This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
File:                     ZeuO9EGD-OOpyIenviaz8HE8E70.cer (raw, json)
Hash identifier:          FEtChwmSHA5ET9jX/Ut4erx+BtCaIyn4Klsivlz/7QQ=
Subject key identifier:   65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C766BF864467B41B03E20B54B0C6A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34711
                          IP: 195.64.178.0/23
                          IP: 2001:67c:2a44::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:66:bf:86:44:67:b4:1b:03:e2:0b:54:b0:c6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:12:c4:59:45:65:29:08:4a:64:10:b0:e0:
                    e2:aa:af:f8:5e:ef:a2:bf:bb:e2:47:ef:d9:7f:4a:
                    95:13:1f:9c:08:5f:9a:28:72:09:37:0f:38:b2:b2:
                    0b:9f:49:29:a8:51:eb:05:cc:37:bd:de:2f:8f:89:
                    74:81:ad:3a:e3:38:41:df:5f:c5:f2:0b:43:c8:e3:
                    c5:a4:13:31:8a:62:e6:83:61:55:bb:62:6c:29:b7:
                    a0:14:85:1f:44:db:b1:5a:1f:7f:32:31:83:af:cb:
                    b9:7d:d2:fa:4e:55:51:9a:5e:fb:32:a0:e7:b1:0d:
                    4b:61:25:3e:9d:b5:07:66:c3:95:73:38:c8:d9:5a:
                    75:a7:fe:8b:8e:76:4f:3e:ff:e1:3e:e7:44:34:b0:
                    ff:c7:ba:37:c6:55:83:7f:95:c2:e7:0c:03:16:a0:
                    3c:51:86:b6:19:1d:ed:08:37:48:3b:45:8d:c0:09:
                    69:fc:41:72:5f:92:d8:87:61:4a:d2:69:6c:9e:94:
                    57:1a:a5:12:a1:de:f3:aa:1d:7b:c1:7d:be:04:bc:
                    08:95:0c:cf:90:b7:96:f6:09:41:25:89:cd:b6:28:
                    0e:bc:ed:97:15:c9:81:43:6f:51:30:8e:3f:a1:4e:
                    52:74:5b:2a:b6:13:57:eb:18:18:cd:9d:82:9a:22:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.178.0/23
                IPv6:
                  2001:67c:2a44::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34711

    Signature Algorithm: sha256WithRSAEncryption
         44:2f:df:25:7c:b2:16:38:a0:8c:c7:72:74:93:28:ba:1b:89:
         5d:4e:12:ac:ce:0c:8e:20:a0:cd:2b:ce:9b:e9:9b:11:2f:c9:
         83:0d:6b:ea:89:ad:19:fc:9a:1e:86:4d:03:76:d5:8e:ca:0e:
         3c:50:65:ca:88:a8:8c:0a:bf:73:28:60:b7:eb:2f:89:44:83:
         fe:fa:e2:2c:16:e1:04:b0:e5:af:41:0e:f4:54:0d:17:d7:e5:
         af:5a:c2:9b:cd:11:9d:aa:ed:cd:d7:ca:df:48:1f:bc:9e:3d:
         59:96:73:31:60:5b:af:04:a2:d2:43:6d:19:0e:53:a5:b0:af:
         9f:29:bf:31:51:75:27:91:a5:56:8f:f9:5b:77:a7:ab:48:2e:
         f3:02:f6:6d:67:de:d7:08:c6:ab:b8:a3:cb:41:59:cf:e0:bd:
         d1:69:69:ca:a7:ce:13:63:e5:c6:5e:f8:19:2b:1c:6f:ae:60:
         66:bc:16:6c:d0:32:96:d6:89:01:46:d1:37:8f:31:03:42:c8:
         fc:c7:5e:f5:ff:39:ad:36:6d:3b:06:29:b9:23:c7:e6:03:c1:
         4f:b6:04:29:ff:eb:10:6a:08:c3:b6:5e:f6:17:f3:c0:fb:32:
         86:a5:e4:0a:3e:65:0f:c8:44:8b:68:21:dc:78:86:00:06:e0:
         56:e9:95:eb
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZt3x2a/hkRntBsD4gtUsMaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWViOGVmNDQxODNmOGUzYTljODg3YTdiZTI2YjNmMDcxM2MxM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXYSxFlFZSkISmQQsODiqq/4Xu+i
v7viR+/Zf0qVEx+cCF+aKHIJNw84srILn0kpqFHrBcw3vd4vj4l0ga064zhB31/F
8gtDyOPFpBMximLmg2FVu2JsKbegFIUfRNuxWh9/MjGDr8u5fdL6TlVRml77MqDn
sQ1LYSU+nbUHZsOVczjI2Vp1p/6LjnZPPv/hPudENLD/x7o3xlWDf5XC5wwDFqA8
UYa2GR3tCDdIO0WNwAlp/EFyX5LYh2FK0mlsnpRXGqUSod7zqh17wX2+BLwIlQzP
kLeW9glBJYnNtigOvO2XFcmBQ29RMI4/oU5SdFsqthNX6xgYzZ2CmiK0CQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFGXrjvRBg/jjqciHp74ms/BxPBO9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2ZjZWE4
NS04YmUxLTQ4NzctODc4YS1hZDllMWEwNTEwYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZmNlYTg1
LThiZTEtNDg3Ny04NzhhLWFkOWUxYTA1MTBiOS8xL1pldU85RUdELU9PcHlJZW52
aWF6OEhFOEU3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBw0CyMA8EAgACMAkDBwAgAQZ8KkQwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAIeXMA0GCSqGSIb3DQEBCwUAA4IBAQBEL98lfLIW
OKCMx3J0kyi6G4ldThKszgyOIKDNK86b6ZsRL8mDDWvqia0Z/Joehk0DdtWOyg48
UGXKiKiMCr9zKGC36y+JRIP++uIsFuEEsOWvQQ70VA0X1+WvWsKbzRGdqu3N18rf
SB+8nj1ZlnMxYFuvBKLSQ20ZDlOlsK+fKb8xUXUnkaVWj/lbd6erSC7zAvZtZ97X
CMaruKPLQVnP4L3RaWnKp84TY+XGXvgZKxxvrmBmvBZs0DKW1okBRtE3jzEDQsj8
x171/zmtNm07Bim5I8fmA8FPtgQp/+sQagjDtl72F/PA+zKGpeQKPmUPyESLaCHc
eIYABuBW6ZXr
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:08:31 2026 by rpki-client