This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer File: ZctPbNhIn93Rc5cKDvRNThVHpAU.cer (raw, json) Hash identifier: mcwyBJii6rwiFe5fEraLfb7UwrJT4eVhM6Xh4wA8X5M= Subject key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C135D87D24ED0F8C0A300ED22C621E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28730 IP: 93.95.200.0/21 IP: 185.176.44.0/22 IP: 2a02:25d8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5d:87:d2:4e:d0:f8:c0:a3:00:ed:22:c6:21:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a1:d3:34:07:f1:7f:4b:f7:59:e5:87:09:ef: 2e:86:05:8a:a5:0e:09:f8:59:16:38:ca:58:e9:3f: 9a:88:e1:a1:f4:2c:b9:81:8c:b6:75:79:45:32:75: dc:7b:64:10:0d:e0:7d:94:b2:55:e5:30:ab:ce:1b: f8:ed:a4:ae:87:ca:a4:bf:f4:58:95:99:77:1e:93: ee:49:00:64:62:57:f2:e7:cc:fc:61:77:8b:ed:00: 55:be:f7:cb:17:d5:53:01:92:f0:63:ee:95:8f:36: 9e:d7:5a:16:f7:c2:35:b3:ed:51:31:8b:0a:54:3b: a7:c2:1d:a6:20:36:24:31:d4:9b:5a:f4:e8:63:11: 5e:90:3b:ee:ad:79:f6:47:ef:99:6a:38:b0:e2:c2: e9:14:1b:83:fd:55:59:c2:8d:bb:4c:e0:eb:ee:86: 10:02:bd:d0:9f:a6:a7:8b:1a:a5:69:67:0b:9a:50: d5:d8:cb:8f:82:82:a6:d9:58:5d:50:aa:99:32:9a: c0:93:c7:fd:2e:89:48:99:e6:4d:73:21:2c:c3:6f: c3:9a:fb:21:66:d8:f8:f3:e6:63:14:d6:56:2f:83: ef:c2:c6:1e:41:29:5b:49:4e:08:38:9f:67:c9:9a: f0:30:82:d2:e5:05:e7:e6:70:f0:5c:0d:1c:72:97: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.200.0/21 185.176.44.0/22 IPv6: 2a02:25d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28730 Signature Algorithm: sha256WithRSAEncryption 71:15:f0:01:de:92:e0:63:69:9c:33:94:9d:44:0c:85:7d:38: ca:52:46:5f:1b:34:34:ec:6a:07:08:7c:95:e1:63:fd:e9:7d: 83:e1:72:a6:b0:59:53:d1:5c:26:af:15:b2:89:03:26:be:eb: 9a:f7:86:f9:93:15:17:1d:30:d3:4b:00:2a:1c:ee:1d:b1:37: c6:7d:aa:45:6d:aa:66:b5:fe:d5:6d:a3:f3:47:0f:85:6d:ce: 2a:ff:07:a5:85:c7:99:89:9d:56:48:05:18:af:ff:30:ad:86: 51:18:cb:d7:13:41:00:07:a9:29:5b:b0:f9:01:c0:93:08:2a: 2c:cd:b6:32:0c:44:98:a4:79:54:55:7f:47:4e:57:fc:fc:06: 51:18:cf:a3:d1:7d:4c:da:f0:b4:50:3a:8d:e3:d9:cb:21:ec: 2f:09:72:64:e3:3d:64:29:d3:78:ad:bb:11:a7:41:65:4e:2c: bc:39:58:74:27:b2:45:5c:a4:23:15:f2:9d:94:3e:77:cd:b8: 65:f3:d1:9c:1b:2a:bf:36:45:a0:32:bc:5f:a3:43:df:02:55: c1:56:ad:bf:4c:81:80:c7:14:db:d1:58:41:ca:e2:0b:2f:14: 31:17:c6:cd:15:57:5c:28:78:d4:8f:e2:9e:3f:27:42:35:18: 0b:25:e5:56 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt8E12H0k7Q+MCjAO0ixiHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNiNGY2Y2Q4NDg5ZmRkZDE3Mzk3MGEwZWY0NGQ0ZTE1NDdhNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKHTNAfxf0v3WeWHCe8uhgWKpQ4J +FkWOMpY6T+aiOGh9Cy5gYy2dXlFMnXce2QQDeB9lLJV5TCrzhv47aSuh8qkv/RY lZl3HpPuSQBkYlfy58z8YXeL7QBVvvfLF9VTAZLwY+6Vjzae11oW98I1s+1RMYsK VDunwh2mIDYkMdSbWvToYxFekDvurXn2R++Zajiw4sLpFBuD/VVZwo27TODr7oYQ Ar3Qn6anixqlaWcLmlDV2MuPgoKm2VhdUKqZMprAk8f9LolImeZNcyEsw2/Dmvsh Ztj48+ZjFNZWL4PvwsYeQSlbSU4IOJ9nyZrwMILS5QXn5nDwXA0ccpdj3QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGXLT2zYSJ/d0XOXCg70TU4VR6QFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzczNmE0 YS0zOWUwLTQxMTktYjRjYi0wODJkOTI0YzJmMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNzM2YTRh LTM5ZTAtNDExOS1iNGNiLTA4MmQ5MjRjMmYzMy8xL1pjdFBiTmhJbjkzUmM1Y0tE dlJOVGhWSHBBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXV/IAwQCubAsMA0EAgACMAcDBQAqAiXYMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnA6MA0GCSqGSIb3DQEBCwUAA4IBAQBxFfAB 3pLgY2mcM5SdRAyFfTjKUkZfGzQ07GoHCHyV4WP96X2D4XKmsFlT0VwmrxWyiQMm vuua94b5kxUXHTDTSwAqHO4dsTfGfapFbapmtf7VbaPzRw+Fbc4q/welhceZiZ1W SAUYr/8wrYZRGMvXE0EAB6kpW7D5AcCTCCoszbYyDESYpHlUVX9HTlf8/AZRGM+j 0X1M2vC0UDqN49nLIewvCXJk4z1kKdN4rbsRp0FlTiy8OVh0J7JFXKQjFfKdlD53 zbhl89GcGyq/NkWgMrxfo0PfAlXBVq2/TIGAxxTb0VhByuILLxQxF8bNFVdcKHjU j+KePydCNRgLJeVW -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:57 2026 by rpki-client