This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer (raw, json) Hash identifier: 4s+DG0u0I+O5gBvkbuaJNU+wxk1Yw3KWeUyS65X1dXw= Subject key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3669233027A503708CED75D8F4C620 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207294 IP: 188.190.124.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:69:23:30:27:a5:03:70:8c:ed:75:d8:f4:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:ab:8a:e8:07:19:89:b0:c6:96:10:40:dc: 47:63:46:44:33:d7:80:c5:24:e0:4f:ed:4e:46:22: dd:f0:4f:74:54:b4:06:81:ab:fc:4f:e8:b8:b0:44: eb:a9:58:11:b1:55:3d:a3:e7:d6:8f:ff:67:ca:72: d5:14:ce:d9:c5:43:c0:0f:5e:eb:ae:82:9a:5f:9b: 32:aa:6c:31:2c:6d:7f:03:54:a4:35:65:39:f6:58: 5c:75:d9:d9:76:69:60:12:53:4d:5d:27:3d:1e:01: 93:1f:de:d4:a5:2d:29:7c:02:15:60:19:ac:c7:40: 53:49:3e:2c:7d:44:bd:2e:86:b8:b8:04:e5:95:52: 1b:00:9e:83:b4:60:ae:75:00:c9:48:5f:9f:d9:cf: 79:74:2c:4b:3d:7b:fc:1a:2b:07:9d:bc:ad:f4:c4: a5:86:d9:d2:fe:c2:b2:fd:35:22:dd:78:28:8e:34: a1:ed:8d:14:5f:57:ce:52:3e:89:b9:c8:d2:12:c1: 08:13:d4:4b:6a:96:f6:68:01:d1:3b:21:18:d5:28: c1:6f:27:4e:a8:57:fb:fc:fb:de:b6:d6:f5:21:ea: 84:7b:f0:20:3f:21:39:38:6b:d5:11:b4:d5:73:1f: 54:2e:4a:cb:07:dd:cd:ab:c6:33:8c:3d:c4:e8:41: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207294 Signature Algorithm: sha256WithRSAEncryption ac:e7:41:7b:55:82:6e:07:5d:04:6d:0e:6b:d3:3d:5f:19:a4: bc:5a:c0:4c:c9:74:3a:95:b2:a3:9a:d8:40:0d:f3:f0:40:c6: be:49:dd:21:e0:40:2a:df:b6:a2:a6:7d:70:fb:b8:25:d4:70: 8f:3b:23:04:24:40:40:ca:e4:bb:b1:42:2d:1b:5f:1c:e9:2e: b8:32:51:16:77:bc:55:b8:c2:51:91:76:05:fa:66:2d:59:7a: 2e:8e:04:0d:c3:50:ae:47:f8:f1:46:29:6a:a0:ce:9a:46:6e: 16:6b:65:a7:3c:8d:31:06:1e:4b:6c:07:b3:79:49:ca:8e:a3: 73:84:41:91:5b:70:b9:0d:b7:b2:e1:de:51:6b:5f:cf:56:44: c7:a9:dc:35:f3:4a:02:bc:13:14:23:cc:c9:21:e1:5a:e8:68: c6:1e:64:a1:22:87:4d:db:76:4a:87:95:26:9f:ea:10:36:48: be:9c:79:51:dd:de:7e:70:59:49:b1:17:a9:4f:27:c2:2c:1a: 30:b8:46:14:b8:8d:14:bb:49:62:49:52:4d:32:d3:f2:bf:4f: a0:35:9d:10:7a:a3:c3:7d:b2:8d:a3:f3:e4:4e:57:07:3f:99: 8f:2c:18:a9:a1:73:04:0b:3b:b3:b8:f5:a1:ad:b9:23:0d:95: df:cc:11:0b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NmkjMCelA3CM7XXY9MYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc1MzBiNGZhODg5OWEzMGJiMmU2NWI5M2YwMTE5ZmRhOWJjMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnImriugHGYmwxpYQQNxHY0ZEM9eA xSTgT+1ORiLd8E90VLQGgav8T+i4sETrqVgRsVU9o+fWj/9nynLVFM7ZxUPAD17r roKaX5syqmwxLG1/A1SkNWU59lhcddnZdmlgElNNXSc9HgGTH97UpS0pfAIVYBms x0BTST4sfUS9Loa4uATllVIbAJ6DtGCudQDJSF+f2c95dCxLPXv8GisHnbyt9MSl htnS/sKy/TUi3XgojjSh7Y0UX1fOUj6JucjSEsEIE9RLapb2aAHROyEY1SjBbydO qFf7/Pvettb1IeqEe/AgPyE5OGvVEbTVcx9ULkrLB93Nq8YzjD3E6EGdewIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGR1MLT6iJmjC7LmW5PwEZ/am8BdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzU3ZjUx Mi1hMjlmLTQ0ZWQtYTdhMS0wZTdjYmJjYzYyZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNTdmNTEy LWEyOWYtNDRlZC1hN2ExLTBlN2NiYmNjNjJkMC8xL1pIVXd0UHFJbWFNTHN1WmJr X0FSbjlxYndGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCvL58MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpvjANBgkqhkiG9w0BAQsFAAOCAQEArOdBe1WCbgddBG0Oa9M9XxmkvFrATMl0 OpWyo5rYQA3z8EDGvkndIeBAKt+2oqZ9cPu4JdRwjzsjBCRAQMrku7FCLRtfHOku uDJRFne8VbjCUZF2BfpmLVl6Lo4EDcNQrkf48UYpaqDOmkZuFmtlpzyNMQYeS2wH s3lJyo6jc4RBkVtwuQ23suHeUWtfz1ZEx6ncNfNKArwTFCPMySHhWuhoxh5koSKH Tdt2SoeVJp/qEDZIvpx5Ud3efnBZSbEXqU8nwiwaMLhGFLiNFLtJYklSTTLT8r9P oDWdEHqjw32yjaPz5E5XBz+ZjywYqaFzBAs7s7j1oa25Iw2V38wRCw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:49 2026 by rpki-client