This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer (raw, json) Hash identifier: q4yZDmsyCz5aiMra9oott7MOBl/Ob4psCM1ioL8xMBo= Subject key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AFD8343EA67D1CC1E36C5D33271C3F8CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 08 Dec 2025 10:30:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209990 IP: 2001:678:58c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:83:43:ea:67:d1:cc:1e:36:c5:d3:32:71:c3:f8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 8 10:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=199b3f908ce6e1764617731b624539421d13c94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:6c:89:bd:fa:5c:ce:1d:b8:43:4b:72:ef: 87:83:a1:3c:73:3b:32:0a:c2:8c:34:84:56:63:e0: ce:06:ca:97:a7:93:ff:91:47:38:c5:1c:bf:2d:05: d4:fc:63:03:17:37:25:e0:73:fb:f1:9c:ab:2f:d2: 2f:fb:5b:d9:ef:20:dd:f3:0c:6d:c3:a2:78:d1:fd: 85:c4:a2:dc:9e:28:a4:3c:a6:27:46:c6:28:b8:06: 81:29:d8:61:19:a2:aa:fd:2f:5a:0b:2d:8e:43:e6: 6d:9b:e8:13:9e:6f:5d:11:03:8b:fc:47:9b:31:71: 1d:64:11:19:72:c7:37:72:32:68:b4:d1:95:3a:7a: 29:7b:0b:6f:08:3a:99:03:1e:8f:a7:c7:1a:15:e0: 78:f2:4a:9d:ae:05:08:85:c3:ed:19:ec:09:2c:34: d8:64:7c:9a:5e:02:97:82:52:0f:a2:cf:c0:7c:85: eb:bb:b0:e8:83:d5:b8:fd:06:8b:81:3b:36:5c:78: 88:59:42:1c:9a:be:ed:86:84:26:5b:85:c1:85:17: c9:bd:69:ca:ee:91:81:f4:2e:b6:bb:57:6e:f2:8a: 5c:50:16:d4:fc:c9:d1:f4:a9:79:44:13:07:98:1b: 0a:69:aa:3b:a3:6b:98:30:03:c1:b4:07:de:5c:37: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:58c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209990 Signature Algorithm: sha256WithRSAEncryption 7b:17:a5:56:2c:6f:23:4b:4f:0b:53:e5:6d:7e:80:ca:20:b0: 14:49:42:ea:08:b5:dc:1c:62:75:03:4d:8b:5c:56:47:f0:83: 45:d1:4f:7c:09:ea:8b:c3:6a:a1:de:31:5d:b7:79:20:1f:2d: b0:fa:79:9a:dd:16:88:87:5a:a6:6f:e1:3d:fe:09:9f:c9:d6: cd:3c:c6:20:14:e8:bc:6c:bb:ce:50:87:66:fa:06:7b:1d:ea: 59:e2:49:cc:b2:83:eb:1f:b3:62:8d:c8:59:05:73:c5:90:4f: da:ab:61:25:38:87:75:61:12:8e:b4:94:d5:f4:84:c2:ae:8b: e9:09:9a:62:2e:82:5f:c2:29:6c:9e:ed:04:0b:fa:b0:fc:df: b4:0f:e7:13:fd:ec:63:4d:ab:ba:0b:85:c8:68:a4:0b:26:9f: ea:39:66:53:6b:16:34:f5:39:c4:47:37:7d:94:cd:93:d4:a1: dd:d7:d1:02:35:f1:34:6b:40:04:94:30:5d:50:0e:53:36:2a: ca:17:4c:7a:50:0a:1c:f2:d0:ee:25:39:f6:de:54:f9:de:d9: 9e:60:5e:5b:c9:7e:4d:d5:21:3b:b9:79:db:37:dd:e7:51:39: e5:51:9e:27:8d:69:7f:d8:3e:ee:dd:ea:e7:5c:b7:0c:07:61: 52:6e:a0:58 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZr9g0PqZ9HMHjbF0zJxw/jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA4MTAzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTliM2Y5MDhjZTZlMTc2NDYxNzczMWI2MjQ1Mzk0MjFkMTNjOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Fsib36XM4duENLcu+Hg6E8czsy CsKMNIRWY+DOBsqXp5P/kUc4xRy/LQXU/GMDFzcl4HP78ZyrL9Iv+1vZ7yDd8wxt w6J40f2FxKLcniikPKYnRsYouAaBKdhhGaKq/S9aCy2OQ+Ztm+gTnm9dEQOL/Eeb MXEdZBEZcsc3cjJotNGVOnopewtvCDqZAx6Pp8caFeB48kqdrgUIhcPtGewJLDTY ZHyaXgKXglIPos/AfIXru7Dog9W4/QaLgTs2XHiIWUIcmr7thoQmW4XBhRfJvWnK 7pGB9C62u1du8opcUBbU/MnR9Kl5RBMHmBsKaao7o2uYMAPBtAfeXDfhlQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFBmbP5CM5uF2RhdzG2JFOUIdE8lNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzBlODcx NS1kODdlLTRjZTUtOTQ4Mi0yZTk3YWJhMGZiMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMGU4NzE1 LWQ4N2UtNGNlNS05NDgyLTJlOTdhYmEwZmIyYy8xL0dac19rSXptNFhaR0YzTWJZ a1U1UWgwVHlVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM0RjANBgkqhkiG9w0BAQsFAAOCAQEAexelVixvI0tPC1PlbX6AyiCwFElC 6gi13BxidQNNi1xWR/CDRdFPfAnqi8Nqod4xXbd5IB8tsPp5mt0WiIdapm/hPf4J n8nWzTzGIBTovGy7zlCHZvoGex3qWeJJzLKD6x+zYo3IWQVzxZBP2qthJTiHdWES jrSU1fSEwq6L6QmaYi6CX8IpbJ7tBAv6sPzftA/nE/3sY02ruguFyGikCyaf6jlm U2sWNPU5xEc3fZTNk9Sh3dfRAjXxNGtABJQwXVAOUzYqyhdMelAKHPLQ7iU59t5U +d7ZnmBeW8l+TdUhO7l52zfd51E55VGeJ41pf9g+7t3q51y3DAdhUm6gWA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:48 2025 by rpki-client