This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer File: ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer (raw, json) Hash identifier: 2kLIEKpOptd7bH9UdnxZRgjl5iaY0bNKJbQVzqIx63w= Subject key identifier: 65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB183895D0E294EAC3C4882C01ADB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43670 IP: 78.31.16.0/21 IP: 91.246.16.0/21 IP: 193.34.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:38:95:d0:e2:94:ea:c3:c4:88:2c:01:ad:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=654d692160dd4627038799297d47751480d07f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:4b:eb:06:56:8d:4f:64:70:80:40:e0:1d: 85:07:f8:73:04:5a:54:34:da:5a:b8:94:b8:f3:c1: 50:0d:5c:05:a4:22:1d:f4:86:67:1b:96:25:b8:7b: 19:55:4a:a0:65:f5:26:41:58:66:d6:38:76:79:94: cf:83:78:a9:ab:41:c2:dc:99:c9:7e:ac:ad:c2:30: f4:65:73:7e:43:97:b7:c6:87:a2:b5:64:1e:49:13: 08:27:48:3b:d4:70:b8:af:a0:83:61:3c:69:e2:3b: 0f:57:62:0b:ff:7d:95:fd:cf:98:b9:9b:22:6e:31: 83:c3:a3:ea:ab:df:fc:7f:ff:44:cd:69:11:d4:62: ee:68:6d:51:49:ca:8c:29:e0:05:0c:2e:90:83:cb: 3e:04:99:6c:1e:5d:68:ae:dd:07:5a:0b:dd:f4:f3: 0e:ae:68:1f:a5:c8:0e:6f:a3:45:68:4e:41:33:bc: 02:e5:dc:16:7e:22:59:e8:6d:d1:ca:10:6a:8c:60: 68:b2:54:0a:73:8f:03:66:a3:73:e6:83:40:f6:da: e8:51:48:0b:c6:c8:dd:a4:43:4d:d2:04:61:a7:ad: b8:fd:15:a3:de:67:36:5c:c2:a3:2c:53:69:30:0d: 11:a3:bc:de:58:f0:8a:e5:96:47:82:41:b0:82:7c: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.16.0/21 91.246.16.0/21 193.34.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43670 Signature Algorithm: sha256WithRSAEncryption 9d:5e:71:55:6e:bb:dc:94:e1:2a:8e:51:a1:95:3a:c8:5c:74: 66:e6:5e:c8:09:20:4e:9a:fc:76:08:f4:22:28:79:6e:59:57: 20:2e:06:5a:00:12:b1:70:28:db:c9:76:b0:42:2e:e1:a8:27: 80:d9:85:7a:07:93:66:26:e3:0a:60:ac:5d:ea:d8:4b:0d:27: 8b:45:1a:7d:41:7e:54:01:5b:3f:00:76:be:37:fe:de:6c:8e: e2:18:22:68:27:b6:d9:40:71:52:44:bd:d9:e3:55:5e:03:3f: 62:4d:30:6e:2f:02:bc:10:2f:4a:94:7c:3b:fe:2d:fd:c9:21: e9:8f:e7:4e:29:dd:c8:81:70:2f:66:49:5b:cf:9a:22:8f:7c: 5f:46:b8:38:c1:b9:38:86:a8:3c:f8:a2:22:62:57:67:11:3c: 49:67:70:05:54:54:67:6b:bb:9b:02:58:d8:59:b7:20:8e:5f: 00:b8:f1:49:9c:e5:3f:f4:8c:bf:c5:4b:4f:fc:b7:d6:1b:ba: a3:c7:cf:92:14:8d:ba:64:c4:b9:50:56:83:8c:21:e4:c9:4e: 9a:29:db:98:7c:b4:ca:c5:4e:73:84:2f:4a:5c:84:44:13:45: d3:62:90:cb:07:64:d5:1c:27:91:9b:a5:27:ec:99:ea:b5:10: 5e:df:60:f6 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt26xg4ldDilOrDxIgsAa22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTRkNjkyMTYwZGQ0NjI3MDM4Nzk5Mjk3ZDQ3NzUxNDgwZDA3ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv5L6wZWjU9kcIBA4B2FB/hzBFpU NNpauJS488FQDVwFpCId9IZnG5YluHsZVUqgZfUmQVhm1jh2eZTPg3ipq0HC3JnJ fqytwjD0ZXN+Q5e3xoeitWQeSRMIJ0g71HC4r6CDYTxp4jsPV2IL/32V/c+YuZsi bjGDw6Pqq9/8f/9EzWkR1GLuaG1RScqMKeAFDC6Qg8s+BJlsHl1ort0HWgvd9PMO rmgfpcgOb6NFaE5BM7wC5dwWfiJZ6G3RyhBqjGBoslQKc48DZqNz5oNA9troUUgL xsjdpENN0gRhp624/RWj3mc2XMKjLFNpMA0Ro7zeWPCK5ZZHgkGwgnyl7QIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFGVNaSFg3UYnA4eZKX1HdRSA0H8WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzM5OTA1 OC04MWM3LTQ2ZDgtYThmNC02MWYxYzFiY2JlY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMzk5MDU4 LTgxYzctNDZkOC1hOGY0LTYxZjFjMWJjYmVjZC8xL1pVMXBJV0RkUmljRGg1a3Bm VWQxRklEUWZ4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDTh8QAwQDW/YQAwQCwSLQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCqljANBgkqhkiG9w0BAQsFAAOCAQEAnV5xVW673JThKo5R oZU6yFx0ZuZeyAkgTpr8dgj0Iih5bllXIC4GWgASsXAo28l2sEIu4agngNmFegeT ZibjCmCsXerYSw0ni0UafUF+VAFbPwB2vjf+3myO4hgiaCe22UBxUkS92eNVXgM/ Yk0wbi8CvBAvSpR8O/4t/ckh6Y/nTindyIFwL2ZJW8+aIo98X0a4OMG5OIaoPPii ImJXZxE8SWdwBVRUZ2u7mwJY2Fm3II5fALjxSZzlP/SMv8VLT/y31hu6o8fPkhSN umTEuVBWg4wh5MlOminbmHy0ysVOc4QvSlyERBNF02KQywdk1RwnkZulJ+yZ6rUQ Xt9g9g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:00 2026 by rpki-client