This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer File: g-ZAPPcyIcEX6km8kjT-b0oR14A.cer (raw, json) Hash identifier: Nbh02UCR1oR2qeDbM9qpaipPN8tr7wwWS1Anr+ULhX8= Subject key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FFF7FE0B872BCA97BA20E4F99344E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.203.176.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ff:7f:e0:b8:72:bc:a9:7b:a2:0e:4f:99:34:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:da:d8:83:4c:39:f6:b4:e9:d5:10:58:6f: 2d:3e:3c:29:b0:84:84:c2:ef:cc:90:a0:2f:28:45: de:3f:19:b0:e8:15:9a:40:71:42:79:cc:01:0a:4d: 30:52:00:71:6a:58:a7:53:51:32:f0:ae:43:e9:ab: a6:7a:7c:e1:5d:4e:73:68:27:a4:64:46:ec:f3:85: a4:6d:6b:e0:49:68:46:31:a9:26:3b:54:7f:55:62: c8:1f:26:c6:71:7d:df:ca:18:bc:6e:a4:01:7f:2b: 34:c5:33:7d:88:bd:e5:e7:ce:63:7a:8f:c7:90:7b: 7e:9d:39:2f:ea:dd:03:38:e9:b7:3e:d6:f6:fe:b9: 5e:d3:32:f9:e5:99:77:2f:4a:cb:c1:a8:dc:5a:d1: 47:92:da:e5:5b:f4:a1:47:8d:0c:2e:36:79:7e:94: d8:58:c6:80:f5:b7:28:cb:9a:ec:81:ad:1f:72:64: ef:e9:e1:13:38:63:81:b2:38:ac:6a:b8:67:fc:f2: 89:50:ad:57:82:21:b0:21:03:b9:45:56:64:ce:ca: 05:84:b1:c7:d0:d4:f7:e0:41:7d:9f:e0:48:1e:06: e7:6c:f2:e7:20:74:0a:18:99:be:1a:14:16:a4:e0: 36:0e:1b:b7:15:ba:e7:dc:08:fd:54:a4:0a:50:d0: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.176.0/22 Signature Algorithm: sha256WithRSAEncryption 82:5f:86:f6:b7:3e:4a:77:dc:d0:6c:60:58:91:3c:d1:e7:21: b9:2c:0a:c6:49:bf:a6:c9:53:56:af:2a:4d:22:1a:b6:8c:ec: ac:bd:a1:64:38:42:83:86:a9:5e:63:03:ce:fa:66:db:1f:09: 21:aa:01:0e:79:65:e3:92:7a:e9:fb:4e:a2:be:6e:61:19:0b: ad:b7:2a:bb:e2:69:23:c2:5f:33:26:bc:b5:67:7e:c1:fb:73: 58:c6:47:b3:bb:12:c6:8d:a8:f0:c4:b7:cd:eb:0b:82:d5:65: 86:8d:02:45:8d:5c:55:13:b4:9f:12:40:ec:1d:ea:c9:7d:68: 3e:c3:17:ce:7b:fe:f7:a5:cf:af:6c:73:4f:2a:6b:3d:90:2e: 0b:17:36:d3:80:92:5b:31:65:f4:e3:e5:05:c2:8f:f4:b7:52: 54:8e:75:42:21:a9:c9:08:29:b3:2c:a1:4b:b4:46:9b:43:94: 70:e5:96:2f:fc:cc:10:a7:53:48:bb:ba:5f:93:63:cd:df:26: b6:75:87:f8:80:8e:2d:7c:57:ea:0a:5b:d4:d6:99:42:b2:ff: 81:98:09:2c:45:90:54:68:04:7b:40:5a:36:b1:e7:3a:89:8c: 72:58:5c:2f:a1:d3:6b:1e:81:f4:a6:2a:9e:ef:42:c2:4b:d6: e9:84:28:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8f/9/4LhyvKl7og5PmTROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2U2NDAzY2Y3MzIyMWMxMTdlYTQ5YmM5MjM0ZmU2ZjRhMTFkNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleXa2INMOfa06dUQWG8tPjwpsISE wu/MkKAvKEXePxmw6BWaQHFCecwBCk0wUgBxalinU1Ey8K5D6aumenzhXU5zaCek ZEbs84WkbWvgSWhGMakmO1R/VWLIHybGcX3fyhi8bqQBfys0xTN9iL3l585jeo/H kHt+nTkv6t0DOOm3Ptb2/rle0zL55Zl3L0rLwajcWtFHktrlW/ShR40MLjZ5fpTY WMaA9bcoy5rsga0fcmTv6eETOGOBsjisarhn/PKJUK1XgiGwIQO5RVZkzsoFhLHH 0NT34EF9n+BIHgbnbPLnIHQKGJm+GhQWpOA2Dhu3Fbrn3Aj9VKQKUNDk6QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIPmQDz3MiHBF+pJvJI0/m9KEdeAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzA5YzNi MS03MmViLTQzM2EtOTZjYi00ODc3N2FhOTYxZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMDljM2Ix LTcyZWItNDMzYS05NmNiLTQ4Nzc3YWE5NjFlOS8xL2ctWkFQUGN5SWNFWDZrbThr alQtYjBvUjE0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCucuwMA0GCSqGSIb3DQEBCwUAA4IBAQCCX4b2 tz5Kd9zQbGBYkTzR5yG5LArGSb+myVNWrypNIhq2jOysvaFkOEKDhqleYwPO+mbb HwkhqgEOeWXjknrp+06ivm5hGQuttyq74mkjwl8zJry1Z37B+3NYxkezuxLGjajw xLfN6wuC1WWGjQJFjVxVE7SfEkDsHerJfWg+wxfOe/73pc+vbHNPKms9kC4LFzbT gJJbMWX04+UFwo/0t1JUjnVCIanJCCmzLKFLtEabQ5Rw5ZYv/MwQp1NIu7pfk2PN 3ya2dYf4gI4tfFfqClvU1plCsv+BmAksRZBUaAR7QFo2sec6iYxyWFwvodNrHoH0 piqe70LCS9bphCjE -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:47 2026 by rpki-client