This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer (raw, json) Hash identifier: x3pHpa9lsDrvCL13KbIFQ05d8geTPJx3vqYCxCv9g8A= Subject key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B11F85294473B93382AEC361910E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202213 IP: 2001:67c:494::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:11:f8:52:94:47:3b:93:38:2a:ec:36:19:10:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4b:25:72:69:22:70:fb:d2:00:e9:09:0c:a1: 00:e6:e9:3d:65:22:f8:5c:33:aa:fe:7e:9a:3e:8b: ac:f4:00:c3:e0:9f:d3:7e:fb:40:36:cc:d0:9f:5c: ea:18:83:a6:5f:4d:d4:5d:de:b7:9a:70:f0:2a:ac: 7e:d1:04:d2:f7:a1:20:fc:ce:bf:46:fd:39:6c:b7: 9c:45:af:e9:b2:75:88:2d:33:ec:5b:46:61:46:e2: 69:ec:9a:5f:af:71:af:dd:ec:63:9d:d5:49:03:20: d3:d7:b9:ea:19:fe:82:b3:bf:d4:9d:a1:7a:26:9c: f1:c1:54:cc:d8:f7:cd:80:08:e9:f1:37:a6:2b:96: 6b:4a:6d:71:e9:e2:a2:1b:83:ac:a2:10:e7:2d:bb: ea:4f:58:6a:23:60:1d:0d:f2:ed:94:6d:16:67:4c: 9f:30:b3:3e:c3:fb:66:e1:81:3c:82:22:0d:48:de: 20:10:0f:b1:4e:fd:7e:64:63:98:b2:2d:46:b7:ca: 36:44:30:78:3c:5d:e8:00:3a:dc:32:df:4d:15:7d: 66:12:e0:ce:45:97:ba:4b:2f:a4:ae:fb:d4:af:4d: b0:aa:a7:85:c4:48:d4:dd:0a:ac:13:fb:d1:d6:90: df:30:9c:80:06:bb:16:9b:ca:f1:22:bf:8b:28:18: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:494::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202213 Signature Algorithm: sha256WithRSAEncryption 0c:0d:6d:1d:c7:9b:6e:f7:2a:5d:45:79:a3:d6:58:4f:03:aa: 2f:07:3c:2b:55:fa:59:78:6f:61:5c:a8:0a:9d:45:3a:a9:3a: bb:61:18:0c:7b:2c:a1:a4:ec:71:c0:bf:da:be:54:95:98:e4: c7:5e:42:8e:27:6e:39:a5:ac:d4:53:40:ea:07:fe:00:5e:0a: 93:d8:25:0d:26:1e:60:f8:c2:eb:d8:ab:da:7f:20:7c:50:d9: e4:0b:40:ba:1c:4f:5b:1d:5c:0b:a4:e1:4b:96:f8:97:37:d2: 63:ee:73:e7:d9:05:30:7c:23:20:6c:7b:47:93:40:c3:01:62: d6:dd:9a:bc:05:99:88:de:02:e2:1e:78:f3:79:cb:ad:48:7c: 5f:4b:40:6c:94:7c:91:9f:99:4c:ee:ef:8f:5a:cf:24:b0:a1: a7:f3:28:5b:d1:09:30:73:a9:91:bf:d1:d8:84:6c:d1:cb:d4: 2a:ab:f9:d0:b3:9a:c0:4a:81:7e:7a:b8:17:62:11:6c:07:77: a8:b6:96:6a:0f:1a:f8:ef:af:80:c7:30:a8:2b:e4:21:1e:db: be:c4:99:88:e0:22:7d:1e:5a:66:f3:0e:1f:d9:7d:cf:41:a7: de:89:61:1e:8f:87:61:f1:de:a8:63:44:d1:5d:2d:44:c1:a5: ee:1a:04:b9 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6WxH4UpRHO5M4Kuw2GRDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjFmMmRhNmMyZGY5NGE3ZDA1YTdlZTQwMWZjZmUzMTY4NjQwYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UslcmkicPvSAOkJDKEA5uk9ZSL4 XDOq/n6aPous9ADD4J/TfvtANszQn1zqGIOmX03UXd63mnDwKqx+0QTS96Eg/M6/ Rv05bLecRa/psnWILTPsW0ZhRuJp7Jpfr3Gv3exjndVJAyDT17nqGf6Cs7/UnaF6 JpzxwVTM2PfNgAjp8TemK5ZrSm1x6eKiG4OsohDnLbvqT1hqI2AdDfLtlG0WZ0yf MLM+w/tm4YE8giINSN4gEA+xTv1+ZGOYsi1Gt8o2RDB4PF3oADrcMt9NFX1mEuDO RZe6Sy+krvvUr02wqqeFxEjU3QqsE/vR1pDfMJyABrsWm8rxIr+LKBi/eQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFGYfLabC35Sn0Fp+5AH8/jFoZArDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzc5MmRk ZS0xNmI0LTRkNzItOTMxYi0wYTcxZmI5MmQ0MmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNzkyZGRl LTE2YjQtNGQ3Mi05MzFiLTBhNzFmYjkyZDQyYS8xL1poOHRwc0xmbEtmUVduN2tB ZnotTVdoa0NzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfASUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMV5TANBgkqhkiG9w0BAQsFAAOCAQEADA1tHcebbvcqXUV5o9ZYTwOqLwc8 K1X6WXhvYVyoCp1FOqk6u2EYDHssoaTsccC/2r5UlZjkx15CjiduOaWs1FNA6gf+ AF4Kk9glDSYeYPjC69ir2n8gfFDZ5AtAuhxPWx1cC6ThS5b4lzfSY+5z59kFMHwj IGx7R5NAwwFi1t2avAWZiN4C4h5483nLrUh8X0tAbJR8kZ+ZTO7vj1rPJLChp/Mo W9EJMHOpkb/R2IRs0cvUKqv50LOawEqBfnq4F2IRbAd3qLaWag8a+O+vgMcwqCvk IR7bvsSZiOAifR5aZvMOH9l9z0Gn3olhHo+HYfHeqGNE0V0tRMGl7hoEuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:44 2026 by rpki-client