This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer (raw, json) Hash identifier: v0CYxnCYQjimHs31uSn6bd065cEzWYGqPEgCuUHKvJs= Subject key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D0EF001E7ABA04956C836A8CC8E1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208581 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:f0:01:e7:ab:a0:49:56:c8:36:a8:cc:8e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:71:03:77:cd:48:32:bf:ab:08:0e:71:45: dc:cc:8f:8d:58:82:f2:b1:14:ae:95:ee:a0:b7:de: 16:8d:bf:cb:43:7e:88:d2:18:83:54:58:d6:80:7c: 34:f4:25:f4:84:fc:36:86:fa:bf:a5:8e:c3:fd:f3: a0:12:d8:e1:d8:6c:51:d6:9a:e1:90:43:be:17:00: 97:49:13:a6:c5:d5:26:39:fe:bd:b4:31:c7:02:0f: 1f:df:ec:71:92:06:03:b1:46:91:62:01:5f:59:c0: e6:0c:d8:ec:c8:f6:d8:f2:c6:f0:4b:eb:b8:cf:28: 38:aa:87:47:4e:88:67:4c:c5:e0:08:7e:aa:38:3d: 82:f5:bf:5f:38:85:aa:fa:5b:f8:b6:21:f6:d9:41: a6:8a:ea:02:de:17:d7:7b:97:44:77:02:9f:23:3c: a6:7f:5e:04:b9:f7:04:5f:23:fe:b7:ea:90:f6:27: b3:b4:5c:72:3e:66:bd:e2:a1:e5:c5:e6:4f:e2:f2: 50:d4:f0:76:7a:6c:70:12:26:6a:48:c5:a7:7c:5a: a7:54:18:aa:44:7b:48:3b:3d:59:53:d4:9a:10:25: a9:4f:1d:c2:d3:6a:bc:10:60:55:18:d6:1f:be:f8: f9:86:fa:af:2f:ad:74:b0:4a:55:bd:6a:d4:32:e9: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208581 Signature Algorithm: sha256WithRSAEncryption 67:57:fd:b2:46:3d:31:9c:7c:fb:a2:ea:c4:d4:cb:d5:c0:18: df:e6:91:aa:a4:89:02:d2:f7:da:9b:da:98:bf:62:39:82:7a: 43:82:94:80:5c:86:89:68:83:2c:4f:dc:e7:fc:7a:f7:75:82: b6:18:0c:df:02:43:b0:72:5e:95:0e:41:09:e9:27:94:4c:9c: 92:c8:7e:25:b6:5f:73:fe:4f:e1:ff:ad:b0:d1:77:03:6f:7e: 33:20:04:fd:f1:3f:b8:35:5d:30:5f:96:72:7f:d4:a4:cb:50: fd:64:29:e0:84:a5:87:48:74:e0:b7:62:cb:79:f1:7f:0a:30: 0e:c3:64:46:9a:b4:df:bd:a8:2c:38:ef:dd:db:11:44:b5:40: e4:bd:c4:5d:60:63:be:ff:c9:99:87:3e:e4:65:f3:fa:8f:16: ee:61:e0:d8:25:e4:db:e8:48:e4:17:5a:fb:76:e9:c0:6b:15: f4:b3:ef:f7:b8:45:6f:fb:e8:d3:33:51:74:83:57:47:6e:aa: f3:c1:89:a1:98:62:01:da:4e:66:66:16:e6:91:22:54:45:d4: c2:2a:dc:fa:ea:67:fd:97:7a:c8:aa:67:11:eb:b2:71:4d:f1: a8:6e:3f:cc:62:13:01:21:80:f4:93:c1:a6:6a:36:95:1c:83: 50:91:5e:eb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XQ7wAeeroElWyDaozI4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjJmYmYwOWFlNjg4NmVjN2RkNTg2YjRhMzRiMWRjOTczN2U4NzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojtxA3fNSDK/qwgOcUXczI+NWILy sRSule6gt94Wjb/LQ36I0hiDVFjWgHw09CX0hPw2hvq/pY7D/fOgEtjh2GxR1prh kEO+FwCXSROmxdUmOf69tDHHAg8f3+xxkgYDsUaRYgFfWcDmDNjsyPbY8sbwS+u4 zyg4qodHTohnTMXgCH6qOD2C9b9fOIWq+lv4tiH22UGmiuoC3hfXe5dEdwKfIzym f14EufcEXyP+t+qQ9ieztFxyPma94qHlxeZP4vJQ1PB2emxwEiZqSMWnfFqnVBiq RHtIOz1ZU9SaECWpTx3C02q8EGBVGNYfvvj5hvqvL610sEpVvWrUMulPSQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGYvvwmuaIbsfdWGtKNLHclzfod9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2FlYjQz ZS0wMjg3LTQxOWMtYWE1NS0xYzY2OGZmNTc4NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYWViNDNl LTAyODctNDE5Yy1hYTU1LTFjNjY4ZmY1Nzg3My8xL1ppLV9DYTVvaHV4OTFZYTBv MHNkeVhOLWgzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuxTANBgkqhkiG9w0BAQsFAAOCAQEAZ1f9skY9MZx8 +6LqxNTL1cAY3+aRqqSJAtL32pvamL9iOYJ6Q4KUgFyGiWiDLE/c5/x693WCthgM 3wJDsHJelQ5BCeknlEycksh+JbZfc/5P4f+tsNF3A29+MyAE/fE/uDVdMF+Wcn/U pMtQ/WQp4ISlh0h04Ldiy3nxfwowDsNkRpq0372oLDjv3dsRRLVA5L3EXWBjvv/J mYc+5GXz+o8W7mHg2CXk2+hI5Bda+3bpwGsV9LPv97hFb/vo0zNRdINXR26q88GJ oZhiAdpOZmYW5pEiVEXUwirc+upn/Zd6yKpnEeuycU3xqG4/zGITASGA9JPBpmo2 lRyDUJFe6w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:18 2026 by rpki-client