This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer (raw, json) Hash identifier: h6+ZiqFOIe7V2KxtYK93JNktl5iNfRXPc/f1c02wWZk= Subject key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3920BC77786222ED487B40EB4C551B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205209 IP: 141.226.250.0/23 IP: 185.223.0.0/22 IP: 2a0d:2800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:20:bc:77:78:62:22:ed:48:7b:40:eb:4c:55:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64e7553292af595426ee1d7dc919a2104894752b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:bb:a6:04:ac:0a:36:de:e3:b6:c3:e7:7e: e4:57:44:d7:41:f6:6d:d8:76:36:93:a0:9d:f0:06: 45:ca:97:ee:cd:f0:f3:ad:a7:23:5e:d9:3a:9f:bb: 22:d1:03:04:a4:81:a8:14:f5:25:12:48:7b:82:5a: 41:85:b1:bc:9f:47:68:50:dc:2d:b3:e2:92:be:74: 4f:fe:92:ca:ef:f4:85:6b:17:e0:82:e6:e7:71:c9: 70:67:fa:54:dd:cc:08:9d:f4:3f:34:6d:a5:6f:59: 0d:86:f5:27:0e:a4:fb:3e:1d:ce:88:89:78:85:4c: 58:1f:59:09:9d:2d:6b:3f:c6:61:e9:42:44:e4:26: e8:04:62:8e:ec:87:bb:1a:e1:5d:a4:f5:29:54:24: 68:f8:34:a6:31:45:c2:5f:4d:6d:44:ea:68:d5:1c: 95:8f:45:ca:44:52:85:d6:d6:68:d3:77:69:30:34: f1:e9:12:56:97:65:43:81:87:47:b8:b7:d9:c8:f8: b8:1a:aa:d9:6e:dd:3d:43:5a:10:50:db:17:97:52: be:e6:c8:70:b8:03:c5:2a:16:48:be:a0:12:d4:c9: b0:8e:05:94:12:11:df:4e:db:9f:84:38:97:47:c8: 8d:1b:43:7b:11:00:fb:cc:48:46:73:f4:22:87:69: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.250.0/23 185.223.0.0/22 IPv6: 2a0d:2800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205209 Signature Algorithm: sha256WithRSAEncryption 93:f7:f9:b5:01:5a:52:3f:cb:78:85:9b:f7:4c:62:7f:c3:9a: 75:00:a1:75:15:83:96:f5:0e:c2:d9:48:57:74:71:a1:36:73: e4:d8:d3:53:87:a7:f3:23:f6:c3:44:e2:7a:8c:11:4d:07:d2: 35:17:6e:83:44:be:b4:1c:89:24:62:e7:c5:b4:50:fb:00:eb: 90:ab:67:8f:87:e2:81:8d:4f:9a:03:59:13:0e:d6:36:42:3a: c1:fc:d2:98:2f:de:fa:39:cf:a3:8e:cf:a8:fd:34:9d:01:52: 90:e0:71:e7:3e:33:25:1a:a6:2e:fa:7d:ce:d3:69:8d:12:61: 05:25:0c:1b:f4:6a:45:8d:19:67:80:84:df:f5:aa:7e:2b:bb: c9:a7:13:e8:6b:9d:ce:ef:e7:6a:30:b5:b8:ef:3b:5d:e9:ad: 62:ff:69:59:63:1a:17:58:68:84:8d:ec:d8:6f:df:8a:40:e3: 20:28:b4:0e:4e:8e:05:21:2f:0f:7b:e2:28:23:8b:06:9d:bc: 1c:c3:e9:44:60:f9:bf:8b:2f:a7:e9:b7:81:a4:75:e3:9f:3b: 26:e2:c2:18:92:d8:d2:1c:a0:65:31:dd:99:5d:28:06:ab:be: 03:52:01:32:bf:a6:96:c0:bd:97:3d:63:e5:42:7a:0e:e9:64: 03:ea:d6:ab -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OSC8d3hiIu1Ie0DrTFUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGU3NTUzMjkyYWY1OTU0MjZlZTFkN2RjOTE5YTIxMDQ4OTQ3NTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0G7pgSsCjbe47bD537kV0TXQfZt 2HY2k6Cd8AZFypfuzfDzracjXtk6n7si0QMEpIGoFPUlEkh7glpBhbG8n0doUNwt s+KSvnRP/pLK7/SFaxfggubncclwZ/pU3cwInfQ/NG2lb1kNhvUnDqT7Ph3OiIl4 hUxYH1kJnS1rP8Zh6UJE5CboBGKO7Ie7GuFdpPUpVCRo+DSmMUXCX01tROpo1RyV j0XKRFKF1tZo03dpMDTx6RJWl2VDgYdHuLfZyPi4GqrZbt09Q1oQUNsXl1K+5shw uAPFKhZIvqAS1MmwjgWUEhHfTtufhDiXR8iNG0N7EQD7zEhGc/Qih2l/JwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGTnVTKSr1lUJu4dfckZohBIlHUrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2U2NmE1 Ny02NWVmLTQ2NDQtOGY1MC1jMTRmYWY0M2JlMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZTY2YTU3 LTY1ZWYtNDY0NC04ZjUwLWMxNGZhZjQzYmUxNC8xL1pPZFZNcEt2V1ZRbTdoMTl5 Um1pRUVpVWRTcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBjeL6AwQCud8AMA0EAgACMAcDBQMqDSgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhmTANBgkqhkiG9w0BAQsFAAOCAQEAk/f5 tQFaUj/LeIWb90xif8OadQChdRWDlvUOwtlIV3RxoTZz5NjTU4en8yP2w0TieowR TQfSNRdug0S+tByJJGLnxbRQ+wDrkKtnj4figY1PmgNZEw7WNkI6wfzSmC/e+jnP o47PqP00nQFSkOBx5z4zJRqmLvp9ztNpjRJhBSUMG/RqRY0ZZ4CE3/Wqfiu7yacT 6Gudzu/najC1uO87XemtYv9pWWMaF1hohI3s2G/fikDjICi0Dk6OBSEvD3viKCOL Bp28HMPpRGD5v4svp+m3gaR14587JuLCGJLY0hygZTHdmV0oBqu+A1IBMr+mlsC9 lz1j5UJ6DulkA+rWqw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:50:30 2026 by rpki-client