This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer (raw, json) Hash identifier: M2IqN/8gjumpkrIkWoIxo60swqXZKbkOklZKIjIItC4= Subject key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC291E3B875147B2481100ACB4A11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215669 IP: 80.68.157.0/24 IP: 2a12:c580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c2:91:e3:b8:75:14:7b:24:81:10:0a:cb:4a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:ed:64:df:ef:77:72:bc:38:68:1f:91:e6: 24:2b:09:eb:dd:d2:37:1b:dd:4c:0c:17:d7:05:99: 98:03:50:1b:8d:75:30:47:81:5a:32:c5:45:30:ae: 6c:47:58:f0:10:7d:8d:44:aa:d7:28:c5:d8:f3:a5: 7b:ad:c4:87:9b:3e:06:26:39:e3:11:10:81:b1:29: f8:b8:e0:04:54:aa:54:49:1e:10:bb:d4:bb:77:d7: 62:2d:22:52:08:fa:00:a1:b9:34:4e:41:04:09:52: bf:fd:ef:cd:27:97:4c:c6:b0:16:d0:43:6a:da:93: 19:3d:09:21:09:a0:89:4d:93:f8:90:77:30:b2:50: 87:42:ad:d3:1a:34:43:82:ed:6c:3c:93:00:8c:82: e0:2c:5c:83:4c:1c:5f:85:4d:37:16:71:9e:56:77: 9d:df:67:af:77:64:04:0d:c5:da:c0:4e:3b:d9:5c: 95:d8:fa:fe:80:93:b3:2c:cb:5c:63:a8:94:83:18: d9:48:22:26:b1:ab:58:13:c5:b7:f0:c4:18:76:24: ff:47:8a:40:3b:37:f6:13:e6:db:88:6c:19:12:e0: 3e:e5:7c:77:72:a2:33:e9:8e:e6:e4:8e:33:8b:99: b3:37:fc:65:78:66:c1:85:1f:c4:03:63:4b:f7:63: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.157.0/24 IPv6: 2a12:c580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215669 Signature Algorithm: sha256WithRSAEncryption 31:92:65:11:95:6a:d4:88:0a:fe:18:9a:5e:4a:9d:11:40:49: 72:ca:bd:57:0a:8d:a6:b2:59:ec:cc:36:eb:59:ed:61:15:01: dc:57:5e:e8:5c:74:f9:01:ae:5a:75:df:7e:3b:45:d8:65:e5: 92:f8:4f:d7:90:8d:cb:77:82:df:b7:fc:cc:d5:78:3f:50:f1: cc:af:56:85:b4:16:6b:2f:7e:03:38:92:49:31:bc:e0:99:e7: 06:78:f9:7e:25:95:14:8b:29:2c:a9:cb:74:af:12:56:a8:d3: f2:00:fa:35:22:09:63:1c:06:ec:2d:1d:97:5c:8b:88:60:20: 52:11:5e:e5:5d:5a:50:24:a7:99:ee:0c:43:c1:1f:e3:d7:ad: bc:60:49:62:97:e2:42:42:76:ac:87:f5:b4:07:4a:88:4a:8c: 0c:68:75:a8:ec:48:04:9c:7e:a0:ae:3b:ba:71:87:1b:10:f9: 19:ae:7a:60:a2:97:e3:9d:6c:9d:00:47:36:74:a2:3c:9c:3f: ac:61:c2:63:92:46:43:d7:81:cb:a3:db:b9:5f:2e:11:11:db: 9c:6d:36:0d:b1:b9:5a:8d:20:85:79:ac:dd:67:66:3e:f9:15: 66:41:a4:95:b3:1a:35:cf:04:f1:0e:b9:a0:bc:0c:6a:1d:ba: 22:01:d4:65 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57MKR47h1FHskgRAKy0oRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc4YmRlY2ZiZDM1ZDNmMTdjMzkwNmU2MmY5M2ViMmJiMTEzZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplLtZN/vd3K8OGgfkeYkKwnr3dI3 G91MDBfXBZmYA1AbjXUwR4FaMsVFMK5sR1jwEH2NRKrXKMXY86V7rcSHmz4GJjnj ERCBsSn4uOAEVKpUSR4Qu9S7d9diLSJSCPoAobk0TkEECVK//e/NJ5dMxrAW0ENq 2pMZPQkhCaCJTZP4kHcwslCHQq3TGjRDgu1sPJMAjILgLFyDTBxfhU03FnGeVned 32evd2QEDcXawE472VyV2Pr+gJOzLMtcY6iUgxjZSCImsatYE8W38MQYdiT/R4pA Ozf2E+bbiGwZEuA+5Xx3cqIz6Y7m5I4zi5mzN/xleGbBhR/EA2NL92PM/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGR4vez7010/F8OQbmL5PrK7ET5dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzM4Mzky Mi1iY2EzLTQ4ZTctYTRlOC02ZmU1OGMzNjM2NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMzgzOTIy LWJjYTMtNDhlNy1hNGU4LTZmZTU4YzM2MzY0ZC8xL1pIaTk3UHZUWFQ4WHc1QnVZ dmstc3JzUlBsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUESdMA0EAgACMAcDBQMqEsWAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKdTANBgkqhkiG9w0BAQsFAAOCAQEAMZJlEZVq1IgK /hiaXkqdEUBJcsq9VwqNprJZ7Mw261ntYRUB3Fde6Fx0+QGuWnXffjtF2GXlkvhP 15CNy3eC37f8zNV4P1DxzK9WhbQWay9+AziSSTG84JnnBnj5fiWVFIspLKnLdK8S VqjT8gD6NSIJYxwG7C0dl1yLiGAgUhFe5V1aUCSnme4MQ8Ef49etvGBJYpfiQkJ2 rIf1tAdKiEqMDGh1qOxIBJx+oK47unGHGxD5Ga56YKKX451snQBHNnSiPJw/rGHC Y5JGQ9eBy6PbuV8uERHbnG02DbG5Wo0ghXms3WdmPvkVZkGklbMaNc8E8Q65oLwM ah26IgHUZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:22 2026 by rpki-client