This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer (raw, json) Hash identifier: PIdNMo/lAu4oi0OQ64WK0E6yWWP8GJhFXvVvOXmG8MY= Subject key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A23DECDAEF8DA29C76FFA2CEB7F532 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198004 IP: 88.135.180.0/22 IP: 91.233.156.0 -- 91.233.161.255 IP: 176.103.72.0/21 IP: 185.234.240.0/22 IP: 2a0d:3500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3d:ec:da:ef:8d:a2:9c:76:ff:a2:ce:b7:f5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:83:8c:d0:e7:05:69:79:82:ce:ef:aa:7c: 83:ef:ea:cd:48:5f:57:e0:c7:6e:29:42:d4:a8:79: d6:81:f1:93:31:d3:8f:3b:4a:92:a8:a0:84:6d:3a: 0a:83:08:65:1d:9e:a6:0e:b9:d2:4c:b9:10:65:f2: 4b:51:e2:04:26:16:54:f6:10:1d:69:14:60:1c:e2: 6d:cb:18:3d:25:0e:ba:51:24:93:f8:af:52:61:de: 98:ee:a3:d2:84:b0:ef:38:c8:ad:c6:80:80:d8:79: 59:df:28:25:53:17:75:72:f9:e8:d1:21:e4:b3:17: 2f:bb:56:da:8d:6c:df:e2:24:e9:f4:f6:1e:c0:af: a5:6a:4b:8d:0a:13:06:7b:ed:06:90:8f:d3:c4:20: f7:82:3b:28:e7:e4:b7:fc:95:1b:6b:20:5f:1e:34: d4:69:e0:40:7a:39:b8:2f:d9:e1:e5:71:91:20:ff: 05:95:c9:91:ba:2b:15:c9:e6:bf:03:c1:ac:6a:0d: 95:ff:98:a9:52:43:6b:60:7f:59:e3:e4:34:47:c4: 7d:e6:d1:77:0f:a4:3e:1f:6e:ea:00:7e:dd:4b:f7: 1c:e6:f4:6d:51:59:a3:8b:23:d3:7c:ee:72:22:90: e3:bb:5a:35:43:dd:0b:c3:78:87:f0:da:24:43:ea: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.180.0/22 91.233.156.0-91.233.161.255 176.103.72.0/21 185.234.240.0/22 IPv6: 2a0d:3500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198004 Signature Algorithm: sha256WithRSAEncryption 65:61:3a:1c:57:46:91:5d:9a:51:4f:ca:2d:93:b9:4d:43:6c: 3f:44:cd:0b:c7:66:6b:62:41:4d:23:52:6e:7a:99:39:4a:cb: 90:67:e5:00:2f:ef:a1:93:1b:c8:86:75:4f:14:05:9f:83:e8: 1d:08:67:dd:d9:1d:36:15:ba:2a:ad:79:6e:2f:54:51:47:09: 11:e1:1e:22:2a:68:c9:19:98:35:5d:65:37:32:fc:65:57:3a: df:ba:98:22:16:38:29:c2:b3:cb:42:5e:a7:c2:8f:67:35:19: da:08:8d:04:06:4a:7c:a5:81:31:af:6d:0c:ce:08:af:ac:c4: 01:78:8b:36:5a:9a:aa:a9:bd:3c:d6:e6:73:74:16:9d:99:b4: 01:a7:f4:ee:53:f9:8d:5c:8c:d1:e8:ef:9e:96:10:6f:dc:f1: a2:cf:99:f4:de:2a:15:64:6d:8f:25:12:9e:f0:00:19:2d:f1: fc:59:a7:2f:4b:29:8f:c5:31:3e:02:de:ce:be:2d:9b:04:17: 6a:fa:b2:37:55:e8:66:63:3e:d4:5a:47:9e:d8:d7:16:20:93: a2:21:a0:db:02:89:4c:2f:60:46:37:26:ef:3e:6c:fd:b0:10: 1f:87:a0:bc:66:27:b4:c7:97:86:30:2d:c0:c0:b6:d1:c5:06: a7:b4:70:9c -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt4oj3s2u+Nopx2/6LOt/UyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGJiMjJmODIyZGI3NDUxZmUxZTIxOTZjYWM2M2M1NjQ3ZmIxYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ODjNDnBWl5gs7vqnyD7+rNSF9X 4MduKULUqHnWgfGTMdOPO0qSqKCEbToKgwhlHZ6mDrnSTLkQZfJLUeIEJhZU9hAd aRRgHOJtyxg9JQ66USST+K9SYd6Y7qPShLDvOMitxoCA2HlZ3yglUxd1cvno0SHk sxcvu1bajWzf4iTp9PYewK+lakuNChMGe+0GkI/TxCD3gjso5+S3/JUbayBfHjTU aeBAejm4L9nh5XGRIP8FlcmRuisVyea/A8Gsag2V/5ipUkNrYH9Z4+Q0R8R95tF3 D6Q+H27qAH7dS/cc5vRtUVmjiyPTfO5yIpDju1o1Q90Lw3iH8NokQ+pXuwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFGS7Ivgi23RR/h4hlsrGPFZH+xrVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2U4MTNk NC00MTI2LTRjYTEtOTBkNi00NWQwNWE0YjFkOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvZTgxM2Q0 LTQxMjYtNGNhMS05MGQ2LTQ1ZDA1YTRiMWQ5OS8xL1pMc2ktQ0xiZEZILUhpR1d5 c1k4VmtmN0d0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCWIe0MAwDBAJb6ZwDBAFb6aADBAOwZ0gDBAK5 6vAwDQQCAAIwBwMFAyoNNQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwV0MA0G CSqGSIb3DQEBCwUAA4IBAQBlYTocV0aRXZpRT8otk7lNQ2w/RM0Lx2ZrYkFNI1Ju epk5SsuQZ+UAL++hkxvIhnVPFAWfg+gdCGfd2R02FboqrXluL1RRRwkR4R4iKmjJ GZg1XWU3MvxlVzrfupgiFjgpwrPLQl6nwo9nNRnaCI0EBkp8pYExr20MzgivrMQB eIs2Wpqqqb081uZzdBadmbQBp/TuU/mNXIzR6O+elhBv3PGiz5n03ioVZG2PJRKe 8AAZLfH8WacvSymPxTE+At7Ovi2bBBdq+rI3VehmYz7UWkee2NcWIJOiIaDbAolM L2BGNybvPmz9sBAfh6C8Zie0x5eGMC3AwLbRxQantHCc -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:45 2026 by rpki-client