This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer File: ZC8kHMyieCtfxAfhu696l6mEdGA.cer (raw, json) Hash identifier: uQa46m8AGMvriIwiDfChVwE4/NO1ySGDmCVp49unFIk= Subject key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D9AD6395E73B94F4EFEC60EAC5DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.200.68.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d9:ad:63:95:e7:3b:94:f4:ef:ec:60:ea:c5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:3f:3b:50:18:3b:8e:47:82:af:a9:28:f7: 4f:2b:e9:38:55:8d:5e:64:25:7d:6e:8d:84:0e:25: b4:d7:0e:c2:cb:52:24:de:0d:99:15:59:27:b6:8c: 31:e2:b5:87:39:f8:2b:5b:2e:35:14:a5:86:a6:50: 53:e7:7a:e2:4e:07:ef:f7:c6:78:c2:4c:24:57:a9: e0:f2:ad:c4:fb:42:ca:9b:14:32:94:5f:d9:dc:91: 2a:3b:49:1d:cc:80:b8:8a:b7:c4:10:39:24:71:54: d4:c4:2f:e7:21:19:97:9d:2a:1d:6d:9a:a8:a1:26: 39:89:17:5f:fa:ec:20:2d:29:bd:a8:cf:ee:ff:6c: fc:81:9d:01:bc:71:33:7a:b7:77:3d:d0:8f:7b:ec: 08:5e:26:4b:ed:1b:b1:a7:d2:dd:39:2f:38:75:6f: fd:9d:59:5c:12:b2:98:86:ec:e2:8c:b1:65:e9:7f: f1:f7:0f:45:f3:87:61:bf:bd:82:14:de:5c:dd:aa: b4:c3:78:ba:f0:c7:16:f2:7e:12:64:d7:90:92:89: 71:52:5b:b5:c3:d6:37:35:eb:63:76:ae:d6:85:2f: a6:59:ad:f7:35:51:9d:46:08:6f:b1:a7:ac:c0:d6: 07:43:20:bf:4d:40:93:d6:6e:40:8e:cc:a7:a8:1c: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.200.68.0/24 Signature Algorithm: sha256WithRSAEncryption 28:70:60:3f:d2:97:1f:e6:23:46:8a:fc:74:28:b9:c6:75:ce: 6a:7e:56:1b:1f:b2:dd:a7:c2:87:7c:bf:5e:0f:a9:4c:78:a0: 60:e5:c3:33:f5:b9:64:35:e2:d2:1e:0c:63:a9:78:48:b8:50: 32:4b:db:26:67:51:14:92:b4:05:19:88:cb:f7:a7:47:56:a3: d9:8b:97:65:6f:a6:10:c2:b3:01:67:02:db:12:eb:8b:6d:7c: 5e:7c:31:1e:02:5a:94:4d:cc:c5:55:1c:f0:29:d3:c1:03:50: c9:72:0c:00:de:b1:3e:e0:be:54:04:ac:14:93:44:88:94:7c: 7d:e5:13:05:e2:f4:47:13:8c:b2:6a:70:82:19:b0:44:da:22: 94:02:f3:0d:77:54:86:a8:71:36:f8:8c:4d:1a:42:f4:ec:46: ed:0f:0b:6c:76:b5:b0:1a:f6:8c:a1:34:13:6a:98:df:f8:e1: a3:7c:2a:82:9b:53:9d:86:ad:d8:93:ac:8c:39:72:32:c6:bb: eb:7e:d9:fe:b6:74:82:21:28:5a:cc:ea:b9:aa:b2:6f:6a:ea: 86:76:f2:08:7b:44:17:27:92:d9:b6:2b:e3:15:7f:fe:4d:5f: a8:12:35:79:5b:5b:e9:ec:d5:43:b1:e2:9c:e6:76:f6:30:3b: 08:a5:c0:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NdmtY5XnO5T07+xg6sXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDJmMjQxY2NjYTI3ODJiNWZjNDA3ZTFiYmFmN2E5N2E5ODQ3NDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y4/O1AYO45Hgq+pKPdPK+k4VY1e ZCV9bo2EDiW01w7Cy1Ik3g2ZFVkntowx4rWHOfgrWy41FKWGplBT53riTgfv98Z4 wkwkV6ng8q3E+0LKmxQylF/Z3JEqO0kdzIC4irfEEDkkcVTUxC/nIRmXnSodbZqo oSY5iRdf+uwgLSm9qM/u/2z8gZ0BvHEzerd3PdCPe+wIXiZL7Ruxp9LdOS84dW/9 nVlcErKYhuzijLFl6X/x9w9F84dhv72CFN5c3aq0w3i68McW8n4SZNeQkolxUlu1 w9Y3Netjdq7WhS+mWa33NVGdRghvsaeswNYHQyC/TUCT1m5AjsynqBzINwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGQvJBzMongrX8QH4buvepephHRgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2NhZTU0 OC1jM2UxLTQ1NzEtOWEwYi0xNDVlOTVlOGE3YmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvY2FlNTQ4 LWMzZTEtNDU3MS05YTBiLTE0NWU5NWU4YTdiZS8xL1pDOGtITXlpZUN0ZnhBZmh1 Njk2bDZtRWRHQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw8hEMA0GCSqGSIb3DQEBCwUAA4IBAQAocGA/ 0pcf5iNGivx0KLnGdc5qflYbH7Ldp8KHfL9eD6lMeKBg5cMz9blkNeLSHgxjqXhI uFAyS9smZ1EUkrQFGYjL96dHVqPZi5dlb6YQwrMBZwLbEuuLbXxefDEeAlqUTczF VRzwKdPBA1DJcgwA3rE+4L5UBKwUk0SIlHx95RMF4vRHE4yyanCCGbBE2iKUAvMN d1SGqHE2+IxNGkL07EbtDwtsdrWwGvaMoTQTapjf+OGjfCqCm1Odhq3Yk6yMOXIy xrvrftn+tnSCIShazOq5qrJvauqGdvIIe0QXJ5LZtivjFX/+TV+oEjV5W1vp7NVD seKc5nb2MDsIpcAp -----END CERTIFICATE-----Generated at Sun Jan 11 15:55:27 2026 by rpki-client