This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer (raw, json) Hash identifier: BQS60wZJ81AnTFFNIAa+YlQ1zSYxB6Pp7ngz7RsxNM0= Subject key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FE7CDE3295B927444BD2D14FF93C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205147 AS: 205344 AS: 209525 IP: 91.239.54.0/24 IP: 185.8.96.0/22 IP: 185.219.12.0/22 IP: 194.147.248.0/24 IP: 194.148.0.0/22 IP: 2a0c:bc00::/29 IP: 2a10:1940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e7:cd:e3:29:5b:92:74:44:bd:2d:14:ff:93:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:04:93:81:8f:d6:90:9a:6c:ee:f9:f4:30: f6:a9:c6:03:69:a1:72:ed:5b:ea:97:0d:95:31:72: d2:2f:ec:c4:a9:c0:28:5e:1d:28:79:7c:9c:87:35: d4:ed:2c:27:d6:9c:f2:73:57:cb:53:26:23:5a:9e: 28:e5:b5:20:87:77:af:aa:38:d3:9a:a7:f0:bb:2d: 77:02:da:ae:2e:ea:c1:d4:f8:e5:26:9f:b6:a0:5c: 43:9d:94:1a:b2:58:35:03:f9:2d:f4:e7:fe:5f:4b: d9:2a:c9:6c:6c:54:9b:0b:40:5e:6f:a4:4a:0f:a3: 5c:c2:f8:40:82:0f:13:98:97:63:50:15:af:3a:1a: 9a:c2:42:6e:e6:9f:8f:72:65:8c:ab:d0:4e:e0:01: c6:06:40:7f:b5:9c:33:09:4f:39:6b:77:26:da:18: 47:41:0b:f1:52:b4:e9:0c:32:27:ac:f6:30:d1:f5: b8:32:b0:b9:b3:e7:3d:04:fa:50:30:8f:be:aa:9e: 0b:06:0e:96:7e:34:01:06:f7:a5:c9:84:cb:3c:fb: e1:ad:5f:78:80:63:d0:46:80:b2:55:5f:88:ca:97: 61:44:46:ed:c8:04:be:57:01:42:ab:66:48:b9:f5: 96:fb:02:3c:55:72:77:68:c2:d2:59:f8:f9:82:30: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.54.0/24 185.8.96.0/22 185.219.12.0/22 194.147.248.0/24 194.148.0.0/22 IPv6: 2a0c:bc00::/29 2a10:1940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205147 205344 209525 Signature Algorithm: sha256WithRSAEncryption 9a:aa:3a:88:0d:c6:b1:24:7f:74:1d:a7:9c:71:4a:a3:7d:5d: 87:55:34:19:2e:f1:d1:27:0b:27:d1:f1:42:be:f1:f0:9b:3f: bb:e3:48:93:bd:10:c6:a5:2a:7b:90:81:3d:12:70:cd:d9:4a: 74:93:ed:b3:a7:fa:60:28:11:1f:58:66:50:cd:43:cb:f9:8d: 3a:76:f6:56:69:a1:31:92:d5:16:b2:fa:06:b8:10:7e:7d:f4: 35:eb:b3:6f:f4:99:5f:14:d7:e4:75:85:cc:6b:f5:e9:d5:9e: c0:0a:60:d7:5b:85:76:6e:63:bf:3e:5e:c5:10:f1:0e:65:d2: b7:4f:1d:9b:73:f3:8e:e5:d8:78:6c:5f:e5:9a:72:7e:0b:7c: 5b:c1:f5:ca:4f:3a:b0:20:52:c8:52:77:3f:5c:56:44:d0:2a: 41:65:67:6a:d9:06:29:80:09:c3:61:e6:6b:8c:40:4a:77:4b: b1:ab:01:cb:13:6e:b3:78:fe:28:2b:d0:c6:e9:05:29:e4:6b: f3:af:0c:c7:fc:39:5f:04:e6:30:1d:f9:d4:d3:6c:b2:21:43: 5b:aa:ed:96:06:c2:11:f2:ce:57:2f:6b:3b:5d:fe:a8:54:ba: f0:4e:fc:7c:59:cf:c2:42:6f:c9:73:02:4b:56:48:f8:3e:77: af:bf:8d:0e -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt8f+fN4ylbknREvS0U/5PHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NThjMGM0OTlhOGU2OWQ5Nzk1ZjRiZDBiNWJmMTY4MmIxZjAwZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMEk4GP1pCabO759DD2qcYDaaFy 7Vvqlw2VMXLSL+zEqcAoXh0oeXychzXU7Swn1pzyc1fLUyYjWp4o5bUgh3evqjjT mqfwuy13AtquLurB1PjlJp+2oFxDnZQaslg1A/kt9Of+X0vZKslsbFSbC0Beb6RK D6NcwvhAgg8TmJdjUBWvOhqawkJu5p+PcmWMq9BO4AHGBkB/tZwzCU85a3cm2hhH QQvxUrTpDDInrPYw0fW4MrC5s+c9BPpQMI++qp4LBg6WfjQBBvelyYTLPPvhrV94 gGPQRoCyVV+IypdhREbtyAS+VwFCq2ZIufWW+wI8VXJ3aMLSWfj5gjB4QQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFGWMDEmajmnZeV9L0LW/FoKx8A+aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2U2Njkx My04ZjVmLTQ3ZWYtYTczMC0zMmMxYjJjZWU1OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvZTY2OTEz LThmNWYtNDdlZi1hNzMwLTMyYzFiMmNlZTU5My8xL1pZd01TWnFPYWRsNVgwdlF0 YjhXZ3JId0Q1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQAW+82AwQCuQhgAwQCudsMAwQAwpP4AwQCwpQA MBQEAgACMA4DBQMqDLwAAwUAKhAZQDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMD IVsCAwMiIAIDAzJ1MA0GCSqGSIb3DQEBCwUAA4IBAQCaqjqIDcaxJH90HaeccUqj fV2HVTQZLvHRJwsn0fFCvvHwmz+740iTvRDGpSp7kIE9EnDN2Up0k+2zp/pgKBEf WGZQzUPL+Y06dvZWaaExktUWsvoGuBB+ffQ167Nv9JlfFNfkdYXMa/Xp1Z7ACmDX W4V2bmO/Pl7FEPEOZdK3Tx2bc/OO5dh4bF/lmnJ+C3xbwfXKTzqwIFLIUnc/XFZE 0CpBZWdq2QYpgAnDYeZrjEBKd0uxqwHLE26zeP4oK9DG6QUp5GvzrwzH/DlfBOYw HfnU02yyIUNbqu2WBsIR8s5XL2s7Xf6oVLrwTvx8Wc/CQm/JcwJLVkj4Pnevv40O -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:21 2026 by rpki-client