This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer (raw, json) Hash identifier: zUn2bX0SGfbtTWIIWmfREeLas5IXy/vvP2aN9JWgzC4= Subject key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B564A2CCC3ED1D8B36BB8439631A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50012 IP: 185.157.121.0/24 IP: 193.104.85.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:56:4a:2c:cc:3e:d1:d8:b3:6b:b8:43:96:31:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:95:a5:94:c0:e9:03:69:ed:43:57:09:2c: 84:31:54:98:51:d5:fb:a1:7f:5c:69:af:a0:66:20: 4c:7e:34:81:37:5b:12:dc:ba:73:af:17:9b:1b:4b: e1:8c:69:40:6a:fc:ff:08:33:db:ec:86:05:5f:c6: 52:17:1f:f6:b7:6d:2e:90:d9:58:5f:fb:c6:7f:87: 05:d7:47:ae:63:45:35:67:2d:a4:69:2b:4c:53:37: 22:a3:eb:0e:a9:f1:3c:06:bc:8d:24:af:ef:49:40: cd:0b:54:f3:70:cb:a4:92:da:8c:95:34:69:f3:1f: a4:1f:5c:41:60:84:2e:c8:e8:85:fe:2a:a1:1d:68: a1:44:28:90:22:04:72:45:83:73:b8:d4:df:e8:e2: 45:1d:a7:3e:f7:20:bb:ae:a1:c1:d0:d2:79:16:de: 88:3c:10:15:01:56:66:b6:fc:9f:af:a1:39:fe:5c: 0d:e1:01:7c:40:f2:ea:61:55:29:3d:0d:59:3a:58: e1:be:40:6c:a2:d7:60:c8:97:5c:51:c9:64:0b:1e: 5b:ae:67:c4:64:45:81:d0:b3:74:52:0d:2e:46:90: e1:47:22:d2:44:42:c9:96:26:62:bd:56:b2:37:73: 47:a9:65:5d:0a:0f:71:b8:81:b3:dd:92:b5:f4:73: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.121.0/24 193.104.85.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50012 Signature Algorithm: sha256WithRSAEncryption 75:20:8c:d0:cc:7c:8b:78:c0:33:a3:96:f2:7e:96:64:2b:ff: ab:07:bf:dd:ed:8d:28:23:d1:df:ca:88:6c:cf:8c:f5:13:ae: 54:84:fa:e5:52:bd:8e:a6:04:ff:e5:d8:70:1b:3c:41:3f:08: 35:da:3a:a9:c7:bf:fa:18:6a:90:76:f9:43:dc:18:f2:dd:71: 62:33:81:ca:15:16:c1:3f:27:58:a6:b5:6f:46:6a:3b:18:54: 55:d5:14:24:02:fa:0c:c5:6d:04:dd:f9:a4:62:d7:10:6a:64: ea:b3:bc:38:67:06:f9:1e:a2:02:1e:7d:50:35:aa:3a:3f:4c: b5:31:c9:6f:09:51:23:29:3e:d9:a7:1a:2a:8f:42:cb:08:53: 16:a4:4e:24:ae:c9:b9:58:bf:2f:84:6d:38:16:f3:6a:7f:ad: b7:52:9f:b7:8e:c5:65:e3:92:f6:ea:9c:aa:63:fb:c5:ca:b2: 40:5a:6a:45:4d:0c:e9:1e:5d:99:e6:91:72:0f:23:b7:1b:a6: 97:b5:fe:e7:22:cd:6a:6d:9f:c8:4d:a4:a6:75:a4:56:8f:06: d5:bc:b9:f9:74:74:8a:d1:ce:af:27:28:17:86:b9:bd:dd:cd: d4:be:ff:d9:cc:16:51:49:0d:4a:67:ef:c8:77:85:d6:43:6c: 90:dc:48:81 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6W1ZKLMw+0diza7hDljGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTI5NTkxM2MwN2MyMjYxMDBiZDM5ZjFlZTJjNTJlYTk4YWFlZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthOVpZTA6QNp7UNXCSyEMVSYUdX7 oX9caa+gZiBMfjSBN1sS3LpzrxebG0vhjGlAavz/CDPb7IYFX8ZSFx/2t20ukNlY X/vGf4cF10euY0U1Zy2kaStMUzcio+sOqfE8BryNJK/vSUDNC1TzcMukktqMlTRp 8x+kH1xBYIQuyOiF/iqhHWihRCiQIgRyRYNzuNTf6OJFHac+9yC7rqHB0NJ5Ft6I PBAVAVZmtvyfr6E5/lwN4QF8QPLqYVUpPQ1ZOljhvkBsotdgyJdcUclkCx5brmfE ZEWB0LN0Ug0uRpDhRyLSRELJliZivVayN3NHqWVdCg9xuIGz3ZK19HMBTQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGUpWRPAfCJhAL058e4sUuqYqu4UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzUwZDQ3 Ni1kNzIyLTQwZjItOTgwZi02NDIzNmZjMzZkMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNTBkNDc2 LWQ3MjItNDBmMi05ODBmLTY0MjM2ZmMzNmQxZC8xL1pTbFpFOEI4SW1FQXZUbng3 aXhTNnBpcTdoUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuZ15AwQAwWhVMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDDXDANBgkqhkiG9w0BAQsFAAOCAQEAdSCM0Mx8i3jAM6OW8n6WZCv/ qwe/3e2NKCPR38qIbM+M9ROuVIT65VK9jqYE/+XYcBs8QT8INdo6qce/+hhqkHb5 Q9wY8t1xYjOByhUWwT8nWKa1b0ZqOxhUVdUUJAL6DMVtBN35pGLXEGpk6rO8OGcG +R6iAh59UDWqOj9MtTHJbwlRIyk+2acaKo9CywhTFqROJK7JuVi/L4RtOBbzan+t t1Kft47FZeOS9uqcqmP7xcqyQFpqRU0M6R5dmeaRcg8jtxuml7X+5yLNam2fyE2k pnWkVo8G1by5+XR0itHOrycoF4a5vd3N1L7/2cwWUUkNSmfvyHeF1kNskNxIgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:34:38 2026 by rpki-client