This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer File: ZdnpJm7sq8D9SmB36wuo-p873ic.cer (raw, json) Hash identifier: U7jDn9NT7oXnBhlj6JnWFGiJFrSZbpNpe+lQEtn0CTk= Subject key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70CB46EF6C96CCA26CA89611683E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.214.48.0/22 IP: 2a09:d680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:b4:6e:f6:c9:6c:ca:26:ca:89:61:16:83:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:bf:36:2e:f5:fd:5b:16:48:12:ac:2c:7c: 3d:51:9f:b8:5d:70:e4:de:f0:07:9f:2a:36:c4:d3: 81:fd:8f:6e:ff:0a:34:89:ba:59:0b:1e:35:d4:fb: a3:50:db:46:88:7a:3c:19:61:e4:94:5f:a9:35:cb: 67:b7:f1:30:f6:6c:a5:4b:cd:f8:f2:91:0d:89:7c: c8:c8:31:06:21:bb:f1:b8:32:f1:3a:0b:a7:ac:6a: 99:3e:f3:37:50:21:f1:f6:43:9f:1e:89:84:06:7f: ff:42:21:52:fc:95:30:99:ec:21:4f:a5:7f:68:c6: 2e:53:ab:3f:8d:11:00:e9:74:22:f8:93:53:0f:4d: e4:fc:75:d2:bc:2f:b8:09:eb:61:8a:6e:d6:5e:42: 0e:05:39:4b:32:56:e1:4d:9f:9a:9b:b9:eb:9b:10: 34:3d:6d:46:73:5d:9b:b0:49:80:10:ef:df:8b:10: 20:55:ca:c6:dc:63:b9:e9:4b:fe:6d:80:f7:19:df: a0:95:1c:41:6b:df:af:e6:e1:20:6b:e6:59:5f:1d: a3:fe:2b:93:16:37:bd:0d:54:7a:fd:f9:44:d2:e9: 4c:ad:76:4d:b2:ea:7e:cc:7d:cd:4d:25:a7:a4:a9: 36:31:95:65:54:57:62:a8:b2:16:90:0c:89:bb:60: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.48.0/22 IPv6: 2a09:d680::/29 Signature Algorithm: sha256WithRSAEncryption 61:e2:d6:63:6a:6e:9a:b0:8a:cb:9b:a9:58:e2:86:75:bc:55: a5:e4:16:04:76:44:4f:9b:c7:5e:bc:8c:55:6e:ce:f4:e8:d7: fb:81:69:ff:a4:a9:fe:05:8b:87:e0:51:42:1a:04:3e:30:0a: b7:71:b4:5d:3f:fe:fd:70:40:3d:76:64:20:d7:d6:01:4d:e0: 4f:da:7b:ab:77:a3:a2:fd:09:05:b7:d7:86:ff:9b:7b:cb:6e: cb:c0:3f:3e:70:a1:79:e9:29:97:6a:55:c8:47:55:42:8a:e5: 62:7b:2e:58:94:8e:0d:e5:90:40:9d:f5:a3:a8:b4:43:db:60: f7:40:4c:6b:98:28:5c:41:fd:5e:40:73:9c:95:cf:63:56:f9: d8:19:99:21:bb:0e:c7:31:c7:0c:a9:c8:6a:94:c4:64:c7:85: c8:e8:11:47:02:1b:6a:59:94:fb:d7:3a:37:e9:16:4d:2e:ee: 1f:f8:c6:81:32:04:8c:ef:87:d1:dc:d9:e2:9e:4a:49:5d:73: a5:bb:24:55:b1:a1:40:74:87:a5:6c:28:92:67:39:3c:25:2e: e5:26:47:a1:38:b0:e8:3f:10:5a:b4:93:59:11:19:f0:45:ab: 9d:58:d4:b3:eb:80:4e:45:3f:c1:89:a7:36:43:b6:a2:94:e8: c3:f2:32:da -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xwy0bvbJbMomyolhFoPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ5ZTkyNjZlZWNhYmMwZmQ0YTYwNzdlYjBiYThmYTlmM2JkZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqK/Ni71/VsWSBKsLHw9UZ+4XXDk 3vAHnyo2xNOB/Y9u/wo0ibpZCx411PujUNtGiHo8GWHklF+pNctnt/Ew9mylS834 8pENiXzIyDEGIbvxuDLxOgunrGqZPvM3UCHx9kOfHomEBn//QiFS/JUwmewhT6V/ aMYuU6s/jREA6XQi+JNTD03k/HXSvC+4Cethim7WXkIOBTlLMlbhTZ+am7nrmxA0 PW1Gc12bsEmAEO/fixAgVcrG3GO56Uv+bYD3Gd+glRxBa9+v5uEga+ZZXx2j/iuT Fje9DVR6/flE0ulMrXZNsup+zH3NTSWnpKk2MZVlVFdiqLIWkAyJu2AfeQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGXZ6SZu7KvA/Upgd+sLqPqfO94nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2JhNDAy Yy1iMDBlLTRhMjYtYmY1My04ZTc0N2UzNGUxNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYmE0MDJj LWIwMGUtNGEyNi1iZjUzLThlNzQ3ZTM0ZTE2Mi8xL1pkbnBKbTdzcThEOVNtQjM2 d3VvLXA4NzNpYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCX9YwMA0EAgACMAcDBQMqCdaAMA0GCSqGSIb3 DQEBCwUAA4IBAQBh4tZjam6asIrLm6lY4oZ1vFWl5BYEdkRPm8devIxVbs706Nf7 gWn/pKn+BYuH4FFCGgQ+MAq3cbRdP/79cEA9dmQg19YBTeBP2nurd6Oi/QkFt9eG /5t7y27LwD8+cKF56SmXalXIR1VCiuViey5YlI4N5ZBAnfWjqLRD22D3QExrmChc Qf1eQHOclc9jVvnYGZkhuw7HMccMqchqlMRkx4XI6BFHAhtqWZT71zo36RZNLu4f +MaBMgSM74fR3NninkpJXXOluyRVsaFAdIelbCiSZzk8JS7lJkehOLDoPxBatJNZ ERnwRaudWNSz64BORT/Biac2Q7ailOjD8jLa -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:11 2026 by rpki-client