This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer (raw, json) Hash identifier: fiUr32H/NQSp1RL4j4sy/PAQDoAGwi6j0V9efuyKAbQ= Subject key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC5C4831C7F58C93376ABBD1A2A30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.229.196.0/22 IP: 2a09:c5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c5:c4:83:1c:7f:58:c9:33:76:ab:bd:1a:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:05:8b:09:01:a2:94:01:18:42:5c:33:31: 44:d8:97:71:8e:c3:0f:b9:ad:23:97:6b:e9:ae:d5: be:af:5e:cd:fb:cd:b5:71:05:fc:da:2f:a5:97:70: af:b5:32:24:b7:28:ed:45:f3:aa:3a:6f:d9:ab:60: 10:ba:87:a4:8e:8f:e8:74:77:4a:76:d2:72:49:fb: e9:0a:86:ce:e5:a6:95:7f:ab:ad:6a:a5:6b:18:ed: c8:4f:ba:16:30:41:a8:51:7b:2f:ac:a6:12:50:82: 9a:bb:76:72:e8:9a:8a:12:2f:05:34:db:30:5d:fb: e8:40:59:f5:a2:21:f5:95:66:72:29:96:aa:25:ee: 23:e4:cb:76:ae:9a:b8:1a:cb:ea:de:7c:16:9e:38: bc:89:57:84:d7:d0:46:c9:98:db:26:2b:4f:01:63: 7b:ff:01:74:8d:14:e0:72:46:9c:56:13:8f:e7:ce: 72:03:6a:67:e5:a9:0a:b9:a4:7f:cf:da:f3:a0:62: b0:5e:80:a0:3a:33:97:18:f2:47:33:8f:9c:98:68: 00:1e:50:fc:e3:ac:bf:6c:50:98:b7:1b:1a:f7:1c: 52:bb:a4:12:d8:e6:03:42:bf:5c:3a:a1:2b:82:63: 46:c2:69:bd:7a:5d:cb:66:8e:f4:cd:f5:a3:17:4e: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.196.0/22 IPv6: 2a09:c5c0::/29 Signature Algorithm: sha256WithRSAEncryption 92:da:54:9f:3b:26:24:f9:98:05:f3:89:bf:5b:2a:cf:88:2a: 84:73:3d:48:f7:3a:f1:78:9b:24:51:82:16:64:1d:27:6d:29: e8:52:14:f5:ae:f3:46:8f:38:99:66:ec:9b:f3:cf:32:ce:38: 55:c6:cb:cd:ab:96:2a:54:5e:8c:b6:a4:b0:92:ba:77:8b:d7: bd:dc:84:3e:3f:f7:0a:ea:b4:e9:77:12:88:aa:92:38:60:f1: dd:7d:67:8e:f6:07:46:0e:56:24:55:2e:0a:67:d7:0c:73:ac: 7c:0f:ae:43:73:50:35:73:9e:68:6d:24:b4:a5:e2:79:2c:87: f5:b3:09:ac:fb:5f:60:f9:fa:17:50:13:37:dc:6c:b7:c3:0f: 0d:f7:a8:fe:90:c2:c2:92:6a:f6:f9:1a:4d:e2:23:ef:12:aa: 47:31:e1:a3:8e:36:9e:4a:71:e6:d8:3f:06:5b:91:ac:98:73: 58:61:35:e1:b8:06:de:2f:c0:e7:d2:fd:27:45:73:1f:1a:93: 9e:20:1c:13:2b:5a:d4:aa:b7:ad:05:37:dd:07:d8:f3:96:e6: 70:c5:f9:3a:48:e6:2a:ce:1c:f1:5c:43:96:bc:ee:6b:89:37: 9d:d4:56:c3:c0:55:f8:73:c6:6e:5d:4c:dc:5f:30:1e:58:8b: 31:0a:ca:8a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f8XEgxx/WMkzdqu9GiowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTZiNTMyNTVlNmM4ZmI3NmZhYzFjY2I4NDhmZWU0NTYwMGI1NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AkFiwkBopQBGEJcMzFE2JdxjsMP ua0jl2vprtW+r17N+821cQX82i+ll3CvtTIktyjtRfOqOm/Zq2AQuoekjo/odHdK dtJySfvpCobO5aaVf6utaqVrGO3IT7oWMEGoUXsvrKYSUIKau3Zy6JqKEi8FNNsw XfvoQFn1oiH1lWZyKZaqJe4j5Mt2rpq4Gsvq3nwWnji8iVeE19BGyZjbJitPAWN7 /wF0jRTgckacVhOP585yA2pn5akKuaR/z9rzoGKwXoCgOjOXGPJHM4+cmGgAHlD8 46y/bFCYtxsa9xxSu6QS2OYDQr9cOqErgmNGwmm9el3LZo70zfWjF05e2QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGVrUyVebI+3b6wcy4SP7kVgC1X3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzRjOGVh Yy1iZGNiLTRmMGQtYjJkOC1lYTQxODMyYWQxNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNGM4ZWFj LWJkY2ItNGYwZC1iMmQ4LWVhNDE4MzJhZDE3Mi8xL1pXdFRKVjVzajdkdnJCekxo SV91UldBTFZmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueXEMA0EAgACMAcDBQMqCcXAMA0GCSqGSIb3 DQEBCwUAA4IBAQCS2lSfOyYk+ZgF84m/WyrPiCqEcz1I9zrxeJskUYIWZB0nbSno UhT1rvNGjziZZuyb888yzjhVxsvNq5YqVF6MtqSwkrp3i9e93IQ+P/cK6rTpdxKI qpI4YPHdfWeO9gdGDlYkVS4KZ9cMc6x8D65Dc1A1c55obSS0peJ5LIf1swms+19g +foXUBM33Gy3ww8N96j+kMLCkmr2+RpN4iPvEqpHMeGjjjaeSnHm2D8GW5GsmHNY YTXhuAbeL8Dn0v0nRXMfGpOeIBwTK1rUqretBTfdB9jzluZwxfk6SOYqzhzxXEOW vO5riTed1FbDwFX4c8ZuXUzcXzAeWIsxCsqK -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:06 2026 by rpki-client