This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer (raw, json) Hash identifier: fK8mXkHWEwmF28A4LZX1aHO9OGUxBMHZWnqquOnhQT0= Subject key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129F94E60FD86239A39909700C2337 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197649 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9f:94:e6:0f:d8:62:39:a3:99:09:70:0c:23:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6414775fdaeec7b0d5c927083988d555727c21b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:b0:80:3a:5a:e7:2a:c5:9a:87:78:55:d2: c2:6c:7f:ba:28:50:89:86:e8:c9:53:87:c9:28:45: a5:9f:53:bf:5a:d1:85:8e:d5:8d:8f:97:2a:08:d3: df:92:6d:7d:13:8e:b6:75:bd:c1:ea:25:03:ec:ec: e2:28:09:5a:b8:91:f8:92:a5:c2:08:af:5d:79:74: 09:28:38:8f:bf:95:20:88:99:8f:62:33:af:bf:4d: d1:aa:0b:e7:e8:1d:f5:f5:2b:38:04:7c:e1:db:61: bf:e1:79:b9:19:82:c2:8e:1c:20:b8:49:b0:87:ff: 81:15:0d:1c:ee:6c:23:76:4f:f0:5b:74:41:c7:79: bd:a7:56:b3:18:c5:e5:b9:e2:63:97:21:e2:14:56: 66:fd:78:d6:45:46:50:60:d4:e7:66:69:94:d2:94: f5:68:03:cb:31:86:80:24:db:11:9a:0c:f8:cf:eb: ae:d4:eb:db:22:69:35:d0:8c:2f:d5:c2:85:87:5f: 18:65:ef:82:60:08:72:36:ef:d9:8e:76:07:87:32: b7:ca:6b:bf:ea:84:96:01:c4:60:7e:54:05:5f:1a: 05:a6:f4:81:a9:1e:7f:41:0c:ba:24:74:4b:ef:5e: ec:92:bd:80:fa:f9:0e:0d:04:0d:cb:ac:10:ac:35: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197649 Signature Algorithm: sha256WithRSAEncryption 62:1d:09:86:f2:86:b0:75:ca:23:5f:e6:9a:24:6b:6f:5d:ea: b3:0a:34:93:78:6b:ee:b7:18:74:91:54:b8:33:e6:d5:c4:a3: 4a:1b:40:8a:fe:01:45:c6:af:6a:3e:aa:90:bd:b7:1e:8b:6c: 00:94:b9:b3:49:3e:6a:78:ae:39:d3:26:a2:e1:da:33:7e:da: 69:a5:1a:a4:47:16:9e:07:3b:4e:79:0e:a9:71:c5:c7:ff:da: 97:a6:c9:85:14:fa:67:eb:b7:4a:c9:87:7a:df:a1:c6:70:c7: 8e:a8:f1:1c:44:4f:c1:8b:0f:ef:b2:85:50:05:c0:a2:41:f7: 19:00:b9:fb:ed:36:8c:0d:d1:b9:e4:7d:fb:a9:0c:e8:a3:ff: ec:52:b9:2d:f7:38:c9:ba:f6:d3:d8:84:af:a8:83:69:35:eb: 95:de:53:da:f9:6b:be:42:aa:45:e4:14:76:e6:47:b3:65:d2: 7b:af:8e:bd:a8:99:b6:da:68:e6:11:87:63:ed:c4:6f:9d:50: eb:e1:32:5d:fd:99:92:43:52:f8:0f:74:6d:e0:98:1f:32:5c: 2b:c0:81:67:72:b6:5b:c2:91:e7:4c:de:9a:e5:07:1c:5a:84: 99:d7:01:98:f8:83:8b:86:b9:06:9d:ad:a4:d7:e7:50:52:34: f0:0f:38:d3 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8Ep+U5g/YYjmjmQlwDCM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDE0Nzc1ZmRhZWVjN2IwZDVjOTI3MDgzOTg4ZDU1NTcyN2MyMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIuwgDpa5yrFmod4VdLCbH+6KFCJ hujJU4fJKEWln1O/WtGFjtWNj5cqCNPfkm19E462db3B6iUD7OziKAlauJH4kqXC CK9deXQJKDiPv5UgiJmPYjOvv03Rqgvn6B319Ss4BHzh22G/4Xm5GYLCjhwguEmw h/+BFQ0c7mwjdk/wW3RBx3m9p1azGMXlueJjlyHiFFZm/XjWRUZQYNTnZmmU0pT1 aAPLMYaAJNsRmgz4z+uu1OvbImk10Iwv1cKFh18YZe+CYAhyNu/ZjnYHhzK3ymu/ 6oSWAcRgflQFXxoFpvSBqR5/QQy6JHRL717skr2A+vkODQQNy6wQrDXPsQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGQUd1/a7sew1cknCDmI1VVyfCG1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2FmOWY0 NS0zNDU2LTQ4YTItYWQ3NS00NzU3MjdhMDNkZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYWY5ZjQ1 LTM0NTYtNDhhMi1hZDc1LTQ3NTcyN2EwM2RkMy8xL1pCUjNYOXJ1eDdEVnlTY0lP WWpWVlhKOEliVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMEETANBgkqhkiG9w0BAQsFAAOCAQEAYh0JhvKGsHXK I1/mmiRrb13qswo0k3hr7rcYdJFUuDPm1cSjShtAiv4BRcavaj6qkL23HotsAJS5 s0k+aniuOdMmouHaM37aaaUapEcWngc7TnkOqXHFx//al6bJhRT6Z+u3SsmHet+h xnDHjqjxHERPwYsP77KFUAXAokH3GQC5++02jA3RueR9+6kM6KP/7FK5Lfc4ybr2 09iEr6iDaTXrld5T2vlrvkKqReQUduZHs2XSe6+OvaiZttpo5hGHY+3Eb51Q6+Ey Xf2ZkkNS+A90beCYHzJcK8CBZ3K2W8KR50zemuUHHFqEmdcBmPiDi4a5Bp2tpNfn UFI08A840w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:08 2026 by rpki-client