This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer File: ZtYtu574eixrGodeUq8TKIRpclo.cer (raw, json) Hash identifier: fxRLgp+vLo5BKl3IIyO/3s5umHcpy41lSgr6IMkoo08= Subject key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C29DD471624D5D2515BBBFC3E17F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31067 IP: 82.119.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:9d:d4:71:62:4d:5d:25:15:bb:bf:c3:e1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:d0:c5:38:a2:ea:12:56:90:1e:6b:9b:cf: b7:b8:ab:77:00:3b:9d:2d:f8:77:65:34:b9:72:1c: c4:d7:31:90:da:b2:9b:04:3e:4a:dd:52:68:be:eb: de:12:93:88:06:10:7f:52:0b:0b:2b:12:23:c5:10: 2c:e4:2e:b6:83:f3:2c:a0:13:78:5a:dc:9b:bf:6c: de:12:1c:01:ac:3f:0d:70:4d:00:97:43:e1:99:6d: cb:48:80:dd:a5:3e:fa:31:df:dc:ec:63:e3:df:5f: a1:d1:1d:ee:70:26:6e:22:7d:fa:f0:4a:25:e7:11: ae:41:f4:5a:65:eb:b9:f9:b9:27:9b:15:ad:22:a2: ca:b5:68:70:28:40:b2:72:0f:72:5d:c3:2d:bb:e7: c6:f9:6a:75:54:86:1f:c0:9a:90:07:d7:15:e0:c5: 51:4d:7d:02:9d:9f:5c:f8:bd:a6:0c:ab:eb:1d:b3: 66:aa:42:01:18:7d:4a:65:01:9d:ec:4c:5d:f1:ae: 7a:3e:49:ab:79:2a:b1:e9:be:a4:7a:21:1d:38:df: a6:f7:46:49:60:47:46:0e:9b:cb:df:84:b8:a7:00: fd:d6:24:96:c6:ac:3b:c0:f8:de:80:6f:af:01:de: 9a:9f:75:e9:07:56:65:4b:5a:53:97:f0:40:9c:f9: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31067 Signature Algorithm: sha256WithRSAEncryption 1b:3a:16:9d:81:da:2f:43:58:ce:d3:60:ac:ee:5d:5c:7e:5e: af:9d:44:f2:5e:f7:38:f5:f9:9a:60:08:94:4a:54:1e:f2:15: bd:db:6b:3a:23:5a:9f:f5:a7:bd:2d:6d:9e:7b:1b:f3:8a:a8: fc:40:52:0e:d1:5a:13:f8:48:6b:84:0d:9b:87:f1:70:f6:d8: 87:91:d5:43:19:67:a9:c4:f9:16:49:fe:12:fe:3e:54:33:1e: eb:47:2f:bc:ad:70:c1:98:2f:59:f5:ac:97:5c:56:b3:35:95: 51:aa:79:0a:07:b1:7f:36:77:22:bb:1f:99:4a:e8:5b:e4:5d: e8:80:59:1d:ae:a3:6e:79:29:11:49:74:6d:a9:fa:27:5c:6d: fe:91:f0:40:8a:a0:ae:bf:cb:e3:d6:0d:f8:16:b0:38:a9:78: 00:1d:9e:94:44:93:8b:b2:d9:da:e3:6c:c9:b5:dc:33:67:a3: 08:a8:dd:af:5e:9f:b1:68:98:f2:fd:5c:54:e6:f2:ee:79:1e: ec:ed:42:92:85:1d:ad:84:15:67:bb:4f:32:5c:36:75:03:fb: 42:38:79:b7:61:52:e2:62:dd:be:03:4c:2c:d5:55:35:27:ec: 0e:72:50:73:26:1a:ee:49:45:c9:dd:23:f6:61:ef:10:9c:bc: ee:0e:73:1a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3WMKd1HFiTV0lFbu/w+F/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ2MmRiYjllZjg3YTJjNmIxYTg3NWU1MmFmMTMyODg0Njk3MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LjQxTii6hJWkB5rm8+3uKt3ADud Lfh3ZTS5chzE1zGQ2rKbBD5K3VJovuveEpOIBhB/UgsLKxIjxRAs5C62g/MsoBN4 Wtybv2zeEhwBrD8NcE0Al0PhmW3LSIDdpT76Md/c7GPj31+h0R3ucCZuIn368Eol 5xGuQfRaZeu5+bknmxWtIqLKtWhwKECycg9yXcMtu+fG+Wp1VIYfwJqQB9cV4MVR TX0CnZ9c+L2mDKvrHbNmqkIBGH1KZQGd7Exd8a56PkmreSqx6b6keiEdON+m90ZJ YEdGDpvL34S4pwD91iSWxqw7wPjegG+vAd6an3XpB1ZlS1pTl/BAnPncGwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGbWLbue+HosaxqHXlKvEyiEaXJaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzMxNDc3 YS0zYTk1LTQ1NTItYjVjYi05ZjQxY2FjZTUwYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvMzE0Nzdh LTNhOTUtNDU1Mi1iNWNiLTlmNDFjYWNlNTBhYS8xL1p0WXR1NTc0ZWl4ckdvZGVV cThUS0lScGNsby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFUncgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnlbMA0GCSqGSIb3DQEBCwUAA4IBAQAbOhadgdovQ1jO02Cs7l1cfl6vnUTyXvc4 9fmaYAiUSlQe8hW922s6I1qf9ae9LW2eexvziqj8QFIO0VoT+EhrhA2bh/Fw9tiH kdVDGWepxPkWSf4S/j5UMx7rRy+8rXDBmC9Z9ayXXFazNZVRqnkKB7F/Nnciux+Z Suhb5F3ogFkdrqNueSkRSXRtqfonXG3+kfBAiqCuv8vj1g34FrA4qXgAHZ6URJOL stna42zJtdwzZ6MIqN2vXp+xaJjy/VxU5vLueR7s7UKShR2thBVnu08yXDZ1A/tC OHm3YVLiYt2+A0ws1VU1J+wOclBzJhruSUXJ3SP2Ye8QnLzuDnMa -----END CERTIFICATE-----Generated at Tue Jan 27 08:50:45 2026 by rpki-client