This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer File: zEDZYkKwgu_ltPIliCCzBZOWGY0.cer (raw, json) Hash identifier: NMHWBEqXjNCMq72EUp201+bwBaKu8uP7N4Q1PO5a28Q= Subject key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783468E392DA8FED262B9A69B8004F16 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.99.128.0/17 IP: 81.223.0.0/16 IP: 83.64.0.0/15 IP: 85.124.0.0/14 IP: 91.118.0.0/15 IP: 185.235.148.0/22 IP: 195.58.160.0/19 IP: 212.41.224.0/19 IP: 213.229.0.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:e3:92:da:8f:ed:26:2b:9a:69:b8:00:4f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc40d96242b082efe5b4f2258820b3059396198d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:6c:78:72:e6:53:ea:77:5e:26:e0:64:5c: df:63:46:df:c6:3d:0c:68:df:7e:7b:a3:10:60:0b: fd:fc:91:75:f3:9d:e2:97:f6:2c:b3:7b:8c:f7:82: 70:a5:04:1c:d7:e4:b0:7e:e8:1f:69:a1:3f:ca:70: 07:d6:ef:5f:a7:bd:33:62:c3:26:21:c3:ab:f6:b1: cb:4d:b0:51:18:60:1c:76:a7:c4:e3:98:8c:bb:14: 39:bb:ae:04:2d:26:6c:29:b0:bd:04:19:49:be:7c: 53:d9:1e:82:91:3c:4c:21:1a:ae:85:c1:fa:71:1c: dd:0d:e6:b9:de:ac:dd:49:35:37:d7:b8:63:44:15: 0a:8d:b4:76:41:c7:99:11:1f:fc:a0:0f:78:dc:48: 14:ea:19:5b:00:a3:ce:b8:b8:1a:85:ab:c6:12:b1: b4:26:d8:37:c8:6a:ca:ce:bb:e7:01:62:ce:78:71: f0:9c:61:47:95:fb:85:04:35:23:69:c0:f2:d5:4c: 2d:9d:6f:10:a9:9f:9c:08:65:a2:f4:11:d7:56:19: 69:45:f8:40:57:bf:27:88:f9:32:c6:f5:da:82:ca: 65:c8:fe:79:8c:a9:e6:a1:5c:e9:97:49:1a:6d:47: 53:81:fd:dc:88:68:29:11:70:85:f0:22:68:09:bf: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.99.128.0/17 81.223.0.0/16 83.64.0.0/15 85.124.0.0/14 91.118.0.0/15 185.235.148.0/22 195.58.160.0/19 212.41.224.0/19 213.229.0.0/18 Signature Algorithm: sha256WithRSAEncryption 38:9c:48:53:69:e9:23:8e:1e:64:9b:a9:e5:80:64:d4:e2:5d: 20:b1:c9:24:b8:89:fb:8c:e9:be:cb:49:6b:9f:57:ce:23:b1: bd:25:90:46:6e:65:11:db:0a:cb:b6:d7:75:30:f4:07:ca:b1: 14:f0:06:a8:bc:ce:2e:3f:60:44:8b:ee:46:1f:30:f0:ba:cd: 00:c4:4c:5a:d3:61:04:58:6a:aa:38:07:e2:58:02:df:b2:2c: 56:7a:75:69:30:90:34:de:44:5a:0d:23:6b:39:c5:2d:ff:3c: b5:c3:8a:a9:5c:e1:0f:86:de:9b:5a:c0:11:da:ca:ad:78:e2: af:14:ed:bf:75:45:30:12:74:64:b1:73:c5:93:fb:94:01:68: 6a:cd:d7:d3:d0:2d:19:85:1c:71:48:ff:e5:f7:3a:91:74:1a: c0:26:80:8e:3f:98:68:0c:24:ea:29:4b:1b:02:7e:9d:6b:02: f3:03:23:7b:f0:ac:91:65:40:26:24:47:a2:ff:a6:9f:b7:63: 81:68:41:96:59:e5:ab:b3:22:81:c1:4c:de:d8:84:6c:2a:8d: 3e:9f:df:e2:d7:cf:ad:74:72:df:6f:78:99:e6:db:78:d1:4d: 52:20:a5:6d:65:e6:c0:9a:13:b8:bd:48:4a:b5:c5:a2:b3:2a: 43:3c:0d:1b -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4NGjjktqP7SYrmmm4AE8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQwZDk2MjQyYjA4MmVmZTViNGYyMjU4ODIwYjMwNTkzOTYxOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDRseHLmU+p3XibgZFzfY0bfxj0M aN9+e6MQYAv9/JF1853il/Yss3uM94JwpQQc1+SwfugfaaE/ynAH1u9fp70zYsMm IcOr9rHLTbBRGGAcdqfE45iMuxQ5u64ELSZsKbC9BBlJvnxT2R6CkTxMIRquhcH6 cRzdDea53qzdSTU317hjRBUKjbR2QceZER/8oA943EgU6hlbAKPOuLgahavGErG0 Jtg3yGrKzrvnAWLOeHHwnGFHlfuFBDUjacDy1UwtnW8QqZ+cCGWi9BHXVhlpRfhA V78niPkyxvXagsplyP55jKnmoVzpl0kabUdTgf3ciGgpEXCF8CJoCb+QrwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFMxA2WJCsILv5bTyJYggswWTlhmNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzFhYTY5 Zi1kYjU1LTRmYmEtYmNlOS1jMWViZTYxNTQ5Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMWFhNjlm LWRiNTUtNGZiYS1iY2U5LWMxZWJlNjE1NDljYy8xL3pFRFpZa0t3Z3VfbHRQSWxp Q0N6QlpPV0dZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjA4BAIAATAyAwQHPmOAAwMAUd8DAwFTQAMDAlV8AwMBW3YDBAK5 65QDBAXDOqADBAXUKeADBAbV5QAwDQYJKoZIhvcNAQELBQADggEBADicSFNp6SOO HmSbqeWAZNTiXSCxySS4ifuM6b7LSWufV84jsb0lkEZuZRHbCsu213Uw9AfKsRTw Bqi8zi4/YESL7kYfMPC6zQDETFrTYQRYaqo4B+JYAt+yLFZ6dWkwkDTeRFoNI2s5 xS3/PLXDiqlc4Q+G3ptawBHayq144q8U7b91RTASdGSxc8WT+5QBaGrN19PQLRmF HHFI/+X3OpF0GsAmgI4/mGgMJOopSxsCfp1rAvMDI3vwrJFlQCYkR6L/pp+3Y4Fo QZZZ5auzIoHBTN7YhGwqjT6f3+LXz610ct9veJnm23jRTVIgpW1l5sCaE7i9SEq1 xaKzKkM8DRs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:32 2026 by rpki-client