This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer (raw, json) Hash identifier: NaFPCM71T4UAKAk5Scw5uABWx/zZff5P0jTJRApaAfI= Subject key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B76F42E4FC63A7A4410BDE3E2440 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24772 IP: 195.182.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b7:6f:42:e4:fc:63:a7:a4:41:0b:de:3e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6465ecd615f3a6c5639c51e9e3197673152078b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:ed:02:b5:a6:09:d7:ed:56:b5:eb:c7:74: f7:48:cf:11:58:59:a3:28:f8:e5:1e:f6:b8:61:19: af:2e:ad:da:22:87:45:76:a4:77:31:fa:4d:90:d1: 93:f2:ff:e9:48:d9:be:37:0d:6c:39:3e:89:14:ef: ad:bd:9f:91:ce:8d:9f:89:43:56:09:d5:04:3d:d4: 43:51:04:fc:05:7c:8f:2d:f1:6e:db:ce:ca:2a:c2: 7c:78:9f:01:a9:1d:fd:a3:ee:d6:a0:34:0d:a6:52: a0:62:e7:f9:1b:ae:cd:63:8b:af:ac:27:52:db:23: 00:a9:e7:06:22:76:c9:58:b4:d9:2c:35:5a:71:17: 91:e3:62:0a:4c:a7:fe:e1:e7:20:7a:79:1a:fa:15: bd:82:55:7f:da:72:59:6d:7e:76:7c:7b:6a:98:a5: 7e:c8:d6:89:64:82:1f:0c:d4:5e:65:79:bb:96:e3: 18:a3:33:59:bc:44:34:c9:b3:db:67:63:82:a7:e6: e2:21:04:24:d8:b7:e2:f4:4b:4b:9f:d8:d9:03:82: a2:c9:31:17:0b:45:55:ad:68:69:c4:fb:af:eb:1f: a8:91:33:9b:57:bf:5b:61:07:c1:9a:73:b7:d9:a3: 5f:b2:dc:7e:20:49:fa:5a:72:16:4e:34:85:89:e8: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24772 Signature Algorithm: sha256WithRSAEncryption 79:c3:41:be:10:d9:ac:48:08:65:ba:e5:3e:c3:6b:be:00:51: eb:de:cd:61:8d:29:74:df:4e:7d:35:84:9d:e1:82:c8:4c:83: fe:6c:6b:d2:30:f5:87:d9:e2:52:95:84:09:ac:df:9f:f1:17: 4e:47:d8:a8:0d:af:48:00:8e:bd:f1:94:b7:fc:9f:ae:1a:2e: 0a:15:42:9d:d0:a0:1d:3a:55:19:61:3f:b1:5c:0a:40:25:14: cb:43:84:64:0f:11:29:d0:33:37:9b:f0:67:d2:fc:4d:d4:1a: 22:2c:70:be:d2:4f:90:f3:4a:51:93:17:b2:29:0f:fc:05:27: 62:cc:11:08:3d:a8:59:6e:05:8b:8e:d4:1f:0e:2b:50:59:87: 5e:9d:63:4d:63:28:06:cc:70:ec:cd:89:6e:e7:98:75:b4:72: 23:00:51:73:b3:79:c9:8e:29:16:23:b9:5c:eb:8c:63:bb:f4: 1d:97:74:96:a8:71:01:07:a8:30:f7:fe:a6:aa:87:be:84:80: 0b:dd:f1:70:ae:7e:93:6b:74:11:17:1c:f0:b8:75:ef:d8:17: 3b:43:f9:89:07:dc:d1:00:d7:8e:a6:75:cd:2e:06:94:b9:40: 09:c6:03:d4:ca:d9:0b:f0:40:a0:75:86:4b:09:b2:d5:41:71: 03:11:54:50 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8gLdvQuT8Y6ekQQvePiRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDY1ZWNkNjE1ZjNhNmM1NjM5YzUxZTllMzE5NzY3MzE1MjA3OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufrtArWmCdftVrXrx3T3SM8RWFmj KPjlHva4YRmvLq3aIodFdqR3MfpNkNGT8v/pSNm+Nw1sOT6JFO+tvZ+Rzo2fiUNW CdUEPdRDUQT8BXyPLfFu287KKsJ8eJ8BqR39o+7WoDQNplKgYuf5G67NY4uvrCdS 2yMAqecGInbJWLTZLDVacReR42IKTKf+4ecgenka+hW9glV/2nJZbX52fHtqmKV+ yNaJZIIfDNReZXm7luMYozNZvEQ0ybPbZ2OCp+biIQQk2Lfi9EtLn9jZA4KiyTEX C0VVrWhpxPuv6x+okTObV79bYQfBmnO32aNfstx+IEn6WnIWTjSFiejSPwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGRl7NYV86bFY5xR6eMZdnMVIHi4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2Lzk2MDQw NC1iNjY0LTQwY2MtOWNhYy01NGM3YzRlZTViYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvOTYwNDA0 LWI2NjQtNDBjYy05Y2FjLTU0YzdjNGVlNWJiNS8xL1pHWHMxaFh6cHNWam5GSHA0 eGwyY3hVZ2VMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw7YeMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmDEMA0GCSqGSIb3DQEBCwUAA4IBAQB5w0G+ENmsSAhluuU+w2u+AFHr3s1hjSl0 3059NYSd4YLITIP+bGvSMPWH2eJSlYQJrN+f8RdOR9ioDa9IAI698ZS3/J+uGi4K FUKd0KAdOlUZYT+xXApAJRTLQ4RkDxEp0DM3m/Bn0vxN1BoiLHC+0k+Q80pRkxey KQ/8BSdizBEIPahZbgWLjtQfDitQWYdenWNNYygGzHDszYlu55h1tHIjAFFzs3nJ jikWI7lc64xju/Qdl3SWqHEBB6gw9/6mqoe+hIAL3fFwrn6Ta3QRFxzwuHXv2Bc7 Q/mJB9zRANeOpnXNLgaUuUAJxgPUytkL8ECgdYZLCbLVQXEDEVRQ -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:55 2026 by rpki-client