This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer (raw, json) Hash identifier: 26jiqQ1dFsj9lj5AnVFb/8RcjMmJYLkC1yio3n6fS4U= Subject key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9458DC3750F89A2CAD3BEE48CFEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.30.212.0/22 IP: 2a00:b320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:94:58:dc:37:50:f8:9a:2c:ad:3b:ee:48:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64c0bc594af811753dfc116af459b1b874471489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:54:cc:d5:e4:78:30:12:7c:a3:8b:f8:a3: c9:6b:de:fc:9b:ca:59:d3:97:78:19:c2:18:b7:e8: 96:e3:4e:3a:92:1b:47:ca:d1:ac:3f:0c:2c:96:12: 4b:fa:6d:96:af:e2:2c:d9:18:c8:73:c7:e5:bd:92: 3e:22:90:99:2e:bd:f4:e1:16:6b:c8:c9:ce:70:e3: db:ee:28:e8:b8:fe:18:1d:a3:23:85:f3:bf:17:39: 59:a6:05:47:24:29:24:1e:2e:1d:33:f8:c6:8c:92: 59:43:e4:a7:0f:fc:3d:ed:c5:8a:d9:54:7d:6b:c7: 90:72:b6:34:f2:63:2a:c6:25:54:fb:cd:42:f1:46: 01:f2:f6:d2:32:05:56:a8:ad:c4:26:e6:f1:d8:c2: 58:79:2b:29:bd:2b:f8:25:5a:e1:86:0d:b4:e0:14: 8c:0b:5d:e8:bb:24:c8:ac:02:bc:b5:df:87:1f:46: 7e:7a:9b:92:45:99:3a:e4:61:8d:a2:95:ef:a8:a4: bc:ab:38:75:8e:0f:e6:0b:a7:25:25:ba:27:70:dc: 77:32:34:cd:dc:9b:e6:6c:0c:3f:7c:60:50:81:f2: 13:1f:01:1a:3b:f3:7c:b9:ac:7d:f9:98:84:40:3f: cf:00:03:0f:da:f6:5d:d9:a8:5e:c4:1f:44:62:c5: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.212.0/22 IPv6: 2a00:b320::/32 Signature Algorithm: sha256WithRSAEncryption 4b:32:15:ec:51:1c:85:5c:10:4b:9d:89:42:3d:35:e0:32:c9: ba:bc:c5:2f:3b:33:2f:f9:a2:f3:45:08:75:58:f2:03:5d:07: 35:82:cd:21:01:37:9d:61:c1:63:eb:63:27:53:f9:32:0f:fd: cb:af:f2:ef:4f:cc:dd:d6:69:f0:9a:3d:28:7c:0b:c4:ec:49: f0:b8:a7:c9:ef:2d:48:99:67:84:d7:6b:11:16:10:81:41:ce: 15:7d:00:85:f4:6b:bc:73:5b:1b:2a:3a:81:df:54:4a:9c:69: 34:59:e2:73:79:c8:24:18:88:26:da:27:09:8a:7b:c3:4b:8e: 22:86:df:1d:9d:e8:1c:b5:8a:90:50:52:1e:a4:18:d4:91:ef: 34:f1:31:41:f8:22:65:3d:d6:78:46:fa:a7:33:42:aa:3e:0f: 5c:d7:bb:4d:b3:3c:1c:bb:2f:9f:b3:e5:e0:49:1e:f7:71:1c: 77:23:19:7a:5b:90:7c:6b:45:54:1e:4e:ef:a4:0a:78:ba:ea: d4:93:a5:eb:7b:bd:74:58:43:d2:67:35:8f:a9:81:aa:b7:a5: 34:ab:1c:97:3e:1d:ca:b1:c9:a3:74:d3:28:0a:c5:c1:2f:4c: 53:e2:8e:f6:02:90:02:ac:05:ef:e2:0b:78:a0:a6:f2:dd:7e: 17:c8:37:d4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W5RY3DdQ+JosrTvuSM/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGMwYmM1OTRhZjgxMTc1M2RmYzExNmFmNDU5YjFiODc0NDcxNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GVUzNXkeDASfKOL+KPJa978m8pZ 05d4GcIYt+iW4046khtHytGsPwwslhJL+m2Wr+Is2RjIc8flvZI+IpCZLr304RZr yMnOcOPb7ijouP4YHaMjhfO/FzlZpgVHJCkkHi4dM/jGjJJZQ+SnD/w97cWK2VR9 a8eQcrY08mMqxiVU+81C8UYB8vbSMgVWqK3EJubx2MJYeSspvSv4JVrhhg204BSM C13ouyTIrAK8td+HH0Z+epuSRZk65GGNopXvqKS8qzh1jg/mC6clJboncNx3MjTN 3JvmbAw/fGBQgfITHwEaO/N8uax9+ZiEQD/PAAMP2vZd2ahexB9EYsWvdQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGTAvFlK+BF1PfwRavRZsbh0RxSJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2I0OGJm ZC03OTdkLTQ3YTktOGE2Mi00NDMxM2I0M2U1OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYjQ4YmZk LTc5N2QtNDdhOS04YTYyLTQ0MzEzYjQzZTU5NC8xL1pNQzhXVXI0RVhVOV9CRnE5 Rm14dUhSSEZJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR7UMA0EAgACMAcDBQAqALMgMA0GCSqGSIb3 DQEBCwUAA4IBAQBLMhXsURyFXBBLnYlCPTXgMsm6vMUvOzMv+aLzRQh1WPIDXQc1 gs0hATedYcFj62MnU/kyD/3Lr/LvT8zd1mnwmj0ofAvE7EnwuKfJ7y1ImWeE12sR FhCBQc4VfQCF9Gu8c1sbKjqB31RKnGk0WeJzecgkGIgm2icJinvDS44iht8dnegc tYqQUFIepBjUke808TFB+CJlPdZ4RvqnM0KqPg9c17tNszwcuy+fs+XgSR73cRx3 Ixl6W5B8a0VUHk7vpAp4uurUk6Xre710WEPSZzWPqYGqt6U0qxyXPh3KscmjdNMo CsXBL0xT4o72ApACrAXv4gt4oKby3X4XyDfU -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:42 2026 by rpki-client