This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer (raw, json) Hash identifier: baq2EXy3W5UEigBkIsogWrsnboVmWp1lEeH90S1Ngww= Subject key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB241900D0049C2366984EC7B5CEB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211491 IP: 193.22.20.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:24:19:00:d0:04:9c:23:66:98:4e:c7:b5:ce:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:b6:c2:d3:34:7d:d9:48:36:fb:0d:da:37: 68:6f:40:0c:05:71:d8:71:cb:c3:52:ca:af:d7:85: 39:82:d4:fe:4d:7b:ba:b0:1b:08:c0:8a:f8:69:94: 0a:db:d2:f5:51:eb:e6:8b:12:aa:16:c9:0f:1c:dc: 6a:2a:0a:d2:5e:a9:5a:2f:9e:ee:02:f6:21:9e:68: f9:aa:e7:2e:22:35:3f:b6:37:84:60:81:23:d6:fe: c7:5f:8d:73:8c:d7:86:1b:93:6a:95:f1:bd:4f:74: 6d:28:22:ec:75:10:3e:de:02:b5:20:4f:f9:fb:18: ce:f5:78:70:8e:7d:74:89:9e:a8:a6:21:4e:09:9f: c7:fb:98:d5:08:3a:bd:d7:a2:f0:c8:5e:8e:46:31: 78:9c:b1:29:ed:27:a2:ed:37:a2:a5:bc:6d:cb:22: 82:85:03:73:73:a1:e5:79:0e:e7:08:48:7b:4b:15: fd:e7:1a:2b:1b:53:73:ff:37:bc:4d:8f:86:74:41: 7e:3a:80:28:9b:99:96:e9:93:c9:a9:47:a0:6f:87: 63:35:c5:45:7e:5b:28:03:19:80:9e:8c:5b:88:6a: 7d:cb:5b:c4:0e:d3:45:ef:d6:e8:5c:a8:56:4e:57: 4c:ca:32:15:f0:4b:17:a2:4d:74:cf:cd:5d:68:9e: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.20.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211491 Signature Algorithm: sha256WithRSAEncryption 54:72:a2:be:7a:55:6e:5e:22:f4:da:9a:2b:34:1c:b8:13:09: ac:4b:75:fb:98:98:92:03:ce:ee:18:3d:4b:3c:54:d4:c5:15: 02:59:a7:90:f8:37:f0:1a:08:60:2f:04:f0:05:3d:6c:50:9c: a1:06:8c:d1:53:a4:27:26:fb:ca:22:17:74:37:4b:4c:dc:1c: f8:48:c9:7e:91:be:45:28:2d:18:bf:85:37:6f:a5:e6:0d:c7: 77:83:8f:cd:22:e8:ac:ff:42:26:e3:34:8a:9a:6b:04:25:3a: 8e:b0:d7:8b:10:89:44:82:ff:80:56:f3:44:83:64:44:42:59: c8:89:7a:b2:a1:82:1f:bb:69:bf:b1:a9:07:3f:23:bf:dc:a8: f9:0c:8b:5d:d3:69:1f:36:6b:bc:64:16:fa:d2:19:98:3a:d2: be:ad:ac:8e:7e:45:82:91:21:21:16:99:e5:6b:78:9e:24:ca: db:f5:6e:bc:a1:c2:b6:43:63:a3:fe:5a:57:21:67:f1:b3:af: 76:30:dc:56:55:d2:e0:6c:56:57:70:5f:9d:4e:83:34:f5:9f: 2c:67:8d:1d:4c:76:0e:ae:92:72:81:d5:b1:61:dd:0e:aa:7c: 2b:49:b3:8f:61:85:03:11:c3:cf:6d:b2:35:50:99:3a:8d:40: 02:5f:6e:8b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26yQZANAEnCNmmE7Htc63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWUwMDYyZTU0YTVmY2I2YTBjOTllNTk4NTU3ZmVkNmYzN2E0NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxa2wtM0fdlINvsN2jdob0AMBXHY ccvDUsqv14U5gtT+TXu6sBsIwIr4aZQK29L1UevmixKqFskPHNxqKgrSXqlaL57u AvYhnmj5qucuIjU/tjeEYIEj1v7HX41zjNeGG5NqlfG9T3RtKCLsdRA+3gK1IE/5 +xjO9Xhwjn10iZ6opiFOCZ/H+5jVCDq916LwyF6ORjF4nLEp7Sei7TeipbxtyyKC hQNzc6HleQ7nCEh7SxX95xorG1Nz/ze8TY+GdEF+OoAom5mW6ZPJqUegb4djNcVF flsoAxmAnoxbiGp9y1vEDtNF79boXKhWTldMyjIV8EsXok10z81daJ4xRwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGXgBi5Upfy2oMmeWYVX/tbzekYpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzk3NWU2 OC04NjYyLTQzYjktOGVkMi1hYWU5N2U2NTAxNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvOTc1ZTY4 LTg2NjItNDNiOS04ZWQyLWFhZTk3ZTY1MDE1Yy8xL1plQUdMbFNsX0xhZ3laNVpo VmYtMXZONlJpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRYUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM6IzANBgkqhkiG9w0BAQsFAAOCAQEAVHKivnpVbl4i9NqaKzQcuBMJrEt1+5iY kgPO7hg9SzxU1MUVAlmnkPg38BoIYC8E8AU9bFCcoQaM0VOkJyb7yiIXdDdLTNwc +EjJfpG+RSgtGL+FN2+l5g3Hd4OPzSLorP9CJuM0ipprBCU6jrDXixCJRIL/gFbz RINkREJZyIl6sqGCH7tpv7GpBz8jv9yo+QyLXdNpHzZrvGQW+tIZmDrSvq2sjn5F gpEhIRaZ5Wt4niTK2/VuvKHCtkNjo/5aVyFn8bOvdjDcVlXS4GxWV3BfnU6DNPWf LGeNHUx2Dq6ScoHVsWHdDqp8K0mzj2GFAxHDz22yNVCZOo1AAl9uiw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:12 2026 by rpki-client