This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer File: ZvmDE4lp-NpnT3tcATPgwtAptMg.cer (raw, json) Hash identifier: 8SZ/5s1ciIU+8T0v3o6XE9/WONdl40Z3uughHYIAj4g= Subject key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100A16EC7984D8E528D253423EB889 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61417 IP: 185.1.1.0/24 IP: 185.90.124.0/22 IP: 2001:7f8:72::/48 IP: 2a03:87a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0a:16:ec:79:84:d8:e5:28:d2:53:42:3e:b8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:5f:46:e7:f2:f3:cd:05:cc:48:d6:67:0b: d0:42:a1:1e:6f:87:df:f7:e9:5a:1b:fd:48:98:0f: a9:67:5f:d2:6d:7d:00:b0:29:cc:93:c3:2a:1e:56: f9:5c:f7:2c:2c:9c:8d:ff:71:e8:75:23:d5:9e:95: 8f:2c:fe:25:be:80:37:6e:45:86:4c:3f:2c:b9:e9: af:f4:a1:0c:5a:df:e2:bb:a3:fc:fc:24:2f:8d:36: 9c:1e:f7:7e:7c:86:6d:63:a8:89:ca:56:fa:ec:a4: 59:80:38:c7:2d:6e:ae:35:63:08:23:92:70:51:16: 3c:ff:7a:40:8c:90:d3:70:ec:a3:38:93:c9:f4:39: ed:af:ab:2c:8e:43:9a:f7:04:19:02:15:04:0a:b1: f7:fa:8b:38:50:ad:3b:63:28:ef:21:46:42:50:55: 96:7b:e4:c6:d5:0f:af:af:25:76:ad:19:1d:bf:ca: bc:f3:82:97:5e:7b:dd:c2:32:d1:db:a3:58:96:99: a8:65:e0:8d:95:af:c6:48:56:6d:47:80:f2:68:e6: 1b:5b:f5:39:19:c6:92:b5:07:11:8a:b0:45:72:64: ea:3e:4e:30:e6:ab:b3:76:5e:9c:12:eb:8b:fe:0e: 42:b9:f2:89:d9:ac:b8:1e:4e:2d:e2:52:b8:09:f9: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.1.0/24 185.90.124.0/22 IPv6: 2001:7f8:72::/48 2a03:87a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61417 Signature Algorithm: sha256WithRSAEncryption 1d:1f:60:c0:55:d8:45:af:40:5a:eb:51:69:9b:06:d8:da:da: 76:d1:3a:c8:6b:dd:a5:c6:2c:3e:65:98:bd:2d:dd:4b:f5:88: df:a8:19:97:32:ae:de:a1:3f:ef:72:47:35:5b:34:44:d8:78: 3f:c0:cb:05:88:8c:df:f5:c8:86:39:0b:55:50:ae:8a:12:fd: 0d:b0:e9:b4:93:d3:17:44:2e:c6:d1:0b:ad:7d:14:5a:62:95: dd:3b:9c:a3:0d:62:36:1f:9e:04:07:98:88:e1:20:7d:0d:4a: 2e:e8:33:87:2b:5a:1a:77:0c:ba:dd:0e:cc:c1:51:00:8c:8c: 86:00:18:59:c2:d9:2d:24:e7:96:1a:ae:8a:80:8c:c0:5e:e0: ac:da:0d:ac:e2:75:8c:f3:cf:38:2a:b6:41:27:e4:fe:43:83: b6:f7:0d:5e:49:fb:88:c4:53:97:5a:ff:a5:d7:09:eb:b6:de: 52:83:d0:c4:e9:3f:2f:ad:14:1e:18:be:ed:ef:48:ed:4a:97: c4:86:7b:50:08:f4:55:3e:16:bf:37:47:ce:c7:cd:b9:e2:5a: 23:92:0f:1b:4b:28:b6:73:26:20:d8:21:68:4f:c5:64:05:9d: 09:79:fa:b8:60:fd:7c:48:9f:d9:6a:fe:87:c4:35:d1:65:f7: 50:27:01:87 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt5EAoW7HmE2OUo0lNCPriJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY5ODMxMzg5NjlmOGRhNjc0ZjdiNWMwMTMzZTBjMmQwMjliNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6NfRufy880FzEjWZwvQQqEeb4ff 9+laG/1ImA+pZ1/SbX0AsCnMk8MqHlb5XPcsLJyN/3HodSPVnpWPLP4lvoA3bkWG TD8suemv9KEMWt/iu6P8/CQvjTacHvd+fIZtY6iJylb67KRZgDjHLW6uNWMII5Jw URY8/3pAjJDTcOyjOJPJ9Dntr6ssjkOa9wQZAhUECrH3+os4UK07YyjvIUZCUFWW e+TG1Q+vryV2rRkdv8q884KXXnvdwjLR26NYlpmoZeCNla/GSFZtR4DyaOYbW/U5 GcaStQcRirBFcmTqPk4w5quzdl6cEuuL/g5CufKJ2ay4Hk4t4lK4Cfnr5wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFGb5gxOJafjaZ097XAEz4MLQKbTIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2I4MTY5 Yi04YmZkLTQwZmYtYjliYS00MDMwNDMwNDgxMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYjgxNjli LThiZmQtNDBmZi1iOWJhLTQwMzA0MzA0ODExOC8xL1p2bURFNGxwLU5wblQzdGNB VFBnd3RBcHRNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAuQEBAwQCuVp8MBYEAgACMBADBwAgAQf4AHID BQAqA4egMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDv6TANBgkqhkiG9w0BAQsF AAOCAQEAHR9gwFXYRa9AWutRaZsG2NradtE6yGvdpcYsPmWYvS3dS/WI36gZlzKu 3qE/73JHNVs0RNh4P8DLBYiM3/XIhjkLVVCuihL9DbDptJPTF0QuxtELrX0UWmKV 3Tucow1iNh+eBAeYiOEgfQ1KLugzhytaGncMut0OzMFRAIyMhgAYWcLZLSTnlhqu ioCMwF7grNoNrOJ1jPPPOCq2QSfk/kODtvcNXkn7iMRTl1r/pdcJ67beUoPQxOk/ L60UHhi+7e9I7UqXxIZ7UAj0VT4WvzdHzsfNueJaI5IPG0sotnMmINghaE/FZAWd CXn6uGD9fEif2Wr+h8Q10WX3UCcBhw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:42 2026 by rpki-client