This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer (raw, json) Hash identifier: LfASnDd+50txSjvsAfao42g0ye1/ygB4i2GXGrJvOq4= Subject key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80873FDB45B6452DFB8E0782606EB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216233 IP: 2001:67c:d3c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:87:3f:db:45:b6:45:2d:fb:8e:07:82:60:6e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:86:5e:c3:fa:1e:04:8c:3d:1d:a0:c7:c0: ac:25:ae:61:c4:a5:2b:d8:74:d8:01:dd:df:d2:f5: e6:f4:e2:93:ec:0d:d5:bc:36:e1:fa:b5:96:61:e6: 57:56:fb:b8:cb:db:0a:84:d7:3c:f1:45:bb:99:4a: a3:63:4e:45:1f:f3:5f:52:ee:bd:15:88:65:56:10: a1:21:46:88:27:2c:50:76:c0:4b:58:40:bd:77:89: 92:b8:fe:a0:b5:7c:83:a7:b5:bc:07:d6:ce:10:8f: 4d:bd:6b:94:7b:ad:1d:f0:48:26:fd:6e:90:a2:d5: 6e:f4:de:37:95:05:97:db:fa:00:3a:2e:72:84:4a: 90:0d:c0:ae:cd:ab:6b:a1:24:36:fb:3f:cf:ef:28: 68:23:0e:e1:cf:fe:9c:3c:11:78:f6:ea:6e:55:b1: bc:09:68:66:43:bc:0f:c2:8d:83:15:49:9b:ea:e8: 9e:b5:39:03:d5:9c:c9:c2:6d:8d:73:de:7d:c0:71: f8:76:b6:a7:1e:fa:1c:34:d0:51:e1:16:08:b8:36: 27:cd:d5:77:c2:0e:1e:f6:ad:b3:6d:6f:6a:0c:ca: 96:95:a0:8e:a3:0b:e8:cd:7e:ad:19:6c:f3:71:97: 9a:d8:b8:6d:9d:99:d9:58:48:8b:13:33:27:22:a6: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d3c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216233 Signature Algorithm: sha256WithRSAEncryption a7:ce:ec:77:48:a6:19:59:7a:46:42:48:c7:8f:21:2d:bf:c5: 7b:28:f2:5f:61:b1:b0:fe:65:67:95:e4:13:bf:fa:2e:18:78: fb:fc:c6:17:8a:39:54:ad:1c:c8:93:8a:8a:4c:0c:0c:73:d8: 3c:34:d0:94:e0:24:b3:36:2c:df:fc:5a:ea:9f:09:8b:bf:83: c6:75:d0:bd:f5:17:1d:5d:ab:61:84:68:d0:e2:54:4e:af:85: 68:f2:4d:f8:1b:c8:b4:51:c2:36:3a:a6:22:5c:49:08:ba:76: 4a:bf:13:18:74:09:3e:02:fe:7e:c0:28:0e:47:46:e1:46:60: e0:a4:3e:60:90:35:07:c8:ea:86:1b:30:ce:77:91:c1:ef:dd: 8b:fd:bc:4e:8f:4f:98:3e:ff:71:b9:f3:4a:37:2f:fb:ef:f0: 09:8f:19:04:b3:86:db:41:0c:76:cd:43:49:c2:7c:a0:01:2d: 35:70:5e:cc:02:d9:f9:d9:3c:9b:eb:46:b2:c7:7b:d0:53:53: a4:2d:74:dc:59:48:76:41:f4:15:d6:0b:15:33:42:8b:57:d0: 00:63:ba:ab:ad:80:92:7e:83:67:ce:62:a4:1c:81:90:6d:b1: 83:48:ad:81:8d:b3:da:0b:cd:84:5e:b4:26:07:03:4f:46:9f: 90:49:ba:af -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8gIc/20W2RS37jgeCYG6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQ4NGI1ZjE5YjYyMDQ4YjIyYTYxMDNkMDlmODRkODE1M2M3NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q2GXsP6HgSMPR2gx8CsJa5hxKUr 2HTYAd3f0vXm9OKT7A3VvDbh+rWWYeZXVvu4y9sKhNc88UW7mUqjY05FH/NfUu69 FYhlVhChIUaIJyxQdsBLWEC9d4mSuP6gtXyDp7W8B9bOEI9NvWuUe60d8Egm/W6Q otVu9N43lQWX2/oAOi5yhEqQDcCuzatroSQ2+z/P7yhoIw7hz/6cPBF49upuVbG8 CWhmQ7wPwo2DFUmb6uietTkD1ZzJwm2Nc959wHH4dranHvocNNBR4RYIuDYnzdV3 wg4e9q2zbW9qDMqWlaCOowvozX6tGWzzcZea2LhtnZnZWEiLEzMnIqarIQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGTYS18ZtiBIsiphA9CfhNgVPHVWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2JjYjNm ZC1hOTZlLTRjMDAtYWExMS01ZGI2M2JhYjk0NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYmNiM2Zk LWE5NmUtNGMwMC1hYTExLTVkYjYzYmFiOTQ2MC8xL1pOaExYeG0ySUVpeUttRUQw Si1FMkJVOGRWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA08MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNMqTANBgkqhkiG9w0BAQsFAAOCAQEAp87sd0imGVl6RkJIx48hLb/Feyjy X2GxsP5lZ5XkE7/6Lhh4+/zGF4o5VK0cyJOKikwMDHPYPDTQlOAkszYs3/xa6p8J i7+DxnXQvfUXHV2rYYRo0OJUTq+FaPJN+BvItFHCNjqmIlxJCLp2Sr8TGHQJPgL+ fsAoDkdG4UZg4KQ+YJA1B8jqhhswzneRwe/di/28To9PmD7/cbnzSjcv++/wCY8Z BLOG20EMds1DScJ8oAEtNXBezALZ+dk8m+tGssd70FNTpC103FlIdkH0FdYLFTNC i1fQAGO6q62Akn6DZ85ipByBkG2xg0itgY2z2gvNhF60JgcDT0afkEm6rw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:44 2026 by rpki-client