This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer (raw, json) Hash identifier: DSiJDVtYCJFboEcm7AvLelmxrTRPm+g65gz9IQZX+ME= Subject key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E381A437430FCB0791903F94DADF99C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 139.174.0.0/16 IP: 192.109.175.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1a:43:74:30:fc:b0:79:19:03:f9:4d:ad:f9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c293380bc41f52d9131585a8580038f92f5dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:cd:a7:fc:03:59:f6:1f:fc:36:00:6f:72: 64:19:90:1c:d6:82:bd:b0:77:9f:87:a0:11:18:e6: 42:8e:ce:6d:b1:bd:78:20:36:71:b2:d3:79:e9:99: aa:0b:95:cd:17:08:a7:e9:31:42:5f:bd:52:2b:21: 75:67:ec:b7:44:ab:e5:ee:f7:48:8c:fa:6d:5d:8e: ad:67:56:a2:cb:04:23:09:e4:e2:92:e1:4f:22:3d: 09:20:0a:c9:ee:2a:04:cc:44:8b:db:51:18:9a:d4: 30:6d:df:d3:16:cf:2b:a1:aa:1e:31:0c:40:5f:b1: 0a:03:7e:a5:05:ad:b9:ac:08:be:72:7f:62:14:09: d4:c2:98:65:44:c1:74:bc:b5:72:03:c9:76:72:3f: f6:d1:3a:73:8d:2d:41:fc:31:da:21:45:da:85:ba: c8:2a:4c:6e:12:7b:47:59:85:80:37:6d:fb:57:4e: fe:fc:b6:af:38:31:ab:34:64:2a:de:23:db:3e:76: d1:d1:e0:54:3b:ed:a5:db:0d:5f:1d:6f:6a:63:57: 50:e9:2c:a8:41:55:0d:a3:41:33:45:6f:b5:76:cf: bc:f9:e8:36:ce:93:02:ca:4a:dd:14:c0:18:0d:b0: 93:94:fd:d1:9c:6e:c0:56:4a:9a:9c:5a:e3:7c:23: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.174.0.0/16 192.109.175.0/24 Signature Algorithm: sha256WithRSAEncryption 74:aa:b3:a0:7a:91:ff:aa:10:7d:6a:a7:17:bd:3f:15:db:4c: 88:68:c6:a9:cd:bd:e1:02:88:1f:17:e6:7a:5c:93:40:07:0e: e5:74:58:e7:7a:ff:f8:b7:fe:49:e4:bc:f5:0b:f4:7c:99:de: 2a:2b:88:1a:3f:bd:7e:c4:a8:80:9a:b3:47:0e:9a:22:12:c3: 57:9a:16:75:21:eb:8b:06:c0:2b:d2:69:b9:c6:15:6e:b6:85: ef:5a:9b:e8:c7:86:f6:f6:2e:8c:b9:56:79:24:a0:ab:5f:f0: ea:f7:35:22:a9:17:0d:5b:73:0d:e5:3b:46:39:bc:74:cc:30: 6d:a2:62:d2:29:14:26:86:4e:9f:fc:35:d6:a2:0d:d0:94:8c: b8:fd:4b:44:71:74:eb:36:8e:d9:f2:04:e9:17:3e:82:fa:56: 10:91:15:b3:d6:77:55:c9:b3:70:04:cf:c8:25:9d:ab:08:0d: 6f:08:1e:57:82:a5:81:1c:28:22:e4:f6:01:d3:56:af:a5:c1: bd:85:7a:4c:f7:0d:5a:d0:e0:e2:5e:ce:c7:b6:a7:7f:ba:18: bc:7a:4e:a7:35:46:3c:17:cb:e5:f1:0d:ea:6f:65:90:1e:f1: 00:c3:79:38:96:48:00:13:f2:03:d5:6b:78:ed:74:d8:3e:2a: 9c:9b:52:48 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt+OBpDdDD8sHkZA/lNrfmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWMyOTMzODBiYzQxZjUyZDkxMzE1ODVhODU4MDAzOGY5MmY1ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1/Np/wDWfYf/DYAb3JkGZAc1oK9 sHefh6ARGOZCjs5tsb14IDZxstN56ZmqC5XNFwin6TFCX71SKyF1Z+y3RKvl7vdI jPptXY6tZ1aiywQjCeTikuFPIj0JIArJ7ioEzESL21EYmtQwbd/TFs8roaoeMQxA X7EKA36lBa25rAi+cn9iFAnUwphlRMF0vLVyA8l2cj/20TpzjS1B/DHaIUXahbrI KkxuEntHWYWAN237V07+/LavODGrNGQq3iPbPnbR0eBUO+2l2w1fHW9qY1dQ6Syo QVUNo0EzRW+1ds+8+eg2zpMCykrdFMAYDbCTlP3RnG7AVkqanFrjfCPKjwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFGXCkzgLxB9S2RMVhahYADj5L13MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2IxNzBm Yi1hMWJlLTRiZDktYWRiNi1mZTZkYzE3NTgzZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYjE3MGZi LWExYmUtNGJkOS1hZGI2LWZlNmRjMTc1ODNlMy8xL1pjS1RPQXZFSDFMWkV4V0Zx RmdBT1Brdlhjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAi64DBADAba8wDQYJKoZIhvcNAQELBQADggEB AHSqs6B6kf+qEH1qpxe9PxXbTIhoxqnNveECiB8X5npck0AHDuV0WOd6//i3/knk vPUL9HyZ3ioriBo/vX7EqICas0cOmiISw1eaFnUh64sGwCvSabnGFW62he9am+jH hvb2Loy5VnkkoKtf8Or3NSKpFw1bcw3lO0Y5vHTMMG2iYtIpFCaGTp/8NdaiDdCU jLj9S0RxdOs2jtnyBOkXPoL6VhCRFbPWd1XJs3AEz8glnasIDW8IHleCpYEcKCLk 9gHTVq+lwb2Fekz3DVrQ4OJezse2p3+6GLx6Tqc1RjwXy+XxDepvZZAe8QDDeTiW SAAT8gPVa3jtdNg+KpybUkg= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:56 2026 by rpki-client