This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer (raw, json) Hash identifier: tMg1o6uqKYCWi6Lv7akq5iKb96z1QcLUEeu/A+2gyNA= Subject key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5224FBE24AE75ADD327F764C6D577 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.75.128.0/22 IP: 2a03:4d20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:22:4f:be:24:ae:75:ad:d3:27:f7:64:c6:d5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:7c:26:f3:d6:4d:fb:a2:e4:7e:c8:33:b5: 45:a9:68:69:d2:2e:4f:de:d1:a4:b4:57:af:66:20: 5d:cc:3f:4b:0d:fe:32:3e:6d:82:19:fc:7a:2b:91: f9:95:ad:64:62:0f:af:98:c0:17:d0:f7:6b:4b:5d: 43:dc:06:3b:3f:80:1c:65:2f:12:13:ae:82:96:e0: 8d:ef:3d:cb:b0:1b:a1:50:7e:f1:e8:28:10:e5:58: b7:93:15:62:57:f1:7d:8e:3e:2a:1c:f8:d7:1e:a7: eb:3e:1a:a9:de:c9:29:60:62:d0:03:fd:e8:98:4c: 03:7a:9f:f7:55:86:38:6d:5d:fe:7a:67:be:a4:3c: 2f:69:02:10:47:33:17:10:1a:24:66:b2:e4:3c:ce: ef:19:bc:91:25:54:b3:b0:1d:33:42:0b:b6:87:57: 50:15:2f:c2:3e:7e:75:e4:f2:dc:5c:f6:e5:ef:c1: 20:a9:97:66:c5:86:54:a6:8e:60:1d:ea:7a:b5:af: 96:eb:58:cb:d0:1f:a3:d4:cf:ec:96:e1:83:08:1a: 49:a7:51:d2:ac:20:f9:bd:ae:46:26:7f:d6:68:01: 0d:9b:df:a2:b8:74:d8:70:75:5f:55:67:2a:ba:a8: 05:54:ef:7b:c9:80:c8:0c:0c:71:5d:b9:22:61:25: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.128.0/22 IPv6: 2a03:4d20::/29 Signature Algorithm: sha256WithRSAEncryption 25:ab:7d:c2:25:bd:8c:85:2b:28:b4:f9:83:79:75:e0:23:76: d1:f1:c8:cd:ef:1c:72:f6:6a:ff:e3:19:b7:7a:70:9d:85:30: cb:1e:7b:94:f5:3a:94:da:ea:3c:89:e1:e5:f5:86:cc:97:38: f1:2f:96:a0:5f:78:eb:ba:a8:31:3c:e6:52:94:06:46:7d:92: 20:b8:f4:56:e6:29:3b:56:1d:29:6a:cf:f1:16:80:49:56:bc: 15:92:ea:da:e1:ab:e2:c3:b6:ac:50:76:53:44:19:b8:46:ce: 12:80:8b:15:2a:e0:26:af:9a:83:7f:0a:69:30:b3:2b:b1:d2: ef:da:c8:bd:6e:b1:6e:6e:ce:e7:dd:fd:cf:ce:39:42:5c:68: d7:aa:c1:f7:13:80:69:87:be:cf:80:e9:ef:81:92:0b:27:33: df:74:05:6e:98:56:da:ca:b9:c6:2f:72:2d:28:1a:cd:a2:67: ae:a7:84:22:0a:ba:b5:16:7a:82:7d:5a:4f:27:f2:c9:a9:4e: 18:17:83:e2:16:ef:54:b9:f8:fa:b3:10:dd:2a:d2:09:27:0d: 29:3e:2b:54:93:30:ee:71:48:f8:44:7b:03:2b:10:89:06:03: 77:f3:00:7d:56:ee:42:f5:94:85:c8:e9:f0:46:24:f6:e0:5e: 05:d3:7f:99 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pSJPviSuda3TJ/dkxtV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTIyNmVlNWVhMDQwNjU5MmRmOTc1YzZmNGM4NGYxMGYxNGQxNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugx8JvPWTfui5H7IM7VFqWhp0i5P 3tGktFevZiBdzD9LDf4yPm2CGfx6K5H5la1kYg+vmMAX0PdrS11D3AY7P4AcZS8S E66CluCN7z3LsBuhUH7x6CgQ5Vi3kxViV/F9jj4qHPjXHqfrPhqp3skpYGLQA/3o mEwDep/3VYY4bV3+eme+pDwvaQIQRzMXEBokZrLkPM7vGbyRJVSzsB0zQgu2h1dQ FS/CPn515PLcXPbl78EgqZdmxYZUpo5gHep6ta+W61jL0B+j1M/sluGDCBpJp1HS rCD5va5GJn/WaAENm9+iuHTYcHVfVWcquqgFVO97yYDIDAxxXbkiYSU6CwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGUibuXqBAZZLfl1xvTITxDxTRXLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzU5NGZh OC1kMzE1LTRhMzgtYTYzMS1kZWMwMjQ4OGMzN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNTk0ZmE4 LWQzMTUtNGEzOC1hNjMxLWRlYzAyNDg4YzM3Yy8xL1pTSnU1ZW9FQmxrdC1YWEc5 TWhQRVBGTkZjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUuAMA0EAgACMAcDBQMqA00gMA0GCSqGSIb3 DQEBCwUAA4IBAQAlq33CJb2MhSsotPmDeXXgI3bR8cjN7xxy9mr/4xm3enCdhTDL HnuU9TqU2uo8ieHl9YbMlzjxL5agX3jruqgxPOZSlAZGfZIguPRW5ik7Vh0pas/x FoBJVrwVkura4aviw7asUHZTRBm4Rs4SgIsVKuAmr5qDfwppMLMrsdLv2si9brFu bs7n3f3PzjlCXGjXqsH3E4Bph77PgOnvgZILJzPfdAVumFbayrnGL3ItKBrNomeu p4QiCrq1FnqCfVpPJ/LJqU4YF4PiFu9Uufj6sxDdKtIJJw0pPitUkzDucUj4RHsD KxCJBgN38wB9Vu5C9ZSFyOnwRiT24F4F03+Z -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:40 2026 by rpki-client