This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer File: Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer (raw, json) Hash identifier: ZPqhLNpatwkhnnkP1X/8IOgdSmWoco389GWX1HFrxAs= Subject key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B71C383070B61EE8C46071BD27EBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43619 IP: 45.66.108.0/22 IP: 2a09:6840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:c3:83:07:0b:61:ee:8c:46:07:1b:d2:7e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667d377dd4c830c246cb48a934699699e4b37741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:a4:5a:ee:ad:8f:5f:3e:f3:cf:f6:98:e7: 6f:43:f8:bb:c2:b3:38:bd:30:1b:a8:1a:2b:33:50: 08:3b:ef:c9:12:4d:0e:ca:34:e9:aa:91:22:d3:8c: 72:e5:b3:03:61:21:b0:8d:4f:96:3f:3b:0b:81:cb: 31:32:52:6b:c1:d7:09:59:ed:32:8b:ff:48:b5:0c: 91:92:8b:8d:f4:3a:4f:c6:68:64:3a:ef:d8:1d:c0: e1:1c:4a:22:3b:74:15:c1:2b:be:63:5a:e8:ba:6f: e5:73:ff:1e:2a:5f:89:8b:9e:03:1d:92:2a:8e:1a: 50:2e:b6:61:91:ab:30:88:60:b6:f9:d2:82:74:51: 9a:cf:05:18:4c:e6:12:b0:fc:1a:05:f8:ce:b7:55: 38:dc:58:6d:09:52:b5:d3:bb:9e:68:f8:85:7f:c7: 76:61:c9:fe:2c:12:f8:9d:46:eb:23:d7:33:33:56: cd:28:aa:30:f3:8c:21:ef:0f:b0:d7:80:0a:f7:66: 72:70:0b:85:b8:70:50:ab:54:4d:aa:bc:98:a0:49: a3:2c:32:77:19:07:a7:10:08:26:20:83:2c:d2:64: ff:c0:2d:d6:e8:01:8b:45:b8:bc:aa:53:f6:12:2d: f9:03:49:36:89:22:b6:c1:65:ce:60:09:7e:70:4e: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.108.0/22 IPv6: 2a09:6840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43619 Signature Algorithm: sha256WithRSAEncryption 76:ab:10:9a:b7:9e:12:fd:e7:33:3f:c2:7c:9f:03:9c:a6:de: b7:c6:81:4c:75:ff:50:53:8f:30:36:38:f0:dc:6b:23:62:d2: 6b:8e:53:41:8c:77:a4:e3:c3:49:af:e1:f8:a7:d0:ec:1d:9a: 43:3a:b6:f0:5c:65:f1:c4:f3:6d:c4:15:37:aa:19:57:2e:5f: b2:dc:44:fd:42:c1:e1:81:1a:46:9f:ec:b2:57:84:83:63:b4: c8:97:f1:2e:24:ec:ac:af:12:3c:0d:d6:07:83:d1:c5:e4:fc: 3d:bc:e2:34:13:cb:89:26:b2:82:64:0c:82:e7:02:6e:7b:8f: 7f:a3:83:2c:21:e9:35:06:cd:b3:aa:dd:32:a0:2a:79:02:d3: 98:f7:98:30:69:79:dc:0b:1d:7a:eb:b0:0b:6f:a9:53:0c:45: 98:58:67:a4:78:8d:b9:e5:72:34:53:5d:6b:3d:dc:1e:ef:27: 8d:48:6b:f3:ce:bd:78:7a:dc:85:f2:b4:14:c1:df:f2:52:d5: ca:81:31:d2:ef:ad:ed:25:61:93:91:d1:53:ba:5e:39:7b:6d: 74:92:62:59:6e:23:34:61:4b:b1:a8:08:9d:4e:51:f2:ae:a4: c1:94:8b:e0:2c:cb:16:6b:4d:2c:a7:d5:ef:d8:1b:b3:bb:61: 60:e7:19:45 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W3HDgwcLYe6MRgcb0n6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjdkMzc3ZGQ0YzgzMGMyNDZjYjQ4YTkzNDY5OTY5OWU0YjM3NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U6kWu6tj18+88/2mOdvQ/i7wrM4 vTAbqBorM1AIO+/JEk0OyjTpqpEi04xy5bMDYSGwjU+WPzsLgcsxMlJrwdcJWe0y i/9ItQyRkouN9DpPxmhkOu/YHcDhHEoiO3QVwSu+Y1roum/lc/8eKl+Ji54DHZIq jhpQLrZhkaswiGC2+dKCdFGazwUYTOYSsPwaBfjOt1U43FhtCVK107ueaPiFf8d2 Ycn+LBL4nUbrI9czM1bNKKow84wh7w+w14AK92ZycAuFuHBQq1RNqryYoEmjLDJ3 GQenEAgmIIMs0mT/wC3W6AGLRbi8qlP2Ei35A0k2iSK2wWXOYAl+cE6f3QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGZ9N33UyDDCRstIqTRplpnks3dBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjL2U2ODEy ZS05NmE0LTQ4YjQtYWI2MS0xMjFmZjQ2MDE4ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvZTY4MTJl LTk2YTQtNDhiNC1hYjYxLTEyMWZmNDYwMThmMy8xL1puMDNmZFRJTU1KR3kwaXBO R21XbWVTemQwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUJsMA0EAgACMAcDBQMqCWhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCqYzANBgkqhkiG9w0BAQsFAAOCAQEAdqsQmreeEv3n Mz/CfJ8DnKbet8aBTHX/UFOPMDY48NxrI2LSa45TQYx3pOPDSa/h+KfQ7B2aQzq2 8Fxl8cTzbcQVN6oZVy5fstxE/ULB4YEaRp/ssleEg2O0yJfxLiTsrK8SPA3WB4PR xeT8PbziNBPLiSaygmQMgucCbnuPf6ODLCHpNQbNs6rdMqAqeQLTmPeYMGl53Asd euuwC2+pUwxFmFhnpHiNueVyNFNdaz3cHu8njUhr8869eHrchfK0FMHf8lLVyoEx 0u+t7SVhk5HRU7peOXttdJJiWW4jNGFLsagInU5R8q6kwZSL4CzLFmtNLKfV79gb s7thYOcZRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:20 2026 by rpki-client