This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer (raw, json) Hash identifier: VHzlPqHQY4ak7Dml0c1jfEyY8auBN/3+nsoZx2PCQrY= Subject key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FB6DB29F6F43E0E4E684FF79EEE0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31182 IP: 146.66.134.0/23 IP: 193.8.139.0/24 IP: 193.56.181.0/24 IP: 2a14:5ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b6:db:29:f6:f4:3e:0e:4e:68:4f:f7:9e:ee:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6696fa3fe40cf770851c83adcafafb7a4107678f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:25:e0:7f:c0:34:a6:1c:46:f4:cd:ff:7a: 34:63:de:b8:69:72:16:c7:19:5b:23:7d:6b:e3:74: 6f:4a:06:3f:7f:e7:10:e6:d7:a9:06:67:8b:7e:39: 92:4d:10:0a:70:b1:a1:4e:cb:b0:ab:82:53:11:95: 89:b5:07:56:2e:92:28:16:f0:79:53:d7:1a:9d:2c: ad:f3:37:02:39:91:5d:bc:9c:d2:eb:4e:68:f1:cd: cf:5f:bd:a2:4b:f0:d9:f2:d0:5b:7b:c5:c3:51:55: 70:31:05:b6:98:3e:70:5b:d3:19:5d:f5:a5:a4:9b: 2a:be:46:fc:01:8a:bc:3b:e5:52:49:79:52:0e:40: 80:02:a2:75:83:b7:fb:98:07:bc:5a:1d:db:69:d7: c6:64:12:d1:57:1e:9b:96:9c:93:e3:5d:80:00:16: 44:f5:3f:12:01:69:cc:f9:11:a6:19:2e:5b:d5:28: 47:ca:08:11:56:b5:31:bd:45:bd:b4:01:0e:3b:45: 76:05:e0:a4:ef:32:c6:7a:23:b0:7e:e4:69:17:9b: b4:f8:6c:8c:83:4e:9c:3c:70:16:dd:83:90:6c:49: bc:4a:15:c9:62:9a:79:d5:39:67:09:08:ec:01:ad: bd:7f:1f:d6:b5:c4:bf:03:97:04:3a:f9:c9:fc:f7: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.134.0/23 193.8.139.0/24 193.56.181.0/24 IPv6: 2a14:5ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31182 Signature Algorithm: sha256WithRSAEncryption 29:b9:d9:d2:6b:a4:33:34:3c:e8:57:98:aa:ca:a0:f6:d5:3d: 21:37:8e:fc:7a:95:e8:88:1b:55:21:34:95:a1:78:a5:5d:66: 35:85:e0:55:40:ae:af:d7:d4:67:73:d7:93:2e:97:6e:58:06: ef:5f:d5:14:24:e4:0d:3f:8b:f3:5e:25:b4:a6:e2:20:0a:a5: f0:4b:91:7e:48:47:03:16:73:d8:82:9c:67:4c:54:e0:0e:20: 60:57:24:5a:d6:ba:47:fe:b0:6d:28:59:9a:c7:e5:4c:96:83: e2:a6:00:e7:5c:6c:22:85:75:7a:55:73:78:1a:c3:77:17:43: d8:d8:ad:8d:5a:b1:9c:11:e5:95:05:d3:2d:84:c2:94:5e:c8: af:26:05:be:af:ba:98:fd:d3:a0:02:17:16:6d:ec:02:5a:79: 8f:34:b9:01:03:6f:5b:78:f1:e7:94:2d:2f:47:34:7b:67:1f: 01:ab:cb:73:23:e3:40:ab:bb:f6:5c:f6:15:87:43:a1:5b:62: 88:77:5b:12:d5:05:fa:56:2c:bd:1d:8c:6e:cc:e0:95:09:5c: fe:47:12:f0:b7:d5:65:52:b2:dc:8d:dd:f5:b3:27:ae:ad:99: 62:a8:97:b0:ef:33:a0:a1:c7:af:7f:e7:30:11:d6:61:91:57: bc:09:3d:ca -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8f7bbKfb0Pg5OaE/3nu4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njk2ZmEzZmU0MGNmNzcwODUxYzgzYWRjYWZhZmI3YTQxMDc2NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vYl4H/ANKYcRvTN/3o0Y964aXIW xxlbI31r43RvSgY/f+cQ5tepBmeLfjmSTRAKcLGhTsuwq4JTEZWJtQdWLpIoFvB5 U9canSyt8zcCOZFdvJzS605o8c3PX72iS/DZ8tBbe8XDUVVwMQW2mD5wW9MZXfWl pJsqvkb8AYq8O+VSSXlSDkCAAqJ1g7f7mAe8Wh3badfGZBLRVx6blpyT412AABZE 9T8SAWnM+RGmGS5b1ShHyggRVrUxvUW9tAEOO0V2BeCk7zLGeiOwfuRpF5u0+GyM g06cPHAW3YOQbEm8ShXJYpp51TlnCQjsAa29fx/WtcS/A5cEOvnJ/Pcz4wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFGaW+j/kDPdwhRyDrcr6+3pBB2ePMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2U2NmFm ZS02ZTBiLTRkYmQtOGQwZC1jZTY5MTViNDczNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZTY2YWZl LTZlMGItNGRiZC04ZDBkLWNlNjkxNWI0NzM2Zi8xL1pwYjZQLVFNOTNDRkhJT3R5 dnI3ZWtFSFo0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBkkKGAwQAwQiLAwQAwTi1MA0EAgACMAcDBQMq FF7AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnnOMA0GCSqGSIb3DQEBCwUAA4IB AQApudnSa6QzNDzoV5iqyqD21T0hN478epXoiBtVITSVoXilXWY1heBVQK6v19Rn c9eTLpduWAbvX9UUJOQNP4vzXiW0puIgCqXwS5F+SEcDFnPYgpxnTFTgDiBgVyRa 1rpH/rBtKFmax+VMloPipgDnXGwihXV6VXN4GsN3F0PY2K2NWrGcEeWVBdMthMKU XsivJgW+r7qY/dOgAhcWbewCWnmPNLkBA29bePHnlC0vRzR7Zx8Bq8tzI+NAq7v2 XPYVh0OhW2KId1sS1QX6Viy9HYxuzOCVCVz+RxLwt9VlUrLcjd31syeurZliqJew 7zOgocevf+cwEdZhkVe8CT3K -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:50 2026 by rpki-client