14:49:2d:a1:38: 4d:af:c6:4c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4NPIorS2+8K1IFa9ugb7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGVlNzhhZDg1NzYwNzUyM2I1MGI2MGFjZDllMjJjYTVhMTA3ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fJ6w+f7eLJS6MtnWnFyRBi4kFNw tv7Du88J/TXvphgHbrGUeHKPcNpRGWcypINj39YHdLkYUXXd4CXvpbk1JAQwzL57 HFd7A9udkVqxGeME4Gvo8XTGQqXdo/JJBeTPJ0RSH1hAFE1AcpXqMS5rh40CX9f4 S0RLADcrP2QIg02nCjxziJh4/eRIwXjFijIn+BFz67faG6jpkt3PjPvhO6Tz18zE XnyDkmazMB3K8pHEBBf16rfENDAMJSlOYxLNSoGN/BCCRyienX+UbNziBz5EhqSx PJfRHbjAKXxgRDWS9pucfRcEDEFCPqJ6aJDFZBBXk2I0AGRcE9js9hzblQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFM3ueK2FdgdSO1C2Cs2eIspaEHhUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzVhNDli Zi1jMDU5LTRiZWEtODhkMy1jZjAxMjRjZWQ0ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNWE0OWJm LWMwNTktNGJlYS04OGQzLWNmMDEyNGNlZDRkNi8xL3plNTRyWVYyQjFJN1VMWUt6 WjRpeWxvUWVGUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEUEYwAwQBw6ICMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCGLgIDAL1HMA0GCSqGSIb3DQEBCwUAA4IBAQAp6yDchaoN52Djhrt2 BzlLLm5GTFcynx5S+Gl2XocYPD4M91zqD4qiqpkWcpnNyjETLE0ymq/MxZZXUdHJ 3fm9O8anuvJwz64M9Tdvpp42nQRtBnkgsVKP1WX6DAU7+Zea4e+pAO3lpQIyeiZj NZZz0faP7zQ9eseXHS1STalsfREakw+AQ/y7DACN2NEbUQZKy62JHMdiV3HRB+0G GnNCJavSTiVeG51JlX5qJN3nRqAkACPuiD3kmPyW0sBgIkgViAEQMTBNwC5fa5FP BJYcszCRUARMBArBlRiCpEYnk+YmR3DtHaLC4L2Pw4YXlF1TTsSWCb4TFEktoThN r8ZM -----END CERTIFICATE-----Generated at Mon Jan 12 01:59:20 2026 by rpki-client