This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer (raw, json) Hash identifier: BCQO3WNNGTgiSPnoaM4Mg47P4cemoe+ggCVxa6nHRI4= Subject key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC93E17C772BCB809E1590E8EEDC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204645 IP: 185.109.172.0/22 IP: 2a02:4e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c9:3e:17:c7:72:bc:b8:09:e1:59:0e:8e:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f04275253f967384c4973758a54b7fd085fe45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:74:2e:f5:11:e7:78:df:bd:dd:7f:3d:a1: 8a:d1:13:a3:7e:35:db:d4:a7:e3:f5:f1:2d:a9:6c: 42:0d:ba:63:86:4f:4d:d8:ce:c0:4c:58:b3:36:8c: 4b:32:d3:38:ac:aa:a6:83:78:61:7a:a9:80:f0:01: f9:7e:df:c4:31:50:b2:b8:a8:b9:08:59:f2:4f:72: 20:6f:2f:b7:b5:52:be:0b:95:ca:bd:1f:47:c2:6d: 93:4b:06:b9:a5:0c:72:dd:1c:89:e3:65:da:85:42: 45:8e:6d:a1:0a:cd:15:e4:2f:0a:c9:50:be:e4:77: ad:b1:e4:67:f6:a1:f2:1b:c1:88:b6:a6:0c:2e:2c: 37:24:96:b8:b0:59:2d:9e:99:3e:8f:85:0b:cc:14: 3d:27:ed:74:2a:5d:65:ce:39:a2:3b:5b:89:d3:71: 22:13:98:5b:66:e8:a7:25:3b:4b:a6:40:a2:9a:5c: ba:7c:14:5b:f3:a8:5c:20:c3:92:24:cf:fb:e9:08: 89:58:4f:c2:53:eb:1c:46:2b:ab:16:1b:ad:47:c5: 73:63:32:00:9a:63:15:6d:e0:19:b1:37:ac:ba:6b: 1d:c4:3a:7d:67:a5:13:c9:f6:04:4a:c8:ff:f3:fa: b3:33:c7:9d:d0:7d:4c:86:03:db:c6:94:ac:e7:37: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.172.0/22 IPv6: 2a02:4e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204645 Signature Algorithm: sha256WithRSAEncryption 24:e3:7d:45:2c:59:1b:fa:81:c8:b1:e7:7d:d2:11:45:3c:19: ed:58:63:23:e6:a3:e1:4e:f4:8d:95:0c:6b:76:c2:19:77:a1: 21:ff:95:83:ec:4c:27:93:57:08:b8:3b:df:d2:20:50:9e:1f: d0:10:01:50:15:6b:30:48:4b:e8:e2:c8:a6:b8:8a:8e:be:b4: ff:99:6a:57:fa:7e:47:6a:0f:fd:a5:cd:63:61:9e:22:7c:23: a0:14:ce:91:1a:ff:ba:fe:fb:86:37:a1:ce:da:e6:16:bf:ec: 7e:4e:db:52:3c:60:9c:e2:72:93:b0:3a:c9:b1:67:91:5d:8b: 46:93:ba:6c:96:51:a0:32:22:88:c3:15:7d:a6:8d:e3:83:46: e1:63:60:cb:bc:47:d3:18:d2:c4:3c:75:08:e0:a3:43:89:8a: e2:e1:c0:01:dd:e5:78:f8:bb:5e:d1:b9:c2:76:7c:fa:bc:82: 17:69:15:49:75:dd:31:91:36:9e:f7:7e:3e:28:07:64:ed:cf: 50:51:88:ab:ce:1d:fc:b6:a6:45:a5:21:4e:ec:f3:2b:21:b7: ef:6a:20:2b:f7:6e:47:78:50:b5:a2:d5:2b:27:e0:20:0b:02: 9b:d6:a0:27:7f:aa:40:4f:65:4c:19:ae:ee:20:fc:fb:3b:f7: d3:8b:20:e7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ysk+F8dyvLgJ4VkOju3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmYwNDI3NTI1M2Y5NjczODRjNDk3Mzc1OGE1NGI3ZmQwODVmZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiF0LvUR53jfvd1/PaGK0ROjfjXb 1Kfj9fEtqWxCDbpjhk9N2M7ATFizNoxLMtM4rKqmg3hheqmA8AH5ft/EMVCyuKi5 CFnyT3Igby+3tVK+C5XKvR9Hwm2TSwa5pQxy3RyJ42XahUJFjm2hCs0V5C8KyVC+ 5HetseRn9qHyG8GItqYMLiw3JJa4sFktnpk+j4ULzBQ9J+10Kl1lzjmiO1uJ03Ei E5hbZuinJTtLpkCimly6fBRb86hcIMOSJM/76QiJWE/CU+scRiurFhutR8VzYzIA mmMVbeAZsTesumsdxDp9Z6UTyfYESsj/8/qzM8ed0H1MhgPbxpSs5zed5wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGbwQnUlP5ZzhMSXN1ilS3/Qhf5FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzllMTZk Mi1kM2I5LTRlZmEtOWMzZC1lNDk2MTg1MmM4YjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvOWUxNmQy LWQzYjktNGVmYS05YzNkLWU0OTYxODUyYzhiNi8xL1p2QkNkU1VfbG5PRXhKYzNX S1ZMZjlDRl9rVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuW2sMA0EAgACMAcDBQAqAk6AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfZTANBgkqhkiG9w0BAQsFAAOCAQEAJON9RSxZG/qB yLHnfdIRRTwZ7VhjI+aj4U70jZUMa3bCGXehIf+Vg+xMJ5NXCLg739IgUJ4f0BAB UBVrMEhL6OLIpriKjr60/5lqV/p+R2oP/aXNY2GeInwjoBTOkRr/uv77hjehztrm Fr/sfk7bUjxgnOJyk7A6ybFnkV2LRpO6bJZRoDIiiMMVfaaN44NG4WNgy7xH0xjS xDx1COCjQ4mK4uHAAd3lePi7XtG5wnZ8+ryCF2kVSXXdMZE2nvd+PigHZO3PUFGI q84d/LamRaUhTuzzKyG372ogK/duR3hQtaLVKyfgIAsCm9agJ3+qQE9lTBmu7iD8 +zv304sg5w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:39 2026 by rpki-client