This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer (raw, json) Hash identifier: hxE4s276TIpgsqScZ/kTVk05qrnraAFEOOm/8oqqLB0= Subject key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153535B07B893EF411D062C804F402 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210031 IP: 185.245.48.0/22 IP: 2a0d:4b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:35:35:b0:7b:89:3e:f4:11:d0:62:c8:04:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=644ca1f90518d4253f325947d7f32db78721647c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:06:b0:55:10:47:64:f6:5b:94:7a:4d:ef: 18:b2:a3:f7:a8:a8:6c:e1:ac:d6:a7:31:78:73:a1: 1f:41:9d:dc:5e:fd:8c:19:ce:4a:e8:af:39:32:66: 59:e9:84:de:3d:ad:7c:5f:c5:63:ab:f5:84:6d:93: 56:fa:94:f2:bc:22:ec:fa:0c:ca:8d:dd:3d:01:d2: 31:86:4c:b3:0b:3d:e1:b8:7a:6e:0d:1c:e9:bc:b3: d1:72:c3:cf:ec:bf:da:5d:e7:df:ab:2d:6b:6f:5a: 87:8d:33:af:23:9a:ca:eb:68:92:ff:08:5e:11:8d: 92:d9:38:bd:c5:ae:b9:3d:f9:7e:bc:58:0b:9a:2e: d4:45:ee:1f:bc:67:43:9d:51:b3:6b:5c:da:59:8b: 13:e7:ca:10:71:54:fb:f8:c4:59:a9:84:f2:71:8b: 1b:55:fd:ca:16:99:27:ff:53:41:d5:07:78:0d:4e: 8c:d8:d9:5e:3b:77:a2:54:15:5f:7b:ed:12:85:74: 73:f4:be:ae:9d:8c:b1:23:70:4a:d9:27:29:71:65: 34:11:8c:25:c9:8d:4c:47:01:5d:08:48:dd:9c:78: 3e:b2:17:38:65:db:f1:4a:09:7e:ce:55:5b:3c:a7: 1a:d1:ce:c4:d5:0d:70:75:9b:d6:c7:cb:af:da:b5: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.48.0/22 IPv6: 2a0d:4b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210031 Signature Algorithm: sha256WithRSAEncryption 38:61:0d:49:b5:53:7f:00:13:3d:70:1c:03:ad:75:63:5d:95: 2a:dd:b1:41:1a:2d:ab:1e:4d:2c:4b:9a:48:d3:65:c7:9d:9f: ee:78:76:6e:c1:3f:19:61:27:85:89:95:6b:02:49:5f:6b:b8: 4e:cf:08:2d:b3:83:3e:0b:b9:ed:61:aa:cb:d0:72:f4:97:b4: 4d:4f:d2:31:76:f5:9c:e0:1b:ac:3a:38:07:e7:aa:7b:a6:e8: b7:7c:90:ac:82:a7:ab:9d:92:1a:2d:23:4a:67:7a:8c:fe:14: 90:c5:c3:f6:fb:14:86:17:10:a1:3a:9e:2d:68:83:4e:34:0a: 2f:52:c3:18:88:36:c8:db:a4:06:78:cb:77:62:08:4c:0f:24: 00:12:8a:40:36:6d:ed:1a:f7:8a:5f:e0:d1:6d:40:75:47:33: d4:68:41:58:3a:4f:0b:4f:f0:0b:17:b4:42:a5:04:94:0c:61: 9f:aa:9e:b0:5f:39:dd:96:a5:b7:e9:d4:bc:52:4e:e8:cb:77: 7e:01:61:0e:e0:33:33:bc:95:a6:3f:58:3b:18:56:7a:8f:be: ae:35:d6:dc:0e:5d:92:bd:25:d3:23:f6:7b:bb:48:34:d8:e0: 7f:52:3e:1f:95:10:e9:8b:bf:35:62:b7:a0:ab:47:2c:73:cb: 35:f5:d4:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FTU1sHuJPvQR0GLIBPQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDRjYTFmOTA1MThkNDI1M2YzMjU5NDdkN2YzMmRiNzg3MjE2NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQGsFUQR2T2W5R6Te8YsqP3qKhs 4azWpzF4c6EfQZ3cXv2MGc5K6K85MmZZ6YTePa18X8Vjq/WEbZNW+pTyvCLs+gzK jd09AdIxhkyzCz3huHpuDRzpvLPRcsPP7L/aXeffqy1rb1qHjTOvI5rK62iS/whe EY2S2Ti9xa65Pfl+vFgLmi7URe4fvGdDnVGza1zaWYsT58oQcVT7+MRZqYTycYsb Vf3KFpkn/1NB1Qd4DU6M2NleO3eiVBVfe+0ShXRz9L6unYyxI3BK2ScpcWU0EYwl yY1MRwFdCEjdnHg+shc4ZdvxSgl+zlVbPKca0c7E1Q1wdZvWx8uv2rWbjQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGRMofkFGNQlPzJZR9fzLbeHIWR8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzdhMTU2 NC0zNDY2LTQ3MzItODNiZC1iOTBkOTc0ZTVmYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvN2ExNTY0 LTM0NjYtNDczMi04M2JkLWI5MGQ5NzRlNWZiNS8xL1pFeWgtUVVZMUNVX01sbEgx X010dDRjaFpIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufUwMA0EAgACMAcDBQMqDUuAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0bzANBgkqhkiG9w0BAQsFAAOCAQEAOGENSbVTfwAT PXAcA611Y12VKt2xQRotqx5NLEuaSNNlx52f7nh2bsE/GWEnhYmVawJJX2u4Ts8I LbODPgu57WGqy9By9Je0TU/SMXb1nOAbrDo4B+eqe6bot3yQrIKnq52SGi0jSmd6 jP4UkMXD9vsUhhcQoTqeLWiDTjQKL1LDGIg2yNukBnjLd2IITA8kABKKQDZt7Rr3 il/g0W1AdUcz1GhBWDpPC0/wCxe0QqUElAxhn6qesF853Zalt+nUvFJO6Mt3fgFh DuAzM7yVpj9YOxhWeo++rjXW3A5dkr0l0yP2e7tINNjgf1I+H5UQ6Yu/NWK3oKtH LHPLNfXUjA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:10 2026 by rpki-client