This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer (raw, json) Hash identifier: ZTEPQei5hxI/NsO4AJYOLnBzeAtBQ7XUvWaD91a6YTQ= Subject key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A238E7C27800BD92BB23BF197DCC80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50266 IP: 5.132.0.0/17 IP: 31.201.0.0/16 IP: 37.143.80.0/21 IP: 85.144.0.0 -- 85.146.191.255 IP: 185.35.112.0/22 IP: 185.180.148.0/22 IP: 195.191.16.0/23 IP: 2a02:4240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:38:e7:c2:78:00:bd:92:bb:23:bf:19:7d:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:de:4e:1e:8f:7f:dd:e1:02:d1:f3:2a:d0: 75:95:ff:1f:fe:db:36:00:ed:33:69:dd:fa:c6:78: 5b:2a:ae:3a:1c:50:e8:12:3b:72:43:4a:ab:6d:1c: 32:25:f0:8f:f2:db:63:23:74:83:d6:22:c8:f3:ee: 09:84:f9:b3:c0:45:27:59:c7:75:7d:89:b0:41:86: 3e:a0:4a:ca:1e:34:a2:fd:70:20:1e:6e:64:7b:e3: 5c:2a:bb:b2:69:0e:8b:a0:d1:3e:ad:23:03:f4:84: 73:6a:04:11:be:5d:e2:9c:2a:10:4f:12:f8:19:64: 38:fe:73:7b:e6:1e:1c:c3:59:01:94:94:30:ad:18: e2:98:63:32:26:12:93:31:0c:1b:df:b2:43:b3:0d: 69:8d:48:63:dc:f7:1b:47:ed:54:8e:4a:91:82:43: f9:87:e2:ad:ae:02:cd:c1:24:94:6d:33:0e:cb:78: 58:7a:c9:89:bd:2b:3c:30:bb:d4:0e:83:a6:4f:85: 64:90:88:fd:0f:44:ac:70:15:9c:f2:d6:a4:15:b6: a7:53:75:c6:42:86:c2:2e:82:e2:7b:37:56:db:16: 56:48:3b:ad:30:4d:45:bd:c0:97:f8:ad:86:44:af: b9:69:f6:46:8b:50:0e:85:4a:e3:46:17:d6:ee:d7: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.132.0.0/17 31.201.0.0/16 37.143.80.0/21 85.144.0.0-85.146.191.255 185.35.112.0/22 185.180.148.0/22 195.191.16.0/23 IPv6: 2a02:4240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50266 Signature Algorithm: sha256WithRSAEncryption 28:00:4f:2d:d2:cf:84:e7:3c:b8:c0:e3:e1:c4:30:27:bc:04: e3:40:f8:03:11:80:f8:72:b7:59:17:fe:05:50:ca:73:0a:61: d1:e9:f9:93:3c:d4:40:4a:c3:c9:7d:8c:30:8b:dd:99:62:eb: 48:37:6f:5d:3b:3c:c7:0b:16:07:91:2e:a2:a7:42:7e:cb:a1: 5e:bf:53:9b:08:e9:ec:b3:ef:96:cc:e0:cf:bf:b7:15:67:2b: 0f:d9:b8:a3:a5:d5:42:fd:72:16:37:80:5f:91:5b:69:f8:cd: 64:cf:37:80:c2:11:f8:13:3c:62:2b:81:f4:32:73:f5:26:c3: 35:35:35:30:c5:73:37:68:32:e5:83:9a:f6:0c:4d:2d:77:64: 00:0f:b4:f4:97:96:e0:44:4d:ae:f3:89:9a:2f:4a:c6:c6:fb: 45:0c:b1:69:ce:53:00:09:ef:7f:83:70:b3:8a:e0:d2:57:76: 7f:c7:e0:d9:3e:79:f2:ef:96:fc:91:e1:0a:eb:19:20:ae:e0: 0b:e7:33:f5:5c:06:4f:b4:4e:b6:4e:03:15:83:ac:d3:66:5f: c9:dd:82:13:ad:6a:ee:e2:92:a0:fc:c5:2d:42:ff:db:27:68: f5:f2:84:e3:ca:40:3e:f6:19:43:09:19:47:2a:bf:42:cb:89: fc:0e:ae:cd -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt4ojjnwngAvZK7I78ZfcyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZmMWU2YTVjYzNjMDY5NzYyOWY0YWZiYjBiMDdhZTc5MTMzYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpPeTh6Pf93hAtHzKtB1lf8f/ts2 AO0zad36xnhbKq46HFDoEjtyQ0qrbRwyJfCP8ttjI3SD1iLI8+4JhPmzwEUnWcd1 fYmwQYY+oErKHjSi/XAgHm5ke+NcKruyaQ6LoNE+rSMD9IRzagQRvl3inCoQTxL4 GWQ4/nN75h4cw1kBlJQwrRjimGMyJhKTMQwb37JDsw1pjUhj3PcbR+1UjkqRgkP5 h+KtrgLNwSSUbTMOy3hYesmJvSs8MLvUDoOmT4VkkIj9D0SscBWc8takFbanU3XG QobCLoLiezdW2xZWSDutME1FvcCX+K2GRK+5afZGi1AOhUrjRhfW7tcg0QIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFGb/Hmpcw8Bpdin0r7sLB655EzxcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzA3ZDVl Yi02MjExLTRkN2EtYTk2ZC1lZTQyNzQ1ZDhmZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMDdkNWVi LTYyMTEtNGQ3YS1hOTZkLWVlNDI3NDVkOGZkMS8xL1p2OGVhbHpEd0dsMktmU3Z1 d3NIcm5rVFBGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQHBYQAAwMAH8kDBAMlj1AwCwMDBFWQAwQGVZKA AwQCuSNwAwQCubSUAwQBw78QMA0EAgACMAcDBQAqAkJAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDEWjANBgkqhkiG9w0BAQsFAAOCAQEAKABPLdLPhOc8uMDj4cQw J7wE40D4AxGA+HK3WRf+BVDKcwph0en5kzzUQErDyX2MMIvdmWLrSDdvXTs8xwsW B5EuoqdCfsuhXr9Tmwjp7LPvlszgz7+3FWcrD9m4o6XVQv1yFjeAX5FbafjNZM83 gMIR+BM8YiuB9DJz9SbDNTU1MMVzN2gy5YOa9gxNLXdkAA+09JeW4ERNrvOJmi9K xsb7RQyxac5TAAnvf4Nws4rg0ld2f8fg2T558u+W/JHhCusZIK7gC+cz9VwGT7RO tk4DFYOs02Zfyd2CE61q7uKSoPzFLUL/2ydo9fKE48pAPvYZQwkZRyq/QsuJ/A6u zQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:39 2026 by rpki-client