This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer File: ZJn3HhXA84zrolfTAwTtRL6ofFA.cer (raw, json) Hash identifier: 8qpIHQtqjAWZp7DPhWRNzCU5Tbh6xaE02sNECuwNL3M= Subject key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DF489633C7AE192C1C61730F161AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25374 IP: 93.183.128.0/18 IP: 109.199.224.0/19 IP: 185.2.208.0/22 IP: 195.24.88.0/21 IP: 195.39.212.0/23 IP: 2a02:4dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f4:89:63:3c:7a:e1:92:c1:c6:17:30:f1:61:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6499f71e15c0f38ceba257d30304ed44bea87c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:2a:df:63:48:18:71:9b:01:c6:de:75:f5: 12:7c:f6:94:79:75:94:a9:2d:6d:ed:9d:f1:16:97: 44:12:7c:04:49:84:03:13:81:44:28:7d:f3:7a:3e: e6:40:7c:68:6c:26:a3:a1:0f:0a:0d:54:1d:0c:c6: 61:8b:e8:15:d9:7c:71:26:f7:3a:bc:fb:ec:9c:bc: eb:57:a1:29:ab:e4:f6:18:ca:66:63:b2:18:d7:2a: f7:88:ca:dc:5e:9b:92:f2:72:8d:13:af:93:02:6a: 7b:52:32:16:5a:5f:3b:d8:47:27:82:d7:0c:40:25: f6:2b:db:ac:e3:a7:88:2f:49:57:a5:73:67:4f:68: 9b:7d:94:ae:f1:44:97:bd:12:ff:bf:d6:94:c0:7e: 23:77:e6:ed:13:88:91:0d:e4:1f:d8:5b:61:33:58: 45:78:38:9a:e9:4c:90:a0:46:56:e3:12:c7:eb:10: 60:36:38:5c:76:a4:56:73:9d:d5:b0:f4:ed:50:60: 3b:a2:64:ac:bb:7d:78:c3:fc:53:6d:16:b1:b8:e7: 23:7c:c4:26:f0:cd:b5:bf:c3:01:96:bb:4d:71:31: 0f:22:84:1f:1f:76:02:50:d2:fa:de:bb:58:76:77: e1:10:6a:a4:93:ac:d2:9e:b8:f7:f2:be:75:a9:e2: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.183.128.0/18 109.199.224.0/19 185.2.208.0/22 195.24.88.0/21 195.39.212.0/23 IPv6: 2a02:4dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25374 Signature Algorithm: sha256WithRSAEncryption 8a:72:76:9d:96:aa:e5:8c:fd:f2:09:63:e6:e3:54:79:84:2f: d1:d9:ae:59:04:7b:d9:63:f8:3e:93:99:c9:6e:6b:fe:e5:dc: 1e:aa:19:d6:6c:55:a1:5e:7f:64:ef:7e:a7:2b:5f:68:74:4c: 45:21:f1:a3:74:aa:d4:50:9f:10:32:23:9d:2d:7c:85:50:23: 6b:47:ac:89:02:3a:01:81:20:0c:e5:4c:21:a8:a9:f5:94:f7: 94:08:29:46:9b:4c:18:ae:f5:8c:e5:11:bc:b6:e5:58:f8:b5: 89:cd:b1:8f:13:13:88:d4:59:fc:5f:7c:02:ee:15:22:69:7d: 30:75:89:e3:06:d4:e3:a6:6d:52:7b:5e:6f:e8:4a:7d:f1:9c: b8:e0:77:11:fb:cf:00:44:b0:63:0d:9b:8d:34:fb:10:f3:18: d9:e0:fe:57:53:e1:f1:32:b8:3d:e6:36:54:bb:24:1f:d2:22: 03:c3:19:60:2c:69:af:42:58:7f:58:e6:0b:d7:c5:77:dd:56: ad:2d:98:3f:e1:8c:d7:9b:c8:b0:f1:57:2a:1f:b9:73:2f:a6: e1:2f:d7:19:bc:3b:63:ab:86:86:2d:75:fd:21:0c:3d:d3:d5: f7:83:5e:68:f6:3d:cb:ac:4a:b6:04:56:fe:ce:6b:d7:5b:35: f3:be:dd:0b -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt5ffSJYzx64ZLBxhcw8WGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk5ZjcxZTE1YzBmMzhjZWJhMjU3ZDMwMzA0ZWQ0NGJlYTg3YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZEq32NIGHGbAcbedfUSfPaUeXWU qS1t7Z3xFpdEEnwESYQDE4FEKH3zej7mQHxobCajoQ8KDVQdDMZhi+gV2XxxJvc6 vPvsnLzrV6Epq+T2GMpmY7IY1yr3iMrcXpuS8nKNE6+TAmp7UjIWWl872EcngtcM QCX2K9us46eIL0lXpXNnT2ibfZSu8USXvRL/v9aUwH4jd+btE4iRDeQf2FthM1hF eDia6UyQoEZW4xLH6xBgNjhcdqRWc53VsPTtUGA7omSsu314w/xTbRaxuOcjfMQm 8M21v8MBlrtNcTEPIoQfH3YCUNL63rtYdnfhEGqkk6zSnrj38r51qeLt1wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFGSZ9x4VwPOM66JX0wME7US+qHxQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzRmNTFl Zi1hZGM2LTRhMWMtODJkNy01Nzg1YjE1NzNhNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvNGY1MWVm LWFkYzYtNGExYy04MmQ3LTU3ODViMTU3M2E2OS8xL1pKbjNIaFhBODR6cm9sZlRB d1R0Ukw2b2ZGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQGXbeAAwQFbcfgAwQCuQLQAwQDwxhYAwQBwyfU MA0EAgACMAcDBQMqAk3AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmMeMA0GCSqG SIb3DQEBCwUAA4IBAQCKcnadlqrljP3yCWPm41R5hC/R2a5ZBHvZY/g+k5nJbmv+ 5dweqhnWbFWhXn9k736nK19odExFIfGjdKrUUJ8QMiOdLXyFUCNrR6yJAjoBgSAM 5UwhqKn1lPeUCClGm0wYrvWM5RG8tuVY+LWJzbGPExOI1Fn8X3wC7hUiaX0wdYnj BtTjpm1Se15v6Ep98Zy44HcR+88ARLBjDZuNNPsQ8xjZ4P5XU+HxMrg95jZUuyQf 0iIDwxlgLGmvQlh/WOYL18V33VatLZg/4YzXm8iw8VcqH7lzL6bhL9cZvDtjq4aG LXX9IQw909X3g15o9j3LrEq2BFb+zmvXWzXzvt0L -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:47 2026 by rpki-client