This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer (raw, json) Hash identifier: NnWCGuald3BTo6XfPinFiiR3FlY1YmKW1EQ21Bp6rq0= Subject key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80CF6BE0E1465319B37EB014313E0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25115 IP: 193.23.243.0/24 IP: 193.201.236.0/22 IP: 194.15.176.0/23 IP: 2a09:20c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cf:6b:e0:e1:46:53:19:b3:7e:b0:14:31:3e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64daba15d1d366cb53095412d06490e23498e170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:63:a9:05:50:79:19:94:8e:0a:bb:b1:fd:f6: bf:a0:48:81:84:84:89:ce:e4:a0:62:1e:86:23:a1: a0:69:6c:5e:f5:d9:3d:a1:1c:a2:ce:c1:f4:ad:f0: a6:d2:65:01:65:33:f6:0d:77:4b:1d:8c:95:bf:69: b9:dd:74:65:18:fa:56:2a:f6:29:41:3b:e2:81:fd: 2d:24:ea:5d:51:97:a2:ed:f6:f1:d5:b9:09:56:52: 7c:b8:f9:59:be:0a:5d:e7:9f:96:c2:e2:4b:ce:1c: b6:ab:f1:06:28:99:65:83:58:f9:b8:a5:f0:c2:a9: 70:79:02:f7:6b:2e:a1:fb:09:4d:26:7d:9f:01:0b: 0a:3e:53:fc:dc:7f:4c:fe:58:4e:41:dd:5d:27:a9: d4:80:7e:92:49:67:b3:77:d9:54:0c:f2:5f:58:45: 12:a6:ff:01:39:f4:09:13:62:99:c5:31:7b:24:96: 71:46:72:8d:f0:bd:75:52:7e:60:e7:99:8f:09:e0: 1e:0a:97:16:27:f4:ce:17:19:b1:52:f9:72:0e:6b: 40:f2:17:6b:0b:42:2d:b5:a3:5b:26:09:88:de:20: 88:c8:bc:1c:e5:f3:7d:65:63:19:d9:13:35:f6:3d: f6:c6:81:43:0a:a5:82:da:77:f6:a7:c0:b1:cc:e1: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.243.0/24 193.201.236.0/22 194.15.176.0/23 IPv6: 2a09:20c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25115 Signature Algorithm: sha256WithRSAEncryption 63:4e:af:d5:41:35:0f:33:b8:23:a3:de:91:d5:30:36:73:f1: 91:62:45:54:89:98:b2:70:97:32:f6:7b:d0:05:90:cc:ca:36: fb:dc:3d:45:5c:b7:ac:83:4b:ec:ef:fb:23:cc:fd:91:d4:db: 93:83:d9:df:47:63:c7:21:04:94:c2:30:a2:06:77:94:31:79: fb:fe:70:f1:55:94:9f:33:24:ce:a4:f9:98:93:79:a7:45:b2: cf:9b:8e:a3:83:e3:d3:60:12:28:0c:32:2c:c5:0b:6b:b2:bf: d8:8c:db:4b:b8:04:4f:a2:16:a4:ed:5d:8c:cb:2c:07:40:e3: e1:cf:20:f5:bd:5a:aa:86:1b:18:f3:6c:3b:e5:5d:db:8f:1f: 8e:9d:1f:a0:52:4f:a7:bd:d1:a3:7d:a8:b0:46:3a:44:c9:06: db:70:2d:8d:91:38:5c:e6:e0:8b:8b:77:aa:22:dc:67:43:87: e7:44:33:33:7b:ed:8a:25:43:e0:4d:86:52:b0:4f:a6:31:54: 85:af:ea:90:4f:5a:61:aa:65:92:d7:f7:67:59:72:94:9a:0f: cb:9b:be:3f:18:ad:ac:c2:7f:65:11:e8:94:6f:83:c1:0d:ae: 4e:3d:63:53:3f:4f:d5:00:ce:fe:8c:f7:a0:02:e7:fc:5c:18: 0d:16:cc:ef -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8gM9r4OFGUxmzfrAUMT4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGRhYmExNWQxZDM2NmNiNTMwOTU0MTJkMDY0OTBlMjM0OThlMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGOpBVB5GZSOCrux/fa/oEiBhISJ zuSgYh6GI6GgaWxe9dk9oRyizsH0rfCm0mUBZTP2DXdLHYyVv2m53XRlGPpWKvYp QTvigf0tJOpdUZei7fbx1bkJVlJ8uPlZvgpd55+WwuJLzhy2q/EGKJllg1j5uKXw wqlweQL3ay6h+wlNJn2fAQsKPlP83H9M/lhOQd1dJ6nUgH6SSWezd9lUDPJfWEUS pv8BOfQJE2KZxTF7JJZxRnKN8L11Un5g55mPCeAeCpcWJ/TOFxmxUvlyDmtA8hdr C0IttaNbJgmI3iCIyLwc5fN9ZWMZ2RM19j32xoFDCqWC2nf2p8CxzOHJQwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFGTauhXR02bLUwlUEtBkkOI0mOFwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzczNmRi Mi0wYzY0LTQ1ZWQtODMzYS1hOTRkZDhjY2FmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNzM2ZGIy LTBjNjQtNDVlZC04MzNhLWE5NGRkOGNjYWY5Zi8xL1pOcTZGZEhUWnN0VENWUVMw R1NRNGpTWTRYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAwRfzAwQCwcnsAwQBwg+wMA0EAgACMAcDBQMq CSDAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmIbMA0GCSqGSIb3DQEBCwUAA4IB AQBjTq/VQTUPM7gjo96R1TA2c/GRYkVUiZiycJcy9nvQBZDMyjb73D1FXLesg0vs 7/sjzP2R1NuTg9nfR2PHIQSUwjCiBneUMXn7/nDxVZSfMyTOpPmYk3mnRbLPm46j g+PTYBIoDDIsxQtrsr/YjNtLuARPohak7V2MyywHQOPhzyD1vVqqhhsY82w75V3b jx+OnR+gUk+nvdGjfaiwRjpEyQbbcC2NkThc5uCLi3eqItxnQ4fnRDMze+2KJUPg TYZSsE+mMVSFr+qQT1phqmWS1/dnWXKUmg/Lm74/GK2swn9lEeiUb4PBDa5OPWNT P0/VAM7+jPegAuf8XBgNFszv -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:26 2026 by rpki-client