This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer File: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer (raw, json) Hash identifier: d2sQNnZfqdUO6HSykAQ9Udji/+LribacyfOPZktMzfM= Subject key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AA7E84122332AA8C4E892A5981F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201020 IP: 185.28.176.0/22 IP: 2a04:4000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:aa:7e:84:12:23:32:aa:8c:4e:89:2a:59:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66e3ed06e88e5591d9096676951555c0dc535c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8c:f9:0b:09:ac:0c:d1:ea:d2:20:01:a0:8e: 3e:4b:44:0b:21:74:4f:a4:fb:2e:16:ff:f7:66:48: ac:88:fa:7f:e2:85:d7:96:6c:22:9b:90:04:af:b5: 26:fe:8b:5c:53:d9:cd:fe:82:12:01:4c:9b:e8:6a: 93:dd:ca:8e:55:55:ef:e7:d6:29:bb:b5:9c:4c:9c: 7f:42:f4:39:d9:f0:00:d6:79:28:41:b8:b8:12:3b: b4:99:f2:a8:de:86:4e:a3:62:2a:2e:b7:2f:48:25: bb:17:4b:cb:89:9e:46:a9:e9:12:7f:20:a8:64:5d: ed:4c:63:5f:ec:97:5c:1a:13:61:39:96:ce:62:0b: 8e:ea:67:46:4b:a0:18:00:48:8e:2e:12:ae:51:db: 93:70:5c:6c:09:2b:ae:51:36:e1:43:a0:59:82:e2: 91:fd:74:24:e0:5f:bc:43:e8:d8:54:db:6d:96:0a: 55:2b:3b:1b:e1:a1:d3:15:1b:75:a4:17:48:51:f2: 56:58:33:1e:6b:73:b5:83:15:7a:ff:62:c9:9f:bd: 03:7b:6f:a7:d2:1f:bb:83:2f:a2:ce:60:1c:e0:3e: 44:e8:0f:f9:29:40:c8:52:b5:fc:4f:35:f2:02:7e: 86:2c:a2:5f:fc:b9:28:2c:cd:b1:64:a2:8e:5c:8f: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.176.0/22 IPv6: 2a04:4000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201020 Signature Algorithm: sha256WithRSAEncryption 8e:4d:72:66:37:30:4e:12:59:2a:3c:a7:1d:30:cf:09:f1:f3: fd:04:b1:67:10:e7:a7:50:71:be:47:86:9a:b7:4f:59:69:f2: 2d:bc:b0:a5:28:83:4a:70:0a:21:fb:99:58:03:44:08:45:43: 3e:3a:96:6f:77:95:f9:72:07:91:25:8b:29:8a:88:e7:a3:b0: d6:77:c3:71:d9:bc:c1:35:20:8d:6e:68:4f:33:cc:da:fb:9a: 42:a4:0c:02:fa:f5:f2:24:4a:33:b8:b0:02:19:e4:60:b4:83: a8:83:74:f1:78:2f:39:d8:6e:d3:14:38:a3:e1:a9:04:d5:cc: 42:ea:d1:d0:41:91:cc:1a:4c:a3:cc:6a:2e:73:80:ab:01:2e: 42:40:e7:15:28:6e:b0:bc:ed:ea:93:2b:e3:d8:ee:7c:0d:36: f6:0c:3d:24:47:d0:d0:f3:7d:f7:55:ea:2c:bb:6e:b3:7e:c5: ee:2c:d4:dd:7a:68:32:9e:df:3d:ac:72:47:f6:fc:86:8f:bc: f1:09:f5:b8:f7:5c:13:7a:a1:41:12:11:f7:02:40:96:43:7b: db:55:8e:08:71:1c:92:9b:e8:6f:42:ac:c3:8a:db:7d:50:98: a3:7c:f4:1b:2a:ef:08:fd:08:2a:8d:70:d0:c4:93:74:27:9b: 42:ed:6f:2b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yKp+hBIjMqqMTokqWYHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmUzZWQwNmU4OGU1NTkxZDkwOTY2NzY5NTE1NTVjMGRjNTM1YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoz5CwmsDNHq0iABoI4+S0QLIXRP pPsuFv/3ZkisiPp/4oXXlmwim5AEr7Um/otcU9nN/oISAUyb6GqT3cqOVVXv59Yp u7WcTJx/QvQ52fAA1nkoQbi4Eju0mfKo3oZOo2IqLrcvSCW7F0vLiZ5GqekSfyCo ZF3tTGNf7JdcGhNhOZbOYguO6mdGS6AYAEiOLhKuUduTcFxsCSuuUTbhQ6BZguKR /XQk4F+8Q+jYVNttlgpVKzsb4aHTFRt1pBdIUfJWWDMea3O1gxV6/2LJn70De2+n 0h+7gy+izmAc4D5E6A/5KUDIUrX8TzXyAn6GLKJf/LkoLM2xZKKOXI9/pQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGbj7QbojlWR2QlmdpUVVcDcU1wZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzhkNzU0 OC0wNzUzLTQwZGMtOGZiYi1kZTIxZjVmZWUzZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvOGQ3NTQ4 LTA3NTMtNDBkYy04ZmJiLWRlMjFmNWZlZTNkYi8xL1p1UHRCdWlPVlpIWkNXWjJs UlZWd054VFhCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRywMA0EAgACMAcDBQMqBEAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRPDANBgkqhkiG9w0BAQsFAAOCAQEAjk1yZjcwThJZ KjynHTDPCfHz/QSxZxDnp1BxvkeGmrdPWWnyLbywpSiDSnAKIfuZWANECEVDPjqW b3eV+XIHkSWLKYqI56Ow1nfDcdm8wTUgjW5oTzPM2vuaQqQMAvr18iRKM7iwAhnk YLSDqIN08XgvOdhu0xQ4o+GpBNXMQurR0EGRzBpMo8xqLnOAqwEuQkDnFShusLzt 6pMr49jufA029gw9JEfQ0PN991XqLLtus37F7izU3XpoMp7fPaxyR/b8ho+88Qn1 uPdcE3qhQRIR9wJAlkN721WOCHEckpvob0Ksw4rbfVCYo3z0GyrvCP0IKo1w0MST dCebQu1vKw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:02 2026 by rpki-client