This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer (raw, json) Hash identifier: e+VHm1UhZN6h7Zh12SSGwZwn9s4LhKWRyCv3RPJtYmc= Subject key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA568E94DD2E308F4BD6CEE429B6D6E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207023 IP: 185.60.201.0 -- 185.60.203.255 IP: 185.115.64.0/22 IP: 185.120.8.0/22 IP: 185.126.72.0/21 IP: 185.168.156.0/22 IP: 185.174.88.0/22 IP: 185.242.92.0/22 IP: 2a0a:d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:68:e9:4d:d2:e3:08:f4:bd:6c:ee:42:9b:6d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:cb:d1:ea:d0:48:3b:d0:bf:14:d2:de:a1: 38:df:e8:a0:38:a5:b7:b7:58:32:5c:16:78:cf:24: 9c:f7:80:b6:a1:83:fd:d1:70:c0:f7:d7:4b:ba:4f: e3:19:81:9c:6a:b8:42:f6:c8:84:23:22:c6:45:94: 39:14:26:eb:3c:95:57:b0:52:11:03:3e:2a:2a:e3: c5:eb:58:12:69:4c:47:60:33:a9:2a:0a:3d:00:9c: 44:07:a0:5d:58:0e:78:60:15:49:a3:cc:a1:a9:33: 18:a1:08:e3:00:a4:29:3c:8b:c6:a7:9a:ee:b1:7e: 63:19:d9:30:d9:b1:1c:a4:31:40:c9:10:0d:c4:d0: df:32:c2:78:e8:e3:5e:5b:b7:02:70:f2:85:ab:17: 54:33:e4:88:ec:ad:3e:fa:32:89:24:2a:06:e2:22: 39:d0:b5:42:63:a3:dc:41:dc:51:7c:cd:07:5c:24: b3:b4:32:fe:55:aa:1f:1e:36:90:c9:84:d4:f5:87: 17:8d:ec:72:ce:e1:07:88:a5:1d:69:04:cd:8a:32: f0:fe:d3:46:60:61:4a:34:fe:d0:5a:39:25:bf:e3: 96:0d:83:ee:c8:9d:8b:59:ac:bc:44:14:91:7a:eb: c2:cf:0d:c0:51:39:7f:f3:00:22:8e:14:7d:95:99: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.201.0-185.60.203.255 185.115.64.0/22 185.120.8.0/22 185.126.72.0/21 185.168.156.0/22 185.174.88.0/22 185.242.92.0/22 IPv6: 2a0a:d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207023 Signature Algorithm: sha256WithRSAEncryption 72:53:48:90:6c:63:7a:92:0a:af:8d:05:af:06:d9:4e:e5:4a: d5:b8:53:00:d9:d4:10:59:b8:ee:3b:f5:76:83:4a:e8:bd:73: 3f:3c:21:da:40:23:a7:24:5d:f3:2e:df:fc:e4:9b:3a:a7:59: 28:c3:d1:09:7a:e1:4b:26:c8:28:20:2c:29:65:29:99:9c:c8: 05:17:d1:3f:9e:09:83:c8:d0:39:25:37:e1:eb:96:fd:b8:9e: 53:98:d1:34:6f:3b:1b:94:22:0c:4a:ab:f4:66:5c:36:e5:64: 29:be:b0:a0:e1:19:dd:8f:a1:d0:8b:1e:ec:cd:bb:61:32:7e: d1:c3:73:ac:74:c0:ba:4d:41:2a:d9:52:f7:af:06:b5:b1:f9: eb:a0:3e:24:78:31:c3:fe:7b:a3:40:a7:f9:fb:27:20:0d:7b: f0:81:6b:39:b1:9b:0e:03:1f:2b:a4:37:e2:ef:5b:de:80:d7: 72:c5:ee:ee:eb:a0:d9:82:98:aa:9e:f3:95:b9:b0:bf:27:fd: ac:aa:5c:6c:95:fb:c8:fc:ea:5d:f9:78:61:80:94:9b:2c:df: 0a:ea:47:6a:f8:06:9b:80:13:b1:fa:ca:13:78:24:cb:75:3a: 36:52:4e:08:4b:c2:db:95:a0:6e:17:04:46:ba:4d:d2:42:10: c0:c8:3b:06 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt+pWjpTdLjCPS9bO5Cm21uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTk1OGYxODFmYjUwN2EwYTJhODIxODU2YjhiZTBkNTRiMTE4Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjXL0erQSDvQvxTS3qE43+igOKW3 t1gyXBZ4zySc94C2oYP90XDA99dLuk/jGYGcarhC9siEIyLGRZQ5FCbrPJVXsFIR Az4qKuPF61gSaUxHYDOpKgo9AJxEB6BdWA54YBVJo8yhqTMYoQjjAKQpPIvGp5ru sX5jGdkw2bEcpDFAyRANxNDfMsJ46ONeW7cCcPKFqxdUM+SI7K0++jKJJCoG4iI5 0LVCY6PcQdxRfM0HXCSztDL+VaofHjaQyYTU9YcXjexyzuEHiKUdaQTNijLw/tNG YGFKNP7QWjklv+OWDYPuyJ2LWay8RBSReuvCzw3AUTl/8wAijhR9lZk6+wIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFM6VjxgftQegoqghhWuL4NVLEYuFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzNkOWJm YS1jZmQwLTQ0YTgtODQyZS0wZGJiM2I4ZGIxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvM2Q5YmZh LWNmZDAtNDRhOC04NDJlLTBkYmIzYjhkYjE1Zi8xL3pwV1BHQi0xQjZDaXFDR0Zh NHZnMVVzUmk0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyMAwDBAC5PMkDBAK5PMgDBAK5c0ADBAK5eAgDBAO5 fkgDBAK5qJwDBAK5rlgDBAK58lwwDQQCAAIwBwMFAyoKDQAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAyivMA0GCSqGSIb3DQEBCwUAA4IBAQByU0iQbGN6kgqvjQWv BtlO5UrVuFMA2dQQWbjuO/V2g0rovXM/PCHaQCOnJF3zLt/85Js6p1kow9EJeuFL JsgoICwpZSmZnMgFF9E/ngmDyNA5JTfh65b9uJ5TmNE0bzsblCIMSqv0Zlw25WQp vrCg4Rndj6HQix7szbthMn7Rw3OsdMC6TUEq2VL3rwa1sfnroD4keDHD/nujQKf5 +ycgDXvwgWs5sZsOAx8rpDfi71vegNdyxe7u66DZgpiqnvOVubC/J/2sqlxslfvI /Opd+XhhgJSbLN8K6kdq+AabgBOx+soTeCTLdTo2Uk4IS8LblaBuFwRGuk3SQhDA yDsG -----END CERTIFICATE-----Generated at Mon Jan 12 22:25:59 2026 by rpki-client