This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer (raw, json) Hash identifier: ZhCBH2iIHuwlMttgmGq3Gp6YQVbKiUoyRweagc881Yk= Subject key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED0BD887A4C6B7F7415B5CEADB8AAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209496 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0b:d8:87:a4:c6:b7:f7:41:5b:5c:ea:db:8a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66263febc8522dda56cbb439b61a0562be1ae1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:fd:f8:b4:98:a4:c7:81:f3:e5:59:1f:47: df:ae:d3:5b:91:8e:42:3d:5c:1a:27:61:36:75:46: 49:da:14:ea:7d:41:c6:03:d4:5e:c8:d5:4b:51:7b: 0f:89:21:15:83:cf:87:91:59:52:41:fb:f1:ac:09: 23:3f:08:e7:64:ef:21:b9:94:01:f8:97:4e:69:93: 14:76:95:8e:51:b8:91:2e:03:d8:c6:f5:e9:a9:7a: 85:60:0b:8b:82:0c:c8:e8:65:9e:97:91:5b:e7:2d: a5:08:db:84:1e:5b:bd:c6:bc:d4:a5:77:1a:a2:36: ea:b8:05:41:ea:ef:00:e8:64:93:16:42:d2:2b:17: fa:d3:63:ce:dc:c0:78:1c:87:63:3f:46:9c:cb:6d: 80:39:8c:89:c8:2b:7e:73:b6:8b:5e:63:c6:d8:39: a9:7b:d4:54:09:13:02:86:ea:4b:99:f5:5c:8e:d8: 91:17:1c:05:7f:5c:92:fb:b5:b2:e3:d7:a9:0d:e5: f4:07:b1:c3:82:b7:f6:df:d2:68:1a:9a:36:a8:59: 40:9d:6d:c9:e4:b0:73:eb:4f:ee:3f:a0:40:3c:27: 2a:5e:57:2e:56:1c:a3:09:e7:ea:29:d7:57:81:6f: 83:b6:70:92:34:df:49:0e:3e:41:17:a6:6f:35:84: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209496 Signature Algorithm: sha256WithRSAEncryption 3a:b4:ca:2b:56:87:51:17:29:91:53:21:55:e7:b0:5e:70:e2: bf:2e:74:6f:8f:67:da:6d:49:f3:5d:22:50:32:6c:9a:aa:c9: 31:7a:a3:95:0a:a8:d5:4f:04:46:38:5a:ee:38:cb:fb:c4:90: 7a:ef:a6:79:95:69:b9:e1:23:57:c8:46:58:a1:c9:76:32:65: 29:b9:eb:e5:65:39:47:07:97:c7:b5:8e:3e:b3:20:35:df:ed: 32:1a:ee:17:1f:3c:11:2a:e9:4a:7b:a4:1b:ab:e2:0c:68:93: c9:ef:0f:8a:f9:9d:30:a8:7a:97:26:f5:9b:ae:ea:58:1f:cd: dc:e6:9b:7a:9d:64:cc:4b:64:5e:db:7a:f6:30:e5:03:40:9f: 65:be:c3:e5:48:76:3c:23:4b:02:2f:61:0c:5a:53:4f:0e:7e: 58:2d:29:9a:c9:97:27:b1:e1:43:86:93:e0:3f:89:d3:23:56: a0:5c:97:71:90:fa:d9:9c:b0:98:ed:06:4a:15:06:ee:45:e9: 21:65:b1:ca:48:eb:7d:37:5c:93:0a:e2:ca:72:6e:72:f3:7e: 74:86:76:73:f6:ca:6e:8d:9f:6f:16:d1:3e:54:9a:05:1e:d0: fe:9e:d4:76:d8:c2:6a:97:27:f3:1f:3e:12:39:33:95:eb:74: c8:23:60:35 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57QvYh6TGt/dBW1zq24qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI2M2ZlYmM4NTIyZGRhNTZjYmI0MzliNjFhMDU2MmJlMWFlMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCH9+LSYpMeB8+VZH0ffrtNbkY5C PVwaJ2E2dUZJ2hTqfUHGA9ReyNVLUXsPiSEVg8+HkVlSQfvxrAkjPwjnZO8huZQB +JdOaZMUdpWOUbiRLgPYxvXpqXqFYAuLggzI6GWel5Fb5y2lCNuEHlu9xrzUpXca ojbquAVB6u8A6GSTFkLSKxf602PO3MB4HIdjP0acy22AOYyJyCt+c7aLXmPG2Dmp e9RUCRMChupLmfVcjtiRFxwFf1yS+7Wy49epDeX0B7HDgrf239JoGpo2qFlAnW3J 5LBz60/uP6BAPCcqXlcuVhyjCefqKddXgW+DtnCSNN9JDj5BF6ZvNYSiOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGYmP+vIUi3aVsu0ObYaBWK+GuHjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzllMjcw MC02MmYxLTQ2MDYtOGJlZC1lMmZiOTNkZWYwYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvOWUyNzAw LTYyZjEtNDYwNi04YmVkLWUyZmI5M2RlZjBiYS8xL1ppWV82OGhTTGRwV3k3UTV0 aG9GWXI0YTRlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyWDANBgkqhkiG9w0BAQsFAAOCAQEAOrTKK1aHURcp kVMhVeewXnDivy50b49n2m1J810iUDJsmqrJMXqjlQqo1U8ERjha7jjL+8SQeu+m eZVpueEjV8hGWKHJdjJlKbnr5WU5RweXx7WOPrMgNd/tMhruFx88ESrpSnukG6vi DGiTye8PivmdMKh6lyb1m67qWB/N3Oabep1kzEtkXtt69jDlA0CfZb7D5Uh2PCNL Ai9hDFpTTw5+WC0pmsmXJ7HhQ4aT4D+J0yNWoFyXcZD62ZywmO0GShUG7kXpIWWx ykjrfTdckwriynJucvN+dIZ2c/bKbo2fbxbRPlSaBR7Q/p7UdtjCapcn8x8+Ejkz let0yCNgNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:40 2026 by rpki-client