This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer (raw, json) Hash identifier: J/+IlX8BPMjcnEHxPVTTLjBg6iqeFgQAicOo75zNOK4= Subject key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC81F9D04270B5174998E75F4F414D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44056 IP: 31.135.224.0/20 IP: 46.148.128.0/20 IP: 83.97.104.0/21 IP: 91.195.130.0/23 IP: 91.230.146.0/24 IP: 91.237.186.0/23 IP: 92.62.116.0/24 IP: 109.196.64.0/20 IP: 176.125.192.0/19 IP: 195.2.238.0/23 IP: 2a13:2940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:81:f9:d0:42:70:b5:17:49:98:e7:5f:4f:41:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=668e9b2eefb205342382b6072a903f9d9837071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:6e:b5:f9:d9:38:95:e0:5d:f6:ec:b5:f2: d7:2a:d4:48:61:ff:19:72:aa:a1:9b:9b:3c:9d:27: 52:57:02:6e:ce:e3:24:2c:b2:ab:64:5b:82:58:44: cf:86:ce:7b:6b:2d:e2:29:e2:2c:79:a2:29:7d:fe: ff:9e:5b:d6:ab:9b:f3:40:4d:80:e4:a2:2c:f5:38: fd:87:bd:8c:8d:06:3b:3c:f8:0c:38:89:64:76:00: 7c:73:51:c0:6e:12:f9:96:94:7b:d5:7b:fa:b5:3e: 47:cd:54:80:5f:a3:9f:3b:24:69:e4:37:0c:4b:f3: 5b:1a:ba:08:30:08:a7:cb:c9:70:cd:62:86:1e:82: b4:93:be:f6:38:c7:8c:84:a5:f6:dc:c9:1b:4f:53: dd:7b:8f:b2:b3:8c:75:9f:1b:fa:92:3a:91:15:46: 20:f4:82:32:08:1e:2a:04:29:9f:54:7c:ce:c8:57: ea:00:3f:00:0a:be:63:51:f9:00:3b:df:fa:a9:37: 27:2d:95:a9:50:f3:70:c8:06:bb:5d:b0:9c:a4:8b: 4a:0a:fe:44:91:bd:fa:a0:20:23:6b:da:5d:97:22: 78:a3:d8:d9:ad:69:ae:ff:17:e9:f5:4d:9e:ff:17: 2f:fe:18:c6:12:cc:42:26:d1:4b:b5:89:72:fc:75: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.224.0/20 46.148.128.0/20 83.97.104.0/21 91.195.130.0/23 91.230.146.0/24 91.237.186.0/23 92.62.116.0/24 109.196.64.0/20 176.125.192.0/19 195.2.238.0/23 IPv6: 2a13:2940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44056 Signature Algorithm: sha256WithRSAEncryption 0c:66:9d:11:e2:a4:4b:3b:4a:d8:d7:8b:31:07:06:87:fc:b9: 3d:c1:72:7f:ee:3d:70:e3:c2:58:44:a0:c4:dc:94:df:95:ab: 3f:17:37:f8:86:ef:c9:67:27:d2:fb:b4:78:17:11:5f:93:0a: a9:dd:0a:80:af:09:12:33:b9:bd:b6:67:83:fe:0f:70:62:97: 7d:0f:7a:0b:75:bd:8d:e2:17:0a:28:51:e7:83:1c:64:07:ad: 05:95:71:43:76:d8:69:6c:03:9d:4f:e8:8b:cc:ea:94:59:b7: 33:4c:a1:d8:fc:73:66:a2:3b:2d:87:3d:73:91:2a:a5:0d:08: 2a:0d:a4:19:ee:15:12:b9:6f:ca:2c:9b:1c:ef:70:e2:66:91: ce:2c:4f:83:c1:41:ea:cd:63:3c:d8:c7:28:27:7f:52:19:32: ad:7a:7e:4b:7d:ca:2a:8a:32:f9:d6:77:1f:c0:62:fc:4f:91: ee:38:85:8c:d0:d6:f4:44:98:33:83:ab:53:03:dc:2b:a6:1c: 94:83:c2:62:48:bf:c3:14:ca:bf:14:8d:36:44:b8:45:8a:d5: a5:f4:c8:ec:f0:1e:6f:2e:21:f5:ba:df:c0:97:ce:64:50:ec: d3:77:76:ce:47:59:e7:bc:27:88:38:66:24:37:4a:16:1b:ed: 26:d6:94:e4 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt57IH50EJwtRdJmOdfT0FNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjhlOWIyZWVmYjIwNTM0MjM4MmI2MDcyYTkwM2Y5ZDk4MzcwNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2lutfnZOJXgXfbstfLXKtRIYf8Z cqqhm5s8nSdSVwJuzuMkLLKrZFuCWETPhs57ay3iKeIseaIpff7/nlvWq5vzQE2A 5KIs9Tj9h72MjQY7PPgMOIlkdgB8c1HAbhL5lpR71Xv6tT5HzVSAX6OfOyRp5DcM S/NbGroIMAiny8lwzWKGHoK0k772OMeMhKX23MkbT1Pde4+ys4x1nxv6kjqRFUYg 9IIyCB4qBCmfVHzOyFfqAD8ACr5jUfkAO9/6qTcnLZWpUPNwyAa7XbCcpItKCv5E kb36oCAja9pdlyJ4o9jZrWmu/xfp9U2e/xcv/hjGEsxCJtFLtYly/HWuVwIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFGaOmy7vsgU0I4K2ByqQP52YNwcaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzRhMTMw NS0zOTFjLTQ0NmMtOWEzMy00YzA4ZmZlMTAwNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNGExMzA1 LTM5MWMtNDQ2Yy05YTMzLTRjMDhmZmUxMDA3Ni8xL1pvNmJMdS15QlRRamdyWUhL cEFfblpnM0J4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQEH4fgAwQELpSAAwQDU2FoAwQBW8OCAwQAW+aS AwQBW+26AwQAXD50AwQEbcRAAwQFsH3AAwQBwwLuMA0EAgACMAcDBQMqEylAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCsGDANBgkqhkiG9w0BAQsFAAOCAQEADGad EeKkSztK2NeLMQcGh/y5PcFyf+49cOPCWESgxNyU35WrPxc3+IbvyWcn0vu0eBcR X5MKqd0KgK8JEjO5vbZng/4PcGKXfQ96C3W9jeIXCihR54McZAetBZVxQ3bYaWwD nU/oi8zqlFm3M0yh2PxzZqI7LYc9c5EqpQ0IKg2kGe4VErlvyiybHO9w4maRzixP g8FB6s1jPNjHKCd/UhkyrXp+S33KKooy+dZ3H8Bi/E+R7jiFjNDW9ESYM4OrUwPc K6YclIPCYki/wxTKvxSNNkS4RYrVpfTI7PAeby4h9brfwJfOZFDs03d2zkdZ57wn iDhmJDdKFhvtJtaU5A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:40 2026 by rpki-client