This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer (raw, json) Hash identifier: D9caxbo4ww1smM4ZtZvtalnrwwGBl6WR64iWFw6b56Q= Subject key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B95E74DA22FC446C42FB6012A4E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202955 IP: 81.29.0.0/20 IP: 185.149.84.0/22 IP: 217.78.240.0/20 IP: 2a07:6640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b9:5e:74:da:22:fc:44:6c:42:fb:60:12:a4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d2b2f54ca1718cfd38293111415666cc34e262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:55:53:bf:6d:a8:68:ee:c3:25:b0:3f:bf: 09:e6:53:55:e7:87:22:93:57:a4:42:de:ca:97:31: b8:e6:b3:0f:4a:10:1c:0c:3c:4f:5e:f0:ac:08:51: 5a:66:b3:6a:dc:11:08:2e:79:48:e4:6d:17:3e:b6: 34:fa:9c:52:15:e8:72:ad:12:8b:07:f3:19:a6:7a: 52:9f:27:0c:37:d3:25:d8:07:93:4c:15:37:84:dd: 6f:fe:f5:a4:7b:42:83:f5:f8:73:e9:6e:49:07:a2: 7d:5e:41:a1:0f:f9:69:da:c6:16:4f:0a:6d:d7:51: 1e:8d:b9:fd:f0:15:83:91:fa:a6:cf:2a:cc:2b:07: 30:20:3d:27:4d:96:78:44:6e:79:b8:ba:73:f4:9c: c4:07:99:3c:8a:42:3d:b0:1d:00:2d:a9:9e:64:75: 00:2c:3d:4a:0e:e9:ea:0c:89:0a:f5:60:88:02:10: 49:a5:2f:1c:80:c2:83:8e:d2:a2:ba:10:b8:b4:a8: 91:de:3c:d3:7e:0f:9b:9a:35:f9:39:ac:ca:70:e8: e6:41:53:79:d0:bd:69:96:07:29:9f:ad:33:99:61: b2:4e:42:9f:79:0f:6a:6e:7c:b6:ce:9c:dc:f7:61: ba:b1:45:a9:5b:86:62:64:c1:75:5e:99:4b:d4:e6: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.0.0/20 185.149.84.0/22 217.78.240.0/20 IPv6: 2a07:6640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202955 Signature Algorithm: sha256WithRSAEncryption 49:89:e4:88:45:fa:c7:df:59:da:8b:1d:38:d4:0f:b6:b1:7b: 2e:89:fe:5d:46:bc:be:2e:97:cb:a6:62:68:dc:10:56:32:1f: c8:6b:40:19:ef:e8:f0:07:53:5f:1c:b7:3d:7a:14:b1:68:43: 34:a6:3a:36:cc:2b:49:c9:c9:7c:3a:3c:88:64:2a:10:86:fe: e7:76:c6:d6:29:6e:17:7c:da:17:50:c9:0b:cf:6b:ee:e9:85: 33:97:60:0d:6c:6f:77:e6:70:1d:8a:5a:7d:9e:a0:34:da:0d: 61:78:0d:58:ee:8e:5f:bd:8d:18:ab:28:7a:bb:3a:07:25:cf: 49:55:8a:bb:f4:53:c1:65:d2:50:f3:ea:ce:6f:24:e4:d6:05: 80:65:91:c6:8a:cf:da:d9:05:31:b4:ad:01:10:98:9a:aa:fe: 25:61:17:76:21:9f:25:8a:bc:55:4c:e5:47:a9:da:b2:62:72: 2f:11:e6:73:ec:b7:cc:bc:26:f3:c2:f4:55:d4:cc:32:d7:80: 19:c0:e9:a5:72:ff:01:9a:57:93:06:53:32:3b:c1:29:43:56: 17:e1:06:bf:f5:a3:19:01:4a:db:7b:0c:61:aa:64:24:29:0a: 82:e1:35:96:91:38:21:7a:9e:7f:d9:56:48:81:d0:8f:e6:17: e8:ed:c0:87 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4NLledNoi/ERsQvtgEqTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQyYjJmNTRjYTE3MThjZmQzODI5MzExMTQxNTY2NmNjMzRlMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A1VU79tqGjuwyWwP78J5lNV54ci k1ekQt7KlzG45rMPShAcDDxPXvCsCFFaZrNq3BEILnlI5G0XPrY0+pxSFehyrRKL B/MZpnpSnycMN9Ml2AeTTBU3hN1v/vWke0KD9fhz6W5JB6J9XkGhD/lp2sYWTwpt 11Eejbn98BWDkfqmzyrMKwcwID0nTZZ4RG55uLpz9JzEB5k8ikI9sB0ALameZHUA LD1KDunqDIkK9WCIAhBJpS8cgMKDjtKiuhC4tKiR3jzTfg+bmjX5OazKcOjmQVN5 0L1plgcpn60zmWGyTkKfeQ9qbny2zpzc92G6sUWpW4ZiZMF1XplL1OYBAwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGXSsvVMoXGM/TgpMRFBVmbMNOJiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2UzMTc2 Ni00ZDI3LTRjNDgtOWU2Yi1lZjY1ZGNiYzdjMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvZTMxNzY2 LTRkMjctNGM0OC05ZTZiLWVmNjVkY2JjN2MwOS8xL1pkS3k5VXloY1l6OU9Da3hF VUZXWnN3MDRtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUR0AAwQCuZVUAwQE2U7wMA0EAgACMAcDBQMq B2ZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYyzANBgkqhkiG9w0BAQsFAAOC AQEASYnkiEX6x99Z2osdONQPtrF7Lon+XUa8vi6Xy6ZiaNwQVjIfyGtAGe/o8AdT Xxy3PXoUsWhDNKY6NswrScnJfDo8iGQqEIb+53bG1iluF3zaF1DJC89r7umFM5dg DWxvd+ZwHYpafZ6gNNoNYXgNWO6OX72NGKsoers6ByXPSVWKu/RTwWXSUPPqzm8k 5NYFgGWRxorP2tkFMbStARCYmqr+JWEXdiGfJYq8VUzlR6nasmJyLxHmc+y3zLwm 88L0VdTMMteAGcDppXL/AZpXkwZTMjvBKUNWF+EGv/WjGQFK23sMYapkJCkKguE1 lpE4IXqef9lWSIHQj+YX6O3Ahw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:23 2026 by rpki-client