This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer (raw, json) Hash identifier: nJ0dmurRb+ziuzwkwnyyF5dCy5isB0iaS9vF3VsEzJE= Subject key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C333C3AAEABF7791F8338BDBB631E0AD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 13:55:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201002 AS: 212027 AS: 215413 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:3c:3a:ae:ab:f7:79:1f:83:38:bd:bb:63:1e:0a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 13:55:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:be:9d:0b:0b:d6:45:91:09:25:6a:2f:4a: 4c:47:26:dd:22:b8:30:8e:75:de:9d:67:d2:0e:e1: 39:be:c7:d7:a4:b0:7c:77:04:29:3b:cf:1a:63:26: 70:ca:af:21:0c:a5:25:1f:fc:1d:fb:07:76:9f:9a: 6c:b6:9c:cd:1b:9e:1f:e2:8a:ab:e8:6d:b0:aa:47: 2a:b1:40:42:39:ee:10:3e:64:a8:5f:cd:ad:1a:ba: 27:ed:53:de:30:a9:18:67:6b:0e:db:0e:a2:30:96: 82:28:cf:0d:83:76:db:30:02:fe:79:5d:7e:d1:60: 2b:56:e1:72:0a:ba:ac:c7:91:01:69:d5:a1:08:a0: b8:41:c1:9d:39:8a:97:56:dd:60:c3:85:d5:92:f2: 00:5f:8b:ba:f5:e5:92:c8:5d:bf:1b:ee:9f:2d:a7: 28:33:1c:5e:ab:2a:be:2b:e5:3c:24:08:9f:62:23: db:f9:b8:97:a6:ef:96:fd:1a:4c:35:74:ab:cf:7c: 18:a6:80:dd:e3:19:d7:4e:8a:34:e1:39:88:70:69: e6:88:87:63:88:1b:ec:32:e6:d0:9a:f2:90:21:27: b5:e4:37:2a:be:c9:a2:11:a1:05:15:ba:9c:be:be: 23:3a:ea:b1:c1:06:7f:f4:d7:c5:e8:16:10:08:cc: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201002 212027 215413 Signature Algorithm: sha256WithRSAEncryption a2:28:f6:d2:2c:3d:af:ab:64:c3:4a:7a:ab:6a:a3:4f:4a:da: 63:5f:95:b4:64:3b:ae:d1:0b:0f:54:99:7c:00:45:23:92:10: d3:d4:0e:38:3f:e6:13:82:5e:26:27:d1:76:4f:86:fa:c4:b8: a8:58:2f:24:c9:11:4c:53:26:a1:4f:21:57:08:58:26:ae:0b: 48:bb:78:ee:2e:d8:8f:cf:a6:c3:63:6c:89:95:bf:d3:c0:17: 87:23:be:95:b6:5d:0f:c9:88:af:14:c9:52:e1:ea:ad:9e:89: 89:cb:3d:1b:f2:19:d1:bc:e1:75:51:a4:6c:67:c3:35:52:be: fd:82:6e:59:a9:62:0f:dc:42:b6:41:be:bb:fd:16:c7:51:a6: e2:81:66:b7:22:d0:0b:96:a0:56:d3:09:96:c7:a7:c2:69:d5: 9f:b3:68:b2:d1:32:d7:ff:00:35:ae:be:2a:6b:6a:b1:e1:81: 96:7b:3a:21:02:3a:87:31:d8:7b:6c:e9:7e:6f:a4:db:d8:bd: b8:49:95:37:a3:29:f2:ed:07:a5:df:11:d0:49:85:16:58:b2: 8b:93:7c:41:41:23:7b:25:48:a7:ca:0b:57:b0:af:89:ea:a8: 74:dc:97:12:15:1c:99:07:45:5d:f6:b7:5b:5f:03:8b:8d:de: 7f:cc:11:d3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZwzPDquq/d5H4M4vbtjHgrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MTM1NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQwOTMyMTcyYWEyZDFjNzdjNGJiOTgzNzBhYWIzZGU2YWMzNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudi+nQsL1kWRCSVqL0pMRybdIrgw jnXenWfSDuE5vsfXpLB8dwQpO88aYyZwyq8hDKUlH/wd+wd2n5pstpzNG54f4oqr 6G2wqkcqsUBCOe4QPmSoX82tGron7VPeMKkYZ2sO2w6iMJaCKM8Ng3bbMAL+eV1+ 0WArVuFyCrqsx5EBadWhCKC4QcGdOYqXVt1gw4XVkvIAX4u69eWSyF2/G+6fLaco Mxxeqyq+K+U8JAifYiPb+biXpu+W/RpMNXSrz3wYpoDd4xnXToo04TmIcGnmiIdj iBvsMubQmvKQISe15DcqvsmiEaEFFbqcvr4jOuqxwQZ/9NfF6BYQCMx2UQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFGXQkyFyqi0cd8S7mDcKqz3mrDRXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2ZhNzcx MS0zN2ZmLTRhZWMtOTg1My0xZWRkZTZjOWQ5NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvZmE3NzEx LTM3ZmYtNGFlYy05ODUzLTFlZGRlNmM5ZDk2YS8xL1pkQ1RJWEtxTFJ4M3hMdVlO d3FyUGVhc05GYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwMRKgIDAzw7AgMDSXUwDQYJKoZIhvcNAQELBQADggEB AKIo9tIsPa+rZMNKeqtqo09K2mNflbRkO67RCw9UmXwARSOSENPUDjg/5hOCXiYn 0XZPhvrEuKhYLyTJEUxTJqFPIVcIWCauC0i7eO4u2I/PpsNjbImVv9PAF4cjvpW2 XQ/JiK8UyVLh6q2eiYnLPRvyGdG84XVRpGxnwzVSvv2CblmpYg/cQrZBvrv9FsdR puKBZrci0AuWoFbTCZbHp8Jp1Z+zaLLRMtf/ADWuviprarHhgZZ7OiECOocx2Hts 6X5vpNvYvbhJlTejKfLtB6XfEdBJhRZYsouTfEFBI3slSKfKC1ewr4nqqHTclxIV HJkHRV32t1tfA4uN3n/MEdM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:09 2026 by rpki-client