This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer File: zy3L5YDpQvIQonhxtWUMjCkGOFE.cer (raw, json) Hash identifier: Y+xKp6ZPgFIImVeuxZ5bRbEZNvz+A66L6ij3GSxFhdc= Subject key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35AF185A52E4EADC29CCBA95AEB69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203798 IP: 185.116.24.0/22 IP: 2a03:4660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5a:f1:85:a5:2e:4e:ad:c2:9c:cb:a9:5a:eb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2dcbe580e942f210a27871b5650c8c29063851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:ce:1c:6b:36:bc:52:6b:07:23:63:ee:b6: 5f:63:41:c8:a0:61:d8:a8:af:f6:9c:7b:82:43:a2: 39:70:f8:39:56:84:1a:5a:a0:a5:99:2f:9f:c1:1e: cc:8d:8a:c3:bd:35:cf:eb:0f:49:eb:1c:e1:55:c6: 05:27:a6:fd:22:ba:30:2c:fd:a5:ea:73:46:04:bf: ff:85:cb:70:9e:93:cf:29:6c:c3:8c:fd:cd:3d:0d: 58:74:b0:af:88:7f:dc:cf:23:4f:35:31:ac:fc:81: 7f:cb:5b:3e:32:17:2c:71:9d:e3:55:22:c7:15:7b: 71:57:0c:a0:55:c3:f5:8c:ad:3e:d7:19:c0:ba:56: fe:93:35:bf:a3:a1:f0:4b:fb:67:df:a8:0d:76:8d: 68:d6:28:57:4f:aa:04:28:35:6c:95:67:c3:1b:d4: 23:67:7c:a3:5e:2f:98:24:60:a9:74:44:20:c9:12: 9b:c6:b8:09:16:7a:2e:5d:c9:43:8b:40:85:cc:3d: 21:fc:92:31:38:32:c8:83:9d:7b:03:14:ed:45:f9: a7:8b:a9:aa:a3:e9:4c:e1:b9:92:61:ad:c1:63:58: 9b:95:4c:bb:5d:bd:2a:3f:13:22:d9:79:31:3a:69: e5:e9:ed:74:07:47:dd:1b:16:91:63:a4:ac:d6:a9: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.24.0/22 IPv6: 2a03:4660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203798 Signature Algorithm: sha256WithRSAEncryption 5b:f0:28:1b:af:0d:48:13:0e:00:3f:9e:c6:d1:88:5f:15:d2: 7b:e7:97:9d:d1:51:3b:f8:99:41:8c:11:9e:ec:6e:f7:8e:e3: 12:a8:a0:e3:8c:59:95:69:c4:d6:17:63:b3:da:8f:55:0e:f3: 2f:95:99:ec:7b:5d:29:59:a8:b5:a2:6f:f4:a4:26:09:2e:8a: 3a:65:9d:37:58:ed:42:93:36:a1:62:78:54:8f:d2:18:c0:10: c6:fd:5b:79:19:78:86:5b:a1:d2:23:f7:96:ee:f8:38:30:66: d4:62:76:b7:59:91:90:8e:5e:05:27:1c:ce:46:68:9b:aa:96: 09:d6:c3:0e:11:12:79:59:63:43:f4:83:9d:d9:cc:d2:5f:44: ec:58:3f:bc:ad:d0:c2:fc:cd:ca:90:30:1a:6e:c4:16:af:e7: c6:10:b6:fa:d4:8f:86:9c:08:8c:f3:8f:b3:b4:eb:2e:2b:e3: 0d:c8:23:df:c9:18:c6:4a:5f:7f:ad:a8:a5:ca:44:71:ed:ce: 00:3e:f0:69:8c:74:06:a9:70:78:73:a5:da:bd:76:e9:9c:5c: 22:8f:4c:ba:d4:a5:1d:50:4d:6e:97:ce:d0:58:10:02:a0:e7: 03:eb:1c:b6:84:00:53:6e:c8:36:99:cd:46:43:b4:4f:3d:b1: c3:d1:33:76 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o1rxhaUuTq3CnMupWutpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjJkY2JlNTgwZTk0MmYyMTBhMjc4NzFiNTY1MGM4YzI5MDYzODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lzOHGs2vFJrByNj7rZfY0HIoGHY qK/2nHuCQ6I5cPg5VoQaWqClmS+fwR7MjYrDvTXP6w9J6xzhVcYFJ6b9IrowLP2l 6nNGBL//hctwnpPPKWzDjP3NPQ1YdLCviH/czyNPNTGs/IF/y1s+MhcscZ3jVSLH FXtxVwygVcP1jK0+1xnAulb+kzW/o6HwS/tn36gNdo1o1ihXT6oEKDVslWfDG9Qj Z3yjXi+YJGCpdEQgyRKbxrgJFnouXclDi0CFzD0h/JIxODLIg517AxTtRfmni6mq o+lM4bmSYa3BY1iblUy7Xb0qPxMi2XkxOmnl6e10B0fdGxaRY6Ss1qloJwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2Q4NzEz ZS1kNDk5LTQ1MWMtODhjYi01ZDQ5MzY4ZGQyZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvZDg3MTNl LWQ0OTktNDUxYy04OGNiLTVkNDkzNjhkZDJmZi8xL3p5M0w1WURwUXZJUW9uaHh0 V1VNakNrR09GRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXQYMA0EAgACMAcDBQAqA0ZgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcFjANBgkqhkiG9w0BAQsFAAOCAQEAW/AoG68NSBMO AD+extGIXxXSe+eXndFRO/iZQYwRnuxu947jEqig44xZlWnE1hdjs9qPVQ7zL5WZ 7HtdKVmotaJv9KQmCS6KOmWdN1jtQpM2oWJ4VI/SGMAQxv1beRl4hluh0iP3lu74 ODBm1GJ2t1mRkI5eBScczkZom6qWCdbDDhESeVljQ/SDndnM0l9E7Fg/vK3QwvzN ypAwGm7EFq/nxhC2+tSPhpwIjPOPs7TrLivjDcgj38kYxkpff62opcpEce3OAD7w aYx0BqlweHOl2r126ZxcIo9MutSlHVBNbpfO0FgQAqDnA+sctoQAU27INpnNRkO0 Tz2xw9Ezdg== -----END CERTIFICATE-----Generated at Sun Jan 11 20:36:47 2026 by rpki-client