This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer File: ZboV1Huk9EgnZEctjZcUah67v4Y.cer (raw, json) Hash identifier: HFDVCUbO7jPGTp/MACXMu0J8PT35aK11hl4VJDAAG8I= Subject key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F9C22B704898ABA4AF5A4F75A2AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.235.174.0/24 IP: 188.227.204.0/22 IP: 195.69.225.0/24 IP: 195.88.202.0/23 IP: 2a02:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f9:c2:2b:70:48:98:ab:a4:af:5a:4f:75:a2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:ec:a6:7c:91:81:c3:cc:21:40:80:5e:c4: 7a:f5:ef:d4:fc:30:fb:82:74:14:17:76:c6:7e:d8: 1a:de:2f:fe:fd:0f:85:37:06:7e:87:c7:f0:c7:9b: c1:4f:2b:05:0e:d1:4b:3b:80:4d:75:f3:8e:70:36: c6:69:92:b1:33:54:7f:64:fd:d5:ce:2f:af:5b:11: 6c:1c:c7:9c:28:e5:f0:d5:ca:95:b5:95:21:b4:18: 2c:d2:f9:de:29:0f:56:4c:dc:03:57:42:c2:8a:d3: 30:42:7d:2c:11:e4:7a:dc:fe:ef:d1:60:03:a1:1d: 45:54:c7:11:b3:2f:83:7d:9a:d9:15:ca:51:81:fb: c2:b3:8a:3b:e3:be:26:0e:56:4f:95:58:db:68:ba: 66:76:0e:f4:5e:c3:42:f1:1e:09:cd:e8:b0:3d:c7: e0:57:fc:7d:20:cb:d1:7d:28:b8:4f:05:39:3a:c6: 15:c7:a1:45:82:9f:e8:a9:b8:7f:50:bb:38:40:96: 42:64:62:96:da:d0:45:03:c8:87:5d:f6:8f:ca:bd: 14:36:ba:6e:ed:c6:38:2a:3e:86:2a:4e:db:c0:36: 11:6e:68:77:d4:55:f4:cb:02:21:fa:95:50:14:79: e5:e7:ab:eb:b3:9e:44:2e:0a:56:89:4d:10:67:42: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.174.0/24 188.227.204.0/22 195.69.225.0/24 195.88.202.0/23 IPv6: 2a02:7f80::/29 Signature Algorithm: sha256WithRSAEncryption 12:74:9e:74:cc:71:6b:30:17:bb:0f:c9:ec:ef:e8:47:31:98: e6:8b:22:ca:8d:a8:59:9d:cc:03:2d:33:15:34:6e:c8:4d:82: 58:aa:a2:de:ca:44:a8:90:09:0d:24:6d:43:b5:ca:33:c7:db: 85:bb:ba:5c:8a:f7:86:5d:c1:15:6f:10:95:82:30:ea:23:d1: 1e:86:86:34:46:b8:ce:6d:89:a9:c7:97:78:77:5d:bb:1f:e7: e1:6b:9b:9e:62:ac:d1:df:7d:60:bf:45:81:7f:e7:62:17:21: 26:98:70:74:e4:37:dc:b0:79:f2:0f:74:bf:35:28:a5:68:13: 90:46:82:f0:a7:92:6f:23:7f:72:20:5b:bc:2f:cf:ff:33:3b: 08:f9:dd:03:ae:dd:d6:ef:2d:36:1e:64:7b:68:e9:53:12:1f: 15:59:d6:25:8b:85:73:1c:9c:21:36:d9:81:a0:6f:ba:3b:de: 05:b6:a3:c5:97:b0:ca:56:55:cc:ad:1f:0c:17:02:9c:76:c0: 61:b3:cb:f6:e8:d7:55:5e:ae:18:10:f9:4e:00:61:07:d0:88: 12:b8:75:83:4a:34:ab:95:ab:09:fb:7e:04:21:b9:57:c4:9c: cf:9b:de:a9:d3:b3:c3:b7:fb:6a:60:ca:9d:4a:1b:8c:a4:9b: 23:f6:3a:30 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/FPnCK3BImKukr1pPdaKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWJhMTVkNDdiYTRmNDQ4Mjc2NDQ3MmQ4ZDk3MTQ2YTFlYmJiZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WfspnyRgcPMIUCAXsR69e/U/DD7 gnQUF3bGftga3i/+/Q+FNwZ+h8fwx5vBTysFDtFLO4BNdfOOcDbGaZKxM1R/ZP3V zi+vWxFsHMecKOXw1cqVtZUhtBgs0vneKQ9WTNwDV0LCitMwQn0sEeR63P7v0WAD oR1FVMcRsy+DfZrZFcpRgfvCs4o7474mDlZPlVjbaLpmdg70XsNC8R4JzeiwPcfg V/x9IMvRfSi4TwU5OsYVx6FFgp/oqbh/ULs4QJZCZGKW2tBFA8iHXfaPyr0UNrpu 7cY4Kj6GKk7bwDYRbmh31FX0ywIh+pVQFHnl56vrs55ELgpWiU0QZ0JuywIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzMwOTBk Yy03ZDI4LTQyMjgtODM4MC1mZTNiOTE4YzMwOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMzA5MGRj LTdkMjgtNDIyOC04MzgwLWZlM2I5MThjMzA5Ny8xL1pib1YxSHVrOUVnblpFY3Rq WmNVYWg2N3Y0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW+uuAwQCvOPMAwQAw0XhAwQBw1jKMA0EAgAC MAcDBQMqAn+AMA0GCSqGSIb3DQEBCwUAA4IBAQASdJ50zHFrMBe7D8ns7+hHMZjm iyLKjahZncwDLTMVNG7ITYJYqqLeykSokAkNJG1Dtcozx9uFu7pciveGXcEVbxCV gjDqI9EehoY0RrjObYmpx5d4d127H+fha5ueYqzR331gv0WBf+diFyEmmHB05Dfc sHnyD3S/NSilaBOQRoLwp5JvI39yIFu8L8//MzsI+d0Drt3W7y02HmR7aOlTEh8V WdYli4VzHJwhNtmBoG+6O94FtqPFl7DKVlXMrR8MFwKcdsBhs8v26NdVXq4YEPlO AGEH0IgSuHWDSjSrlasJ+34EIblXxJzPm96p07PDt/tqYMqdShuMpJsj9jow -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:30 2026 by rpki-client