This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer (raw, json) Hash identifier: IG375chEWnwfcrhtawexCLVa/M2Ey7v8Vh7lcp99n1M= Subject key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4DEA266C560F1A2001C65436B975 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48475 IP: 37.110.224.0/20 IP: 46.231.168.0/21 IP: 94.230.32.0/20 IP: 128.140.192.0/21 IP: 185.25.176.0/22 IP: 188.124.96.0/19 IP: 2a02:2b28::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4d:ea:26:6c:56:0f:1a:20:01:c6:54:36:b9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:11:d9:6e:a0:94:b2:80:6f:bb:a1:b6:ae: 9c:1e:21:77:95:7a:61:d4:d1:d6:bf:d2:13:42:f8: 9d:de:c1:db:92:ee:da:de:22:27:4b:00:c7:5a:d9: d6:60:03:04:a2:4b:e7:8a:47:3d:0c:e5:62:24:a3: ab:df:08:fb:5e:74:82:e1:ff:db:89:16:92:2a:9b: 3f:6f:e5:95:29:6a:e2:28:cd:16:50:f1:06:e9:e0: 0f:4d:f3:53:dc:4e:8e:8c:b2:39:8c:84:8f:3f:83: de:b8:fb:54:75:33:80:93:66:bd:7f:a1:21:0e:12: df:80:97:f7:ec:ac:de:de:40:f7:55:c9:44:e3:0d: 11:dd:ff:42:33:ce:d8:ea:af:fd:e5:66:a3:f1:55: 9a:58:51:e0:e4:4b:9f:e2:a1:bf:06:e9:bb:d2:21: cf:e0:ff:46:8a:63:65:fa:28:8b:4f:f7:63:f8:58: c6:f2:fe:2e:82:e2:93:8a:bc:c3:63:39:51:ed:b6: 38:1f:bf:07:5d:cf:a9:c9:78:d4:63:d9:ee:f3:b5: b3:ae:e0:0c:18:91:8e:34:7b:68:3f:53:15:63:9e: 8c:8b:cc:f7:ce:9d:a4:1c:81:cb:e4:aa:6a:8b:9d: 6b:3c:3c:c0:e1:29:45:6a:53:7c:9d:72:74:ca:8d: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.110.224.0/20 46.231.168.0/21 94.230.32.0/20 128.140.192.0/21 185.25.176.0/22 188.124.96.0/19 IPv6: 2a02:2b28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48475 Signature Algorithm: sha256WithRSAEncryption 56:4c:2c:6b:bb:b9:ca:db:42:1a:70:d6:86:58:71:30:02:c9: 10:23:24:cd:c8:47:6b:c3:6b:b6:50:43:ab:a3:09:0a:48:e3: 46:b0:72:bf:6b:c7:38:94:b6:71:ff:71:dc:6d:c8:bf:df:77: ab:28:50:12:0a:19:32:59:3d:de:74:c6:68:fb:1a:cf:5e:57: 91:9a:0e:d4:f9:8a:ce:ba:4b:fd:2f:3b:02:e5:22:1d:5d:a8: a7:09:2a:86:4f:89:fd:fd:d7:a4:40:13:65:71:13:f5:85:04: 98:54:28:e2:b2:91:a8:33:c6:10:d6:71:99:b5:d9:05:68:cf: 39:bd:08:43:72:da:fb:67:40:6a:3d:b6:13:50:aa:c7:e7:44: 2d:3d:55:7b:46:ef:89:3d:7f:64:9b:b0:a3:32:c5:5e:8f:a0: 22:5e:a9:4d:9d:e0:f8:75:e0:d4:48:4b:30:47:6f:8a:27:d3: 74:af:8b:1e:7b:0a:66:99:4e:de:d7:8f:ad:5b:f1:09:84:8a: bb:4c:13:1e:f4:0e:dd:67:76:60:f0:59:c4:3d:fd:d7:a8:74: ca:bb:48:8d:4c:0e:a9:b3:c0:ba:05:1d:d4:bb:c2:cb:f9:56: 05:f7:64:b2:fd:39:b1:93:e6:d5:9a:f3:95:2c:69:89:6f:ab: 3e:7b:d6:77 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt57U3qJmxWDxogAcZUNrl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTE4NmU0ZWY4Y2FlZGY2NmVkMzRkOTNhYmE4MGIyY2ZjMDY4NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CMR2W6glLKAb7uhtq6cHiF3lXph 1NHWv9ITQvid3sHbku7a3iInSwDHWtnWYAMEokvnikc9DOViJKOr3wj7XnSC4f/b iRaSKps/b+WVKWriKM0WUPEG6eAPTfNT3E6OjLI5jISPP4PeuPtUdTOAk2a9f6Eh DhLfgJf37Kze3kD3VclE4w0R3f9CM87Y6q/95Waj8VWaWFHg5Euf4qG/Bum70iHP 4P9GimNl+iiLT/dj+FjG8v4uguKTirzDYzlR7bY4H78HXc+pyXjUY9nu87WzruAM GJGONHtoP1MVY56Mi8z3zp2kHIHL5Kpqi51rPDzA4SlFalN8nXJ0yo3xNwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFGUYbk74yu32btNNk6uoCyz8BoZzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzkyNGNm MS1mZmRjLTQ1ZTYtYTZmMy1lY2RjMzZkN2FkMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTI0Y2Yx LWZmZGMtNDVlNi1hNmYzLWVjZGMzNmQ3YWQxZS8xL1pSaHVUdmpLN2ZadTAwMlRx NmdMTFB3R2huTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQEJW7gAwQDLueoAwQEXuYgAwQDgIzAAwQCuRmw AwQFvHxgMA0EAgACMAcDBQAqAisoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9 WzANBgkqhkiG9w0BAQsFAAOCAQEAVkwsa7u5yttCGnDWhlhxMALJECMkzchHa8Nr tlBDq6MJCkjjRrByv2vHOJS2cf9x3G3Iv993qyhQEgoZMlk93nTGaPsaz15XkZoO 1PmKzrpL/S87AuUiHV2opwkqhk+J/f3XpEATZXET9YUEmFQo4rKRqDPGENZxmbXZ BWjPOb0IQ3La+2dAaj22E1Cqx+dELT1Ve0bviT1/ZJuwozLFXo+gIl6pTZ3g+HXg 1EhLMEdviifTdK+LHnsKZplO3tePrVvxCYSKu0wTHvQO3Wd2YPBZxD3916h0yrtI jUwOqbPAugUd1LvCy/lWBfdksv05sZPm1ZrzlSxpiW+rPnvWdw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:52 2026 by rpki-client