This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer File: ZLPjZgb6UsOkchyMoPszCZU0GVo.cer (raw, json) Hash identifier: Q8E9/WQPMJLqwTmA0XtfsqZ9dpxGhJbJVZUym7aM0+A= Subject key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37FE2FD5C7C54635E99D1ABEA2B6B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56413 IP: 91.224.134.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fe:2f:d5:c7:c5:46:35:e9:9d:1a:be:a2:b6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:6c:19:28:29:0d:df:ae:c8:d0:7b:14:70: f8:be:90:ab:25:b0:0c:1c:eb:79:13:1b:74:b0:7c: b5:50:99:ac:47:ab:94:70:58:1a:79:72:37:90:c7: 97:b8:18:4f:7c:0b:1e:f0:2b:d0:7e:00:da:6e:45: 79:51:39:67:76:b3:78:68:09:26:fd:83:7d:be:f0: 0c:60:21:f4:41:73:5a:0b:57:25:ba:2c:88:bc:ca: 3d:ab:2d:b4:93:41:84:67:f9:7f:fb:05:87:b9:51: 8b:2d:4b:f2:07:4d:f9:9b:77:3e:3b:00:db:91:a8: 0c:1e:9f:c4:fc:7c:d5:6e:11:ae:9f:7a:80:e4:4c: 84:0f:1c:52:8d:cf:cf:e7:31:44:44:66:c5:c3:b7: eb:9f:4a:b4:84:ba:88:2b:da:06:0b:29:c5:fd:7c: d4:e8:0a:ca:59:1d:17:3c:28:b8:d1:1e:6c:f5:fe: 69:60:10:ca:be:1b:ab:90:af:d6:0a:08:bf:21:cd: 10:db:37:d3:b4:b3:71:08:17:b7:b5:c8:ef:15:ea: de:96:45:3a:84:8a:b7:28:7e:99:33:ca:af:4a:a6: e7:a4:e7:08:8b:f1:14:af:21:6a:bb:f8:8a:f2:cb: 3d:f0:f8:11:55:d9:c1:94:af:bd:60:ed:be:f9:56: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.134.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56413 Signature Algorithm: sha256WithRSAEncryption 6b:23:8e:69:d4:1b:a0:b1:91:5e:bc:b5:77:0b:d2:3a:9a:2c: f7:49:fd:32:f7:e9:d8:87:24:78:ff:b1:6f:94:64:a0:71:dc: 93:70:4c:77:cf:c1:d0:27:58:a5:9d:db:87:18:e9:51:42:35: ba:62:73:8b:31:11:dd:ef:ae:95:44:ef:ce:68:dc:8c:90:cd: 45:86:b4:2f:cc:0e:7d:d0:51:67:55:7e:26:ef:42:84:9d:b6: 7c:6c:0c:10:3a:eb:eb:10:9f:c7:13:a5:2f:16:2b:c9:80:33: 85:b1:17:bc:9c:7b:53:8b:51:d4:95:b4:b9:fa:23:95:27:ad: 7b:a5:04:97:e8:5a:69:c6:fa:51:a1:2c:a1:35:ea:40:b8:3b: 1d:9a:ff:5f:46:88:3d:58:e0:fb:b1:37:6a:e5:7f:cc:5b:19: 89:07:3b:fe:b8:5d:5c:0d:60:dd:e3:32:88:bb:86:2c:c6:b7: 6d:3f:7a:89:61:03:80:69:a5:5d:9f:11:d2:06:7f:91:85:0b: bf:ce:0c:90:88:1b:9e:94:92:2c:d6:c3:10:a1:52:19:75:e5: 9d:97:b8:b1:93:5a:3a:5d:91:ff:e4:ed:4d:ff:b5:90:89:a8: 83:cb:e7:11:1e:6c:0e:71:7b:cc:fb:ed:94:47:15:58:dd:6e: a9:25:ad:9d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+N/4v1cfFRjXpnRq+oraxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGIzZTM2NjA2ZmE1MmMzYTQ3MjFjOGNhMGZiMzMwOTk1MzQxOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhpsGSgpDd+uyNB7FHD4vpCrJbAM HOt5Ext0sHy1UJmsR6uUcFgaeXI3kMeXuBhPfAse8CvQfgDabkV5UTlndrN4aAkm /YN9vvAMYCH0QXNaC1cluiyIvMo9qy20k0GEZ/l/+wWHuVGLLUvyB035m3c+OwDb kagMHp/E/HzVbhGun3qA5EyEDxxSjc/P5zFERGbFw7frn0q0hLqIK9oGCynF/XzU 6ArKWR0XPCi40R5s9f5pYBDKvhurkK/WCgi/Ic0Q2zfTtLNxCBe3tcjvFerelkU6 hIq3KH6ZM8qvSqbnpOcIi/EUryFqu/iK8ss98PgRVdnBlK+9YO2++VbIawIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGSz42YG+lLDpHIcjKD7MwmVNBlaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2I3MGUw Ny0xMWIyLTRhMmEtODk1NS0wZTM4MWJkNDEzZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYjcwZTA3 LTExYjItNGEyYS04OTU1LTBlMzgxYmQ0MTNkMy8xL1pMUGpaZ2I2VXNPa2NoeU1v UHN6Q1pVMEdWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+CGMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDcXTANBgkqhkiG9w0BAQsFAAOCAQEAayOOadQboLGRXry1dwvSOpos90n9Mvfp 2IckeP+xb5RkoHHck3BMd8/B0CdYpZ3bhxjpUUI1umJzizER3e+ulUTvzmjcjJDN RYa0L8wOfdBRZ1V+Ju9ChJ22fGwMEDrr6xCfxxOlLxYryYAzhbEXvJx7U4tR1JW0 ufojlSete6UEl+haacb6UaEsoTXqQLg7HZr/X0aIPVjg+7E3auV/zFsZiQc7/rhd XA1g3eMyiLuGLMa3bT96iWEDgGmlXZ8R0gZ/kYULv84MkIgbnpSSLNbDEKFSGXXl nZe4sZNaOl2R/+TtTf+1kImog8vnER5sDnF7zPvtlEcVWN1uqSWtnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:49 2026 by rpki-client