This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer File: zeHP7MkrEE_Pqe_saljwwZeQFlI.cer (raw, json) Hash identifier: QuifcO73xqgnRLYzRtOJpPlNHR6v7Pvowimm5uCVn5A= Subject key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775958FD3391D64F422EA086F4D17DAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34155 AS: 34336 AS: 44165 AS: 49241 AS: 51136 AS: 197258 AS: 199463 AS: 209973 IP: 91.209.76.0/24 IP: 91.217.102.0/23 IP: 91.217.180.0/24 IP: 195.43.90.0/23 IP: 195.130.216.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:58:fd:33:91:d6:4f:42:2e:a0:86:f4:d1:7d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:68:37:ff:85:f0:cc:62:84:a4:b4:74:d5: 7d:30:3d:25:62:32:e0:2f:a9:3b:33:53:23:91:58: 9c:e0:c3:6c:18:49:bc:85:1b:c1:10:9b:fd:8c:60: b0:75:1e:ff:4f:be:74:aa:cb:13:fd:d6:91:5d:d9: d8:3e:90:43:e9:64:fe:a1:0c:84:e0:75:96:7e:0b: 05:86:3a:ca:73:1f:0a:7c:86:fd:ac:15:8c:1c:e6: 7c:3a:e8:ea:32:fd:51:86:d4:e6:0a:3b:d7:c4:4f: 99:11:2e:84:09:21:8d:7e:eb:c2:a8:41:55:9d:d4: cc:b3:bb:f5:27:ac:a7:c9:ab:ec:e9:97:9b:8b:69: 67:75:e3:cd:40:27:a9:7c:e3:05:52:63:f6:be:f2: 3e:c6:ee:0c:9a:0e:8c:8b:14:a7:d8:b8:1f:fd:f0: d0:ea:94:86:b4:e3:29:b6:6f:43:31:1a:34:14:96: 96:6e:5b:17:38:dc:71:4e:b4:44:26:3c:2a:aa:2c: 35:cb:db:49:7e:8e:a5:da:b0:13:89:f6:37:07:8c: 95:d0:af:82:88:89:52:aa:02:ac:12:c5:23:4d:30: 9f:9a:71:d0:50:b5:85:e9:c1:43:56:62:78:85:97: 03:75:4d:f7:98:7a:57:6d:82:08:af:eb:43:e1:b1: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.76.0/24 91.217.102.0/23 91.217.180.0/24 195.43.90.0/23 195.130.216.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34155 34336 44165 49241 51136 197258 199463 209973 Signature Algorithm: sha256WithRSAEncryption a5:bd:09:9f:53:e7:84:47:d2:d2:05:c3:70:57:17:91:0e:26: f0:87:39:07:c2:93:d7:19:45:b5:07:b6:fd:53:f8:46:95:d0: 45:a0:95:10:c6:ea:65:84:50:3a:80:5d:f5:e5:2f:3a:30:cd: 06:b9:a8:f0:89:98:a3:3a:23:3e:0e:a5:cc:22:db:81:aa:eb: f4:b6:92:c1:d6:45:46:34:0c:9b:ad:c4:f5:01:31:f2:47:5d: 08:d9:cd:c4:a4:b3:6e:bc:af:8a:08:3c:6c:7b:69:44:79:e9: 7b:93:c9:f1:5e:9e:ed:e8:24:ff:d5:05:f0:68:d4:10:73:79: 90:9c:9e:59:68:e8:f7:2d:9f:40:5f:48:bb:9d:99:3f:f2:03: 37:0e:04:d3:05:4f:3c:72:03:9d:73:1f:83:17:f0:77:7d:e6: 18:ba:4a:9c:48:b6:1d:c0:08:8e:5b:2d:a7:48:e1:4b:c9:21: 70:95:08:21:c5:2c:7e:ec:ea:6d:44:7c:35:39:ca:be:b1:d2: 66:26:ce:08:1d:d2:2a:88:41:0e:a7:a9:0b:2d:6e:e5:dc:63: 47:7b:95:f7:94:6e:ad:ee:31:e9:b5:1a:fa:80:5c:bc:1f:ea: 62:a6:35:a2:7c:f9:85:22:72:95:19:e1:ee:cd:04:4b:b8:d5: 21:74:15:33 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt3WVj9M5HWT0IuoIb00X2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGUxY2ZlY2M5MmIxMDRmY2ZhOWVmZWM2YTU4ZjBjMTk3OTAxNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05NoN/+F8MxihKS0dNV9MD0lYjLg L6k7M1MjkVic4MNsGEm8hRvBEJv9jGCwdR7/T750qssT/daRXdnYPpBD6WT+oQyE 4HWWfgsFhjrKcx8KfIb9rBWMHOZ8OujqMv1RhtTmCjvXxE+ZES6ECSGNfuvCqEFV ndTMs7v1J6ynyavs6Zebi2lndePNQCepfOMFUmP2vvI+xu4Mmg6MixSn2Lgf/fDQ 6pSGtOMptm9DMRo0FJaWblsXONxxTrREJjwqqiw1y9tJfo6l2rATifY3B4yV0K+C iIlSqgKsEsUjTTCfmnHQULWF6cFDVmJ4hZcDdU33mHpXbYIIr+tD4bEERwIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFM3hz+zJKxBPz6nv7GpY8MGXkBZSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2M1Y2Ji NC1iZDhiLTQ4ODUtODQ2Ni04NzQ1ZGUyZjQzMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvYzVjYmI0 LWJkOGItNDg4NS04NDY2LTg3NDVkZTJmNDMyMS8xL3plSFA3TWtyRUVfUHFlX3Nh bGp3d1plUUZsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQAW9FMAwQBW9lmAwQAW9m0AwQBwytaAwQAw4LY MD0GCCsGAQUFBwEIAQH/BC4wLKAqMCgCAwCFawIDAIYgAgMArIUCAwDAWQIDAMfA AgMDAooCAwMLJwIDAzQ1MA0GCSqGSIb3DQEBCwUAA4IBAQClvQmfU+eER9LSBcNw VxeRDibwhzkHwpPXGUW1B7b9U/hGldBFoJUQxuplhFA6gF315S86MM0GuajwiZij OiM+DqXMItuBquv0tpLB1kVGNAybrcT1ATHyR10I2c3EpLNuvK+KCDxse2lEeel7 k8nxXp7t6CT/1QXwaNQQc3mQnJ5ZaOj3LZ9AX0i7nZk/8gM3DgTTBU88cgOdcx+D F/B3feYYukqcSLYdwAiOWy2nSOFLySFwlQghxSx+7OptRHw1Ocq+sdJmJs4IHdIq iEEOp6kLLW7l3GNHe5X3lG6t7jHptRr6gFy8H+pipjWifPmFInKVGeHuzQRLuNUh dBUz -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:14 2026 by rpki-client