This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer (raw, json) Hash identifier: XKu+W1qlcJgMAykk1B2xXJPaWjrsImVZFxrfAMu3JTA= Subject key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4C7FC223DED4CDE9BDA0726C15C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197465 IP: 46.23.240.0/20 IP: 2a02:5000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4c:7f:c2:23:de:d4:cd:e9:bd:a0:72:6c:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f90e75df98afb43019ce750350e769b99fbc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:84:68:c3:2d:0e:bc:3f:4c:5a:63:00:d1: b5:5e:9c:37:ad:b4:08:87:3c:73:83:9f:0d:84:1d: e4:d4:76:5d:2c:be:d3:a0:58:1e:01:f7:95:48:ec: 5a:ac:58:2a:62:fd:6a:4f:bd:21:2f:0c:84:cf:4e: fc:3c:7f:28:0c:74:6c:79:28:20:bd:fa:70:6c:75: 5a:d1:56:39:d8:e1:32:63:1b:f3:f6:00:6d:40:28: 29:00:c1:56:05:78:e6:e7:e5:6a:cc:58:e0:cf:32: 1d:78:36:ea:3e:2b:a5:4a:0f:b7:12:60:fd:78:dc: 7f:96:ba:c9:2e:fa:59:2c:9c:67:e6:16:78:8c:60: 74:40:a7:f2:64:4b:c2:d4:9d:b1:80:3b:29:da:81: 95:97:0d:90:a5:00:d0:61:ae:3b:a2:66:c5:b6:8f: 5a:19:5b:6f:e5:57:4b:58:60:24:4c:df:15:97:53: e4:07:6d:5a:af:09:73:85:8a:50:7f:e3:96:3e:d8: 65:4d:f1:27:4b:2b:77:90:71:7c:54:b2:90:d7:0c: 6a:b5:df:88:cd:92:41:81:09:1f:ad:3f:bd:15:10: 3b:5e:34:39:53:65:83:bf:44:83:ec:d4:7f:a8:4e: 85:df:bc:f2:85:67:b4:ef:a5:2a:3a:5f:03:ed:38: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.240.0/20 IPv6: 2a02:5000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197465 Signature Algorithm: sha256WithRSAEncryption 95:94:70:16:8f:54:bc:f9:a0:cf:04:2d:85:64:2d:bc:54:0e: 3f:c1:63:1c:c3:e6:ec:c8:40:35:6e:3b:24:2f:14:d5:74:e8: 57:8e:1a:17:a1:80:8d:c9:7e:7d:22:4a:b9:03:32:7f:d1:b8: 08:4e:6d:00:f7:a4:0d:af:09:5a:79:bb:66:d7:f1:a6:e3:ef: 04:e6:2d:5f:7e:83:25:6e:7a:52:88:80:ee:d5:a7:ea:2c:db: 98:63:26:ee:2c:13:dc:9b:0c:de:20:59:44:0c:63:c3:5e:1f: 01:bb:ae:45:b8:a0:81:75:05:4a:a6:d2:4d:e1:e6:2a:86:34: 66:0f:21:7c:49:0e:0e:4b:60:70:62:d6:16:01:6b:f6:63:5a: 24:37:fb:54:8c:06:d4:10:0e:96:ec:0e:d7:17:3f:eb:98:1a: 48:be:e8:17:77:7e:a2:16:7a:62:a5:06:4b:5e:55:a3:21:ad: 28:00:a6:0e:61:2d:3b:15:d6:a4:a2:b9:57:05:f3:d6:64:d2: 0c:fa:a1:36:65:3e:db:bb:08:84:16:98:13:b7:73:8c:ec:a1: 00:46:2e:85:b2:f7:79:7c:90:01:5a:b6:03:0e:31:db:99:08: 0d:b0:f6:d9:b7:a1:9e:94:d5:de:5f:d8:fd:4e:41:bc:15:b0: 5b:67:53:5d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87Ux/wiPe1M3pvaBybBXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY5MGU3NWRmOThhZmI0MzAxOWNlNzUwMzUwZTc2OWI5OWZiYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6EaMMtDrw/TFpjANG1Xpw3rbQI hzxzg58NhB3k1HZdLL7ToFgeAfeVSOxarFgqYv1qT70hLwyEz078PH8oDHRseSgg vfpwbHVa0VY52OEyYxvz9gBtQCgpAMFWBXjm5+VqzFjgzzIdeDbqPiulSg+3EmD9 eNx/lrrJLvpZLJxn5hZ4jGB0QKfyZEvC1J2xgDsp2oGVlw2QpQDQYa47ombFto9a GVtv5VdLWGAkTN8Vl1PkB21arwlzhYpQf+OWPthlTfEnSyt3kHF8VLKQ1wxqtd+I zZJBgQkfrT+9FRA7XjQ5U2WDv0SD7NR/qE6F37zyhWe076UqOl8D7TgZGQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGb5DnXfmK+0MBnOdQNQ52m5n7wTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzVhNjk4 ZC05OThhLTQ4YmEtOGRjNS0zMzNmMGM5OTI3OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNWE2OThk LTk5OGEtNDhiYS04ZGM1LTMzM2YwYzk5Mjc5ZS8xL1p2a09kZC1ZcjdRd0djNTFB MURuYWJtZnZCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQELhfwMA0EAgACMAcDBQAqAlAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMDWTANBgkqhkiG9w0BAQsFAAOCAQEAlZRwFo9UvPmg zwQthWQtvFQOP8FjHMPm7MhANW47JC8U1XToV44aF6GAjcl+fSJKuQMyf9G4CE5t APekDa8JWnm7ZtfxpuPvBOYtX36DJW56UoiA7tWn6izbmGMm7iwT3JsM3iBZRAxj w14fAbuuRbiggXUFSqbSTeHmKoY0Zg8hfEkODktgcGLWFgFr9mNaJDf7VIwG1BAO luwO1xc/65gaSL7oF3d+ohZ6YqUGS15VoyGtKACmDmEtOxXWpKK5VwXz1mTSDPqh NmU+27sIhBaYE7dzjOyhAEYuhbL3eXyQAVq2Aw4x25kIDbD22behnpTV3l/Y/U5B vBWwW2dTXQ== -----END CERTIFICATE-----Generated at Wed Jan 28 22:07:38 2026 by rpki-client