This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
File: ZeuO9EGD-OOpyIenviaz8HE8E70.cer (raw, json)
Hash identifier: FEtChwmSHA5ET9jX/Ut4erx+BtCaIyn4Klsivlz/7QQ=
Subject key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C766BF864467B41B03E20B54B0C6A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34711
IP: 195.64.178.0/23
IP: 2001:67c:2a44::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:66:bf:86:44:67:b4:1b:03:e2:0b:54:b0:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:12:c4:59:45:65:29:08:4a:64:10:b0:e0:
e2:aa:af:f8:5e:ef:a2:bf:bb:e2:47:ef:d9:7f:4a:
95:13:1f:9c:08:5f:9a:28:72:09:37:0f:38:b2:b2:
0b:9f:49:29:a8:51:eb:05:cc:37:bd:de:2f:8f:89:
74:81:ad:3a:e3:38:41:df:5f:c5:f2:0b:43:c8:e3:
c5:a4:13:31:8a:62:e6:83:61:55:bb:62:6c:29:b7:
a0:14:85:1f:44:db:b1:5a:1f:7f:32:31:83:af:cb:
b9:7d:d2:fa:4e:55:51:9a:5e:fb:32:a0:e7:b1:0d:
4b:61:25:3e:9d:b5:07:66:c3:95:73:38:c8:d9:5a:
75:a7:fe:8b:8e:76:4f:3e:ff:e1:3e:e7:44:34:b0:
ff:c7:ba:37:c6:55:83:7f:95:c2:e7:0c:03:16:a0:
3c:51:86:b6:19:1d:ed:08:37:48:3b:45:8d:c0:09:
69:fc:41:72:5f:92:d8:87:61:4a:d2:69:6c:9e:94:
57:1a:a5:12:a1:de:f3:aa:1d:7b:c1:7d:be:04:bc:
08:95:0c:cf:90:b7:96:f6:09:41:25:89:cd:b6:28:
0e:bc:ed:97:15:c9:81:43:6f:51:30:8e:3f:a1:4e:
52:74:5b:2a:b6:13:57:eb:18:18:cd:9d:82:9a:22:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.178.0/23
IPv6:
2001:67c:2a44::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34711
Signature Algorithm: sha256WithRSAEncryption
44:2f:df:25:7c:b2:16:38:a0:8c:c7:72:74:93:28:ba:1b:89:
5d:4e:12:ac:ce:0c:8e:20:a0:cd:2b:ce:9b:e9:9b:11:2f:c9:
83:0d:6b:ea:89:ad:19:fc:9a:1e:86:4d:03:76:d5:8e:ca:0e:
3c:50:65:ca:88:a8:8c:0a:bf:73:28:60:b7:eb:2f:89:44:83:
fe:fa:e2:2c:16:e1:04:b0:e5:af:41:0e:f4:54:0d:17:d7:e5:
af:5a:c2:9b:cd:11:9d:aa:ed:cd:d7:ca:df:48:1f:bc:9e:3d:
59:96:73:31:60:5b:af:04:a2:d2:43:6d:19:0e:53:a5:b0:af:
9f:29:bf:31:51:75:27:91:a5:56:8f:f9:5b:77:a7:ab:48:2e:
f3:02:f6:6d:67:de:d7:08:c6:ab:b8:a3:cb:41:59:cf:e0:bd:
d1:69:69:ca:a7:ce:13:63:e5:c6:5e:f8:19:2b:1c:6f:ae:60:
66:bc:16:6c:d0:32:96:d6:89:01:46:d1:37:8f:31:03:42:c8:
fc:c7:5e:f5:ff:39:ad:36:6d:3b:06:29:b9:23:c7:e6:03:c1:
4f:b6:04:29:ff:eb:10:6a:08:c3:b6:5e:f6:17:f3:c0:fb:32:
86:a5:e4:0a:3e:65:0f:c8:44:8b:68:21:dc:78:86:00:06:e0:
56:e9:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:08:31 2026 by rpki-client