This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer File: ZhPZyFZESnCW46hQjK4wf968DNQ.cer (raw, json) Hash identifier: Pp73oVYrti6WwQgZzH0LH6qkhohka9uzYo3okcepV3s= Subject key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37F6D438D87D1CE37B01B10F571BF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.149.102.0/24 IP: 2a10:2400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:d4:38:d8:7d:1c:e3:7b:01:b1:0f:57:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:83:f0:6d:4e:38:b7:80:ae:4f:ab:2d:43: e3:7f:c2:46:d0:59:71:b9:96:ba:73:cb:40:70:41: f2:67:d8:57:08:51:f7:3b:5d:68:8e:af:b9:74:9e: 7b:b0:2c:59:cc:e2:03:dc:2f:1c:a3:04:5e:f1:be: 6f:5a:39:b8:8d:84:71:c1:42:58:a8:20:1e:47:8e: 7d:7d:99:84:25:21:be:16:88:e0:20:f6:64:1f:68: 00:b1:76:48:61:1f:ab:dc:a3:9f:a5:60:ab:5e:78: fc:4b:b6:4e:d8:be:16:67:ae:95:9b:cd:67:a5:8c: ac:81:7c:55:61:23:a8:b6:5e:26:9e:44:d9:1e:21: 3e:87:56:be:84:69:33:ce:8d:f8:5f:13:1c:fb:19: 06:9d:8e:0a:88:aa:ba:63:cc:2c:b0:64:66:d6:c5: 62:c3:27:f0:83:7a:44:21:20:07:6e:db:9b:36:96: 61:ef:b3:5f:c0:1e:41:a2:48:63:ce:0e:cc:ae:b3: 21:56:90:57:9d:e6:ab:90:d2:a4:a1:76:3d:84:f2: 63:98:33:a4:6d:ed:a4:1b:4d:c9:20:ae:a9:28:f9: 1c:4b:30:25:23:c6:cb:d7:22:31:d7:d8:fb:f2:af: 5a:de:5e:35:18:7c:ee:a4:a3:dd:ef:28:c9:3c:e2: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.102.0/24 IPv6: 2a10:2400::/29 Signature Algorithm: sha256WithRSAEncryption 5c:59:91:0a:27:f8:e7:fc:55:ca:fe:33:cc:fb:1c:ce:25:ea: 75:aa:e2:a4:79:05:b0:82:69:96:7e:09:b1:71:18:aa:0f:0a: 6a:68:44:13:f9:a5:3f:c0:fe:7b:04:ee:93:42:0f:e7:e8:b7: e4:8b:19:e2:03:bf:20:a3:f1:d5:94:59:9a:72:99:34:b7:0d: ef:7f:77:a1:21:48:bf:47:2a:0b:dc:51:85:df:43:6c:37:2e: c7:2c:da:9f:53:68:f9:fc:fe:fe:c9:d0:67:ff:18:ac:40:4d: fa:c3:24:3c:d2:f7:52:2a:2f:d2:19:d5:33:42:28:d5:a0:f2: 14:d9:b6:4b:4e:ab:19:55:45:ef:c4:c5:32:20:df:78:47:62: 0d:9b:7c:84:fe:12:97:be:66:46:0f:f8:5d:14:b2:bf:11:fb: 12:9e:ca:8f:4f:1f:37:4c:49:ae:60:bb:68:66:f0:5a:a4:37: b8:23:75:d7:0c:e6:6a:62:56:f0:9b:e1:e0:51:e6:10:15:88: 56:ed:18:c4:8e:ba:26:81:45:23:c0:66:f6:8a:f4:d9:a1:76: 72:86:09:42:44:6b:46:9d:81:1c:ae:6a:c0:a2:9b:d0:c9:9d: ea:0c:0c:77:ce:f0:2e:d8:3f:71:d6:73:ab:df:47:c9:ed:8a: a4:03:e3:5c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N/bUONh9HON7AbEPVxvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjEzZDljODU2NDQ0YTcwOTZlM2E4NTA4Y2FlMzA3ZmRlYmMwY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GKD8G1OOLeArk+rLUPjf8JG0Flx uZa6c8tAcEHyZ9hXCFH3O11ojq+5dJ57sCxZzOID3C8cowRe8b5vWjm4jYRxwUJY qCAeR459fZmEJSG+FojgIPZkH2gAsXZIYR+r3KOfpWCrXnj8S7ZO2L4WZ66Vm81n pYysgXxVYSOotl4mnkTZHiE+h1a+hGkzzo34XxMc+xkGnY4KiKq6Y8wssGRm1sVi wyfwg3pEISAHbtubNpZh77NfwB5Bokhjzg7MrrMhVpBXnearkNKkoXY9hPJjmDOk be2kG03JIK6pKPkcSzAlI8bL1yIx19j78q9a3l41GHzupKPd7yjJPOLyEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGYT2chWREpwluOoUIyuMH/evAzUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzhiNWYx ZS00MTkwLTQ4YjYtYmRjNS03ZDA1Zjk4ODhlOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOGI1ZjFl LTQxOTAtNDhiNi1iZGM1LTdkMDVmOTg4OGU5OC8xL1poUFp5RlpFU25DVzQ2aFFq SzR3Zjk2OEROUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALpVmMA0EAgACMAcDBQMqECQAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcWZEKJ/jn/FXK/jPM+xzOJep1quKkeQWwgmmWfgmxcRiqDwpq aEQT+aU/wP57BO6TQg/n6LfkixniA78go/HVlFmacpk0tw3vf3ehIUi/RyoL3FGF 30NsNy7HLNqfU2j5/P7+ydBn/xisQE36wyQ80vdSKi/SGdUzQijVoPIU2bZLTqsZ VUXvxMUyIN94R2INm3yE/hKXvmZGD/hdFLK/EfsSnsqPTx83TEmuYLtoZvBapDe4 I3XXDOZqYlbwm+HgUeYQFYhW7RjEjromgUUjwGb2ivTZoXZyhglCRGtGnYEcrmrA opvQyZ3qDAx3zvAu2D9x1nOr30fJ7YqkA+Nc -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:41 2026 by rpki-client