This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer File: ZJauOK7ay77u4eCTlW2zKHrntT0.cer (raw, json) Hash identifier: b2MurjK8XF8RetO26cDKV/LtmGj1PXJ78M1OUTjARBo= Subject key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F820274615CFC447FAF66D00D577232 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28682 IP: 185.49.0.0/22 IP: 193.243.140.0/23 IP: 2a01:9ce0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:02:74:61:5c:fc:44:7f:af:66:d0:0d:57:72:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:70:19:32:a1:cd:66:10:c5:fd:f1:4a:e6: a8:07:8f:e8:36:b6:d2:f4:f4:1d:03:20:1d:0e:c4: 01:02:3e:9b:30:29:93:ff:ec:c4:47:4c:7d:b8:f7: f7:54:7a:eb:d8:6a:05:3a:fc:66:ad:3d:ab:52:12: b7:3f:7d:38:3a:40:e0:64:00:b4:b3:66:ac:07:09: c5:7f:db:71:6a:48:50:3d:c4:88:98:46:a2:04:42: 5a:a8:f6:81:27:07:91:41:de:a4:41:0e:ae:ec:c9: 05:69:e0:b8:c4:47:7b:7a:27:eb:a0:12:fb:82:7a: 03:68:fb:a3:0b:bd:6d:27:16:ab:c9:22:34:59:0e: ac:8c:cb:12:1e:6d:9a:6b:94:16:ec:eb:ea:83:13: a5:4b:76:d1:cd:26:83:fc:90:c3:a3:6f:21:55:21: e9:63:34:94:12:e5:b6:18:89:56:6b:bf:b3:e5:bc: 88:0e:1a:a7:50:61:00:d1:a6:bb:c7:5a:35:db:af: 5d:fd:44:77:3c:76:e7:0a:41:51:a7:ae:99:d5:28: 75:07:6a:8f:78:5d:4c:47:32:f8:fe:50:bb:57:4b: 11:05:bd:63:d9:44:ae:e9:c6:d3:60:bc:9f:da:41: b3:c4:b6:c6:c5:36:4c:a1:87:6e:f2:cd:48:62:6c: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.0.0/22 193.243.140.0/23 IPv6: 2a01:9ce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28682 Signature Algorithm: sha256WithRSAEncryption 1d:6d:06:c7:3b:8e:df:44:b4:4f:d9:18:68:78:f1:1d:e7:56: c9:2d:10:14:46:b8:ee:10:6a:2c:31:8a:26:e1:35:45:99:8d: 3c:53:8d:0a:72:dc:45:f3:0c:af:11:dd:95:12:98:81:01:4f: cf:a2:6e:16:5c:b0:48:57:79:d0:7d:92:b0:53:3e:58:44:91: 64:a6:50:2b:47:ec:8c:18:94:b9:c8:6c:85:1f:99:11:64:55: 3d:0e:c0:48:68:7f:15:07:68:47:52:bb:84:ef:f0:18:e9:40: 00:31:7e:b0:f7:04:52:39:24:74:6f:6d:b0:c4:b9:c0:c5:36: 34:51:06:3c:c3:e1:70:1f:c1:ac:60:89:1c:d7:01:37:28:21: 02:c6:a7:33:01:97:b6:69:27:2b:b9:84:8c:f9:14:16:86:80: f0:48:b1:1a:92:2f:49:50:f5:27:0e:45:e4:57:8d:11:07:13: c0:1f:e7:6e:e0:14:d4:5c:46:3d:61:63:e8:51:b5:da:d5:5d: b9:f7:fa:10:5b:89:56:f1:44:af:e0:d3:7f:cf:97:9f:a5:8b: e4:26:c9:0b:7f:54:ab:83:e5:79:f9:cc:be:a8:db:dc:97:dc: ab:d0:2b:a9:eb:82:d8:4b:aa:c0:36:8c:c4:c8:a0:e2:76:00: b3:91:73:2c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/ggJ0YVz8RH+vZtANV3IyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk2YWUzOGFlZGFjYmJlZWVlMWUwOTM5NTZkYjMyODdhZTdiNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl9wGTKhzWYQxf3xSuaoB4/oNrbS 9PQdAyAdDsQBAj6bMCmT/+zER0x9uPf3VHrr2GoFOvxmrT2rUhK3P304OkDgZAC0 s2asBwnFf9txakhQPcSImEaiBEJaqPaBJweRQd6kQQ6u7MkFaeC4xEd7eifroBL7 gnoDaPujC71tJxarySI0WQ6sjMsSHm2aa5QW7OvqgxOlS3bRzSaD/JDDo28hVSHp YzSUEuW2GIlWa7+z5byIDhqnUGEA0aa7x1o1269d/UR3PHbnCkFRp66Z1Sh1B2qP eF1MRzL4/lC7V0sRBb1j2USu6cbTYLyf2kGzxLbGxTZMoYdu8s1IYmyqTwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGSWrjiu2su+7uHgk5Vtsyh657U9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzZjMzEy NS1mZmYxLTRkYTAtOGEzMi03NjY0ZThhMjFmYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNmMzMTI1 LWZmZjEtNGRhMC04YTMyLTc2NjRlOGEyMWZjNy8xL1pKYXVPSzdheTc3dTRlQ1Rs VzJ6S0hybnRUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTEAAwQBwfOMMA0EAgACMAcDBQAqAZzgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnAKMA0GCSqGSIb3DQEBCwUAA4IBAQAdbQbH O47fRLRP2RhoePEd51bJLRAURrjuEGosMYom4TVFmY08U40KctxF8wyvEd2VEpiB AU/Pom4WXLBIV3nQfZKwUz5YRJFkplArR+yMGJS5yGyFH5kRZFU9DsBIaH8VB2hH UruE7/AY6UAAMX6w9wRSOSR0b22wxLnAxTY0UQY8w+FwH8GsYIkc1wE3KCECxqcz AZe2aScruYSM+RQWhoDwSLEaki9JUPUnDkXkV40RBxPAH+du4BTUXEY9YWPoUbXa 1V259/oQW4lW8USv4NN/z5efpYvkJskLf1Srg+V5+cy+qNvcl9yr0Cup64LYS6rA NozEyKDidgCzkXMs -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:42 2026 by rpki-client