This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer (raw, json) Hash identifier: iQ83NL0hwylssoECE2MzOcy8YkjkOvnEQd/DxkRfLsA= Subject key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1C24F58865521C7CC5A04B3C46D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.113.192.0/22 IP: 2a02:7480::/32 IP: 2a06:3f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:24:f5:88:65:52:1c:7c:c5:a0:4b:3c:46:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:6c:a4:e4:90:f7:82:b3:89:94:bc:23:64: 4d:72:3d:32:ae:6c:cb:4e:4e:77:f3:83:41:97:48: 23:4d:0c:35:9d:94:d6:66:50:b0:07:b1:7c:6c:ec: 69:24:d8:e3:82:66:f0:ab:3f:df:67:16:6d:20:fd: 17:85:57:01:87:c7:13:7c:ec:3e:45:80:d4:3f:22: 13:c7:64:67:60:a2:c6:42:0e:14:06:d8:a6:cc:c2: 41:d0:85:7a:1d:b1:a1:c9:88:66:af:08:c7:ed:5d: 5e:92:76:34:3e:73:fc:c6:19:3c:08:8c:05:1f:da: f3:90:21:61:31:bf:6a:cc:1b:17:b5:38:10:62:bb: 91:7c:64:e4:8c:b3:31:ab:5d:42:40:ca:3a:fb:e7: de:d8:d2:20:e5:4f:c9:65:ab:a8:66:fd:02:0a:84: 8b:a8:2b:f2:d5:bb:26:4c:6d:39:a1:aa:56:bf:0e: 06:c0:55:93:5d:ce:81:47:14:95:36:09:fb:ae:fe: c8:9d:9f:7b:d3:7b:59:f5:b2:1c:74:7f:8a:49:59: b9:26:80:dd:e8:21:43:2a:55:58:9e:e8:e4:70:20: 80:00:ed:44:ef:24:f5:d8:33:f4:36:ae:88:12:f6: 94:7c:f6:c8:71:0d:c9:8d:1c:35:cc:a1:df:03:08: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.192.0/22 IPv6: 2a02:7480::/32 2a06:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 2b:c9:b6:f2:65:fc:0f:d6:e9:19:ec:26:ff:f0:0a:bf:c3:7b: 31:2a:23:cd:10:8d:a5:9c:b7:9b:f2:1e:3b:ee:ef:74:4a:96: ab:5f:04:24:86:a5:d5:14:c5:df:3f:ab:d5:18:e0:31:46:75: 8a:ab:1e:8a:89:59:12:c2:27:79:38:8d:c0:bc:2a:80:5d:e3: 04:05:25:13:b1:1e:bc:a6:ac:0a:a0:e8:c3:0f:52:fc:c5:d7: 83:20:7f:2a:38:89:23:e5:b2:3c:7f:ad:df:9e:11:0c:70:5b: 3e:79:01:e7:6c:f1:bf:93:53:b3:f2:aa:03:55:c5:17:11:f6: f7:59:33:f7:ac:2f:d8:cd:b0:f2:4e:85:4e:d6:e0:a2:73:0e: 25:15:20:c8:d5:78:8e:be:61:26:1c:8e:45:7a:52:9f:5d:09: 3a:c0:88:f5:61:6a:88:66:d2:70:1b:8b:16:ba:f6:38:af:a0: b2:89:dc:c6:84:4f:8e:be:1e:b8:8d:0f:ca:bc:d8:cc:bd:dc: 64:cd:f7:c4:10:24:be:73:17:d5:08:43:b7:a9:ab:05:21:f6: 9f:26:b5:f9:c6:db:e9:9d:ba:cb:05:f7:5f:3f:e2:1e:3a:9a: 2e:39:99:e0:4a:8b:a9:ff:34:03:7d:92:fe:77:c5:bd:2f:a0: 85:07:21:dc -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt5fxwk9YhlUhx8xaBLPEbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGZmYjMwOWMyODlhY2ZmYzFiZTM0YTZmMGI2Njc1YzAwMTcxM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnRspOSQ94KziZS8I2RNcj0yrmzL Tk5384NBl0gjTQw1nZTWZlCwB7F8bOxpJNjjgmbwqz/fZxZtIP0XhVcBh8cTfOw+ RYDUPyITx2RnYKLGQg4UBtimzMJB0IV6HbGhyYhmrwjH7V1eknY0PnP8xhk8CIwF H9rzkCFhMb9qzBsXtTgQYruRfGTkjLMxq11CQMo6++fe2NIg5U/JZauoZv0CCoSL qCvy1bsmTG05oapWvw4GwFWTXc6BRxSVNgn7rv7InZ9703tZ9bIcdH+KSVm5JoDd 6CFDKlVYnujkcCCAAO1E7yT12DP0Nq6IEvaUfPbIcQ3JjRw1zKHfAwgmpQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFGT/swnCiaz/wb40pvC2Z1wAFxPqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1Lzg3ZDA4 Ni1mNTNhLTQxYmEtODFmZS1jYTQ0NDcwNDQxNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvODdkMDg2 LWY1M2EtNDFiYS04MWZlLWNhNDQ0NzA0NDE2Zi8xL1pQLXpDY0tKclBfQnZqU204 TFpuWEFBWEUtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQCuXHAMBQEAgACMA4DBQAqAnSAAwUDKgY/gDAN BgkqhkiG9w0BAQsFAAOCAQEAK8m28mX8D9bpGewm//AKv8N7MSojzRCNpZy3m/Ie O+7vdEqWq18EJIal1RTF3z+r1RjgMUZ1iqseiolZEsIneTiNwLwqgF3jBAUlE7Ee vKasCqDoww9S/MXXgyB/KjiJI+WyPH+t354RDHBbPnkB52zxv5NTs/KqA1XFFxH2 91kz96wv2M2w8k6FTtbgonMOJRUgyNV4jr5hJhyORXpSn10JOsCI9WFqiGbScBuL Frr2OK+gsoncxoRPjr4euI0PyrzYzL3cZM33xBAkvnMX1QhDt6mrBSH2nya1+cbb 6Z26ywX3Xz/iHjqaLjmZ4EqLqf80A32S/nfFvS+ghQch3A== -----END CERTIFICATE-----Generated at Mon Jan 26 19:18:03 2026 by rpki-client