This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer File: ZtM30zC6RO_P71VTVRMqaixpeDw.cer (raw, json) Hash identifier: Ts3Gu1coXg3HUyzM/EXhi88ltdFCE9V0nK7i63YmpKc= Subject key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF183A503264EE33D260D554F9C8574 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9147 AS: 51130 AS: 202697 AS: 206635 IP: 185.176.56.0/22 IP: 212.86.64.0/19 IP: 2a05:6600::/29 IP: 2a06:8d00::/29 IP: 2a07:9a80::/29 IP: 2a0a:c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:83:a5:03:26:4e:e3:3d:26:0d:55:4f:9c:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d337d330ba44efcfef555355132a6a2c69783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:d1:62:be:02:b8:8a:8e:82:73:1a:aa:3c: ed:e5:59:11:9c:c8:78:12:b6:1e:cc:fe:c3:5e:bc: d2:2e:f4:84:e6:82:43:9e:d0:cf:1d:ba:34:3c:d6: 91:64:00:68:25:f4:db:b0:57:9e:fc:22:d6:3b:12: 1b:af:1c:68:87:30:6c:e1:cc:53:eb:45:47:df:19: 9f:62:f1:57:4a:a4:de:d2:13:2d:ca:d2:fa:bb:b2: ee:62:0a:52:15:da:33:32:7f:60:82:e9:8e:ee:da: 85:9b:fc:4d:dc:e2:13:b4:f9:27:f2:15:4c:cc:47: de:e2:65:73:f9:26:a9:7f:18:e9:f9:45:d7:5f:a7: 16:94:f5:c0:91:f6:8e:99:b5:48:f4:42:11:45:89: d5:c3:ec:ff:c6:cd:eb:2e:c9:1c:e4:f6:69:5b:01: 25:a2:75:1f:64:ef:d8:b7:13:cf:e5:e2:24:c4:c1: 97:3b:6d:c5:47:98:73:06:69:1d:cd:53:b3:f2:a1: 06:af:bb:6f:68:cd:11:ec:35:88:2b:22:06:ea:32: 13:31:2e:96:45:8f:5e:d8:56:6d:be:6b:29:1a:b3: 17:11:60:89:dc:4a:06:42:53:79:c5:57:be:79:0c: c4:d2:c2:8d:88:67:b0:fb:32:c6:02:ea:6c:df:d9: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.56.0/22 212.86.64.0/19 IPv6: 2a05:6600::/29 2a06:8d00::/29 2a07:9a80::/29 2a0a:c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9147 51130 202697 206635 Signature Algorithm: sha256WithRSAEncryption 61:a0:3f:8a:05:3a:d4:33:09:56:42:76:7b:72:1e:68:5a:17: c5:35:d8:5e:2c:6b:8e:25:4e:25:75:db:82:56:b1:e7:a5:8c: ec:58:40:23:83:c9:44:35:77:8c:10:39:35:6a:9f:c8:78:86: 11:cd:a7:48:9b:c5:1f:14:b4:85:83:78:e8:70:5b:7b:ab:7b: 62:a1:25:27:0a:35:74:d3:46:cc:b3:cc:66:88:8e:36:86:fd: c4:90:17:2d:50:80:81:c4:6b:ea:3a:c0:ab:27:2b:06:d4:7c: d0:a8:88:18:83:93:92:0b:23:01:f1:b2:b7:bf:32:13:29:0a: 4e:a3:4d:c7:af:66:73:b3:4f:59:2a:b4:30:8a:28:2f:2e:57: 56:f1:82:c0:92:85:8b:e9:06:59:93:e8:31:f0:4a:d8:f3:2b: 4f:f2:90:be:46:27:ef:6e:cf:0d:84:cc:cc:de:83:0a:08:86: 1f:58:a7:7c:80:34:ed:f2:34:59:37:0e:18:df:46:d0:00:ca: 68:d0:95:4d:d5:59:b3:4c:eb:0e:18:7f:be:92:00:47:7e:c6: 3c:a6:79:08:b5:79:6a:13:1d:8d:c3:0e:77:fa:b0:bf:8d:53: 13:fc:0c:5e:09:1d:3c:01:23:9c:fd:23:1f:c2:54:13:f5:53: c3:3c:0b:70 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt/8YOlAyZO4z0mDVVPnIV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQzMzdkMzMwYmE0NGVmY2ZlZjU1NTM1NTEzMmE2YTJjNjk3ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPjRYr4CuIqOgnMaqjzt5VkRnMh4 ErYezP7DXrzSLvSE5oJDntDPHbo0PNaRZABoJfTbsFee/CLWOxIbrxxohzBs4cxT 60VH3xmfYvFXSqTe0hMtytL6u7LuYgpSFdozMn9ggumO7tqFm/xN3OITtPkn8hVM zEfe4mVz+Sapfxjp+UXXX6cWlPXAkfaOmbVI9EIRRYnVw+z/xs3rLskc5PZpWwEl onUfZO/YtxPP5eIkxMGXO23FR5hzBmkdzVOz8qEGr7tvaM0R7DWIKyIG6jITMS6W RY9e2FZtvmspGrMXEWCJ3EoGQlN5xVe+eQzE0sKNiGew+zLGAups39mmlwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFGbTN9MwukTvz+9VU1UTKmosaXg8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzJiNWU3 Yy02N2IxLTQ3N2QtODk1Zi04ZjVmYzkyMTI1ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMmI1ZTdj LTY3YjEtNDc3ZC04OTVmLThmNWZjOTIxMjVkYi8xL1p0TTMwekM2Uk9fUDcxVlRW Uk1xYWl4cGVEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODASBAIAATAMAwQCubA4AwQF1FZAMCIEAgACMBwDBQMqBWYAAwUD KgaNAAMFAyoHmoADBQMqCgyAMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAiO7AgMA x7oCAwMXyQIDAycrMA0GCSqGSIb3DQEBCwUAA4IBAQBhoD+KBTrUMwlWQnZ7ch5o WhfFNdheLGuOJU4ldduCVrHnpYzsWEAjg8lENXeMEDk1ap/IeIYRzadIm8UfFLSF g3jocFt7q3tioSUnCjV000bMs8xmiI42hv3EkBctUICBxGvqOsCrJysG1HzQqIgY g5OSCyMB8bK3vzITKQpOo03Hr2Zzs09ZKrQwiigvLldW8YLAkoWL6QZZk+gx8ErY 8ytP8pC+Rifvbs8NhMzM3oMKCIYfWKd8gDTt8jRZNw4Y30bQAMpo0JVN1VmzTOsO GH++kgBHfsY8pnkItXlqEx2Nww53+rC/jVMT/AxeCR08ASOc/SMfwlQT9VPDPAtw -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:14 2026 by rpki-client