This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer (raw, json) Hash identifier: lh3i2UNk1UJZ5qOT0DZBaDHDWh+XpLK99rOC4PjnES8= Subject key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E86B9867EF8D720B1C4B9D7D566F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a14:8d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:86:b9:86:7e:f8:d7:20:b1:c4:b9:d7:d5:66:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:90:45:eb:41:fd:ab:ed:2b:38:7b:80:25: c6:32:95:3e:c8:3f:af:08:74:e7:b1:9f:21:ef:78: 02:46:4b:77:e6:9b:4a:d1:08:51:e2:bf:65:97:b1: 17:b2:3c:7d:94:b1:f0:c9:a3:84:3e:c2:30:43:60: 62:e7:b6:96:3f:4c:65:93:86:e2:14:d8:da:77:10: e0:83:f7:18:a1:ec:49:a8:1a:8e:a0:00:a8:e5:94: 91:78:37:31:6b:8b:2f:3f:1d:df:b4:cb:04:b7:01: d3:d5:9b:ec:04:b0:09:fb:a6:eb:4b:eb:4b:2e:80: 55:e2:5f:8d:19:d6:60:2a:06:53:d2:79:74:c3:15: 5b:5c:0e:76:5d:ac:c6:ab:4d:33:86:37:55:83:a7: 33:28:03:6a:c4:14:11:ff:6e:55:37:02:e4:8a:49: c9:a3:82:a5:c2:9e:a2:04:e0:ec:a7:40:6a:f1:9e: 6c:49:9b:e7:cd:c6:48:cf:34:24:f2:fd:75:7d:21: 81:c2:98:2a:f0:f6:66:8c:fc:65:a0:9f:17:aa:ca: 8a:61:8c:18:7a:b8:0e:cd:82:0a:c7:a2:23:0d:cc: 0a:de:cb:0d:f1:20:f0:ca:4d:3f:0d:ae:b3:c4:dc: a5:91:44:2b:b8:24:2f:fe:a4:92:ae:27:d3:64:9a: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:8d80::/29 Signature Algorithm: sha256WithRSAEncryption a9:d8:91:40:e0:a3:b0:1e:c6:86:7d:cf:5e:a5:33:95:ce:71: d9:f8:a7:5e:a2:bd:78:11:84:49:84:66:80:b2:50:c5:28:b5: 12:f8:6f:60:ed:d3:ab:52:ad:b9:3d:2a:54:cd:de:39:ab:63: ba:6c:7c:60:41:6d:cf:da:d5:ec:5d:2a:e9:d5:e1:95:12:a9: 36:c5:10:80:e4:55:41:e4:d9:ce:ad:5b:b6:4c:a2:ad:d8:67: 12:04:b5:f3:ae:50:27:a7:fe:6e:22:60:f6:6f:be:97:2c:95: 96:55:6e:35:4a:8b:f6:13:76:e2:e3:52:19:82:63:2c:49:81: f5:d8:b3:dc:b9:c1:88:66:dd:1a:58:58:d0:51:bf:94:03:7f: 97:6e:da:9a:3a:75:53:9b:3d:5a:31:ca:93:af:ae:22:d2:e9: ca:3c:a1:82:74:7c:77:a6:4a:99:ce:54:bf:f4:5d:82:e7:1d: 62:9c:b2:d7:89:9a:a9:85:53:28:1e:4e:8b:e8:54:28:10:8c: 05:48:51:f6:41:81:6e:59:40:61:a5:76:5b:82:f0:7c:6c:c7: 81:eb:d8:72:8c:c9:9c:7c:61:29:01:7a:c6:99:ec:6b:34:9d: 83:0a:35:f4:1a:05:f4:f9:95:f7:88:a6:34:a3:bc:11:7e:6e: 64:ff:6a:2c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt5foa5hn741yCxxLnX1WbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDU0OTAzYWI0ODViMTZjY2E4NjJkMTVlNmQ5M2ZiYTBlNGRkZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRiQRetB/avtKzh7gCXGMpU+yD+v CHTnsZ8h73gCRkt35ptK0QhR4r9ll7EXsjx9lLHwyaOEPsIwQ2Bi57aWP0xlk4bi FNjadxDgg/cYoexJqBqOoACo5ZSReDcxa4svPx3ftMsEtwHT1ZvsBLAJ+6brS+tL LoBV4l+NGdZgKgZT0nl0wxVbXA52XazGq00zhjdVg6czKANqxBQR/25VNwLkiknJ o4Klwp6iBODsp0Bq8Z5sSZvnzcZIzzQk8v11fSGBwpgq8PZmjPxloJ8XqsqKYYwY ergOzYIKx6IjDcwK3ssN8SDwyk0/Da6zxNylkUQruCQv/qSSrifTZJprEwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFGRUkDq0hbFsyoYtFebZP7oOTd4BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2Q2ZDU2 OS1mNDkxLTQzZjEtOTRmMi0wNjU2ZDBiMzRiMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZDZkNTY5 LWY0OTEtNDNmMS05NGYyLTA2NTZkMGIzNGIyNC8xL1pGU1FPclNGc1d6S2hpMFY1 dGtfdWc1TjNnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhSNgDANBgkqhkiG9w0BAQsFAAOCAQEAqdiR QOCjsB7Ghn3PXqUzlc5x2finXqK9eBGESYRmgLJQxSi1EvhvYO3Tq1KtuT0qVM3e Oatjumx8YEFtz9rV7F0q6dXhlRKpNsUQgORVQeTZzq1btkyirdhnEgS1865QJ6f+ biJg9m++lyyVllVuNUqL9hN24uNSGYJjLEmB9diz3LnBiGbdGlhY0FG/lAN/l27a mjp1U5s9WjHKk6+uItLpyjyhgnR8d6ZKmc5Uv/RdgucdYpyy14maqYVTKB5Oi+hU KBCMBUhR9kGBbllAYaV2W4LwfGzHgevYcozJnHxhKQF6xpnsazSdgwo19BoF9PmV 94imNKO8EX5uZP9qLA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:35 2026 by rpki-client