This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer File: zEH27mce6lNY5xzn_BHJNsw3bGE.cer (raw, json) Hash identifier: VlwBq2MpAswdOyvurNUVxRxso2sHfZcl0hcx68o176Q= Subject key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1CA5F6A90FC72F5B1550D5D006884 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44776 IP: 85.158.12.0/22 IP: 93.94.64.0/21 IP: 2a02:110::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ca:5f:6a:90:fc:72:f5:b1:55:0d:5d:00:68:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:8f:f7:44:28:3a:e1:99:b7:6e:75:c7:4a: 5b:53:8a:81:fa:bd:6b:d7:98:53:4b:ae:4a:f3:42: d6:e6:c5:f1:38:57:0d:95:a9:4a:a5:2c:3c:9b:87: 53:f4:7b:18:2b:0a:47:ba:f1:cc:dc:7c:fe:bb:60: ba:1c:1f:71:04:68:0a:bf:d1:1d:c9:72:0b:aa:71: 65:72:b7:65:29:c6:09:a7:a0:31:fe:4d:cb:52:03: 9e:05:31:eb:b6:d9:eb:16:5e:a8:b7:62:c9:91:2d: 9b:26:59:3e:5f:51:ad:57:3c:76:b3:e2:3d:fe:fc: 38:cd:a0:4c:5e:58:6a:66:38:12:8c:53:e5:c4:a3: 3a:83:0f:44:0a:d1:16:fd:bb:58:83:d8:73:69:47: fd:ac:7e:c1:3f:ed:e1:2d:33:ce:8e:f7:0a:ae:22: 92:aa:19:01:05:02:76:d5:dd:60:93:60:63:ab:34: 58:fd:7b:5a:14:b7:a5:be:ef:94:bc:94:c0:b6:a6: 16:5a:f6:0d:03:d1:4b:94:46:e6:7a:43:b2:93:bc: c0:3f:05:1d:ae:76:32:dc:84:20:07:ee:d9:df:d8: c8:64:74:de:66:4c:76:e4:a9:44:7f:3e:22:63:c2: a4:77:30:71:a5:ec:13:ce:3e:fc:99:03:81:71:dc: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.12.0/22 93.94.64.0/21 IPv6: 2a02:110::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44776 Signature Algorithm: sha256WithRSAEncryption 72:17:c9:d4:12:84:ec:59:5c:1f:0c:63:e9:96:66:29:03:ff: de:57:46:7b:ad:53:68:d9:98:34:94:36:99:65:90:e5:59:5b: b4:9b:7f:96:cc:08:43:8b:a2:b6:ae:a4:0c:2a:5c:08:fa:e0: 30:06:7b:8e:6b:86:68:64:61:51:a8:f1:4a:49:77:7a:c9:d8: 1b:28:5d:75:da:92:6f:57:d9:63:ad:cf:47:56:bd:e5:6a:8d: 59:9b:28:54:46:01:ea:49:f6:cc:ca:83:05:dd:98:fe:8c:2c: 20:54:ad:5d:2c:91:7b:4d:63:46:6e:04:50:d5:04:5e:3f:0d: 0c:7c:fa:84:3b:ac:48:07:64:f3:37:ca:f7:dd:be:51:4d:7f: a9:db:92:54:bd:4f:9e:91:bb:13:51:48:de:4d:5f:24:f5:27: ee:69:1d:50:52:5f:69:c7:63:a9:43:99:b9:c0:5b:3c:ce:21: 55:82:0e:2e:a7:5a:ed:13:42:f1:b6:4e:28:61:12:83:ce:76: f8:e7:16:72:4f:77:be:96:6a:f8:e3:6b:df:96:85:64:a5:1a: ed:ba:ba:fa:ae:63:5e:5d:0a:d9:82:12:5b:3c:e5:a4:19:eb: 73:7d:29:3d:ca:55:c2:00:dc:bd:34:00:e3:c6:36:63:88:f8: af:4c:90:5f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8cpfapD8cvWxVQ1dAGiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQxZjZlZTY3MWVlYTUzNThlNzFjZTdmYzExYzkzNmNjMzc2YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoKP90QoOuGZt251x0pbU4qB+r1r 15hTS65K80LW5sXxOFcNlalKpSw8m4dT9HsYKwpHuvHM3Hz+u2C6HB9xBGgKv9Ed yXILqnFlcrdlKcYJp6Ax/k3LUgOeBTHrttnrFl6ot2LJkS2bJlk+X1GtVzx2s+I9 /vw4zaBMXlhqZjgSjFPlxKM6gw9ECtEW/btYg9hzaUf9rH7BP+3hLTPOjvcKriKS qhkBBQJ21d1gk2BjqzRY/XtaFLelvu+UvJTAtqYWWvYNA9FLlEbmekOyk7zAPwUd rnYy3IQgB+7Z39jIZHTeZkx25KlEfz4iY8KkdzBxpewTzj78mQOBcdyljwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMxB9u5nHupTWOcc5/wRyTbMN2xhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0Lzg4NTdh My1kYTFlLTQ1NDktYWVjMC02ZjJlNzlkODI3ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvODg1N2Ez LWRhMWUtNDU0OS1hZWMwLTZmMmU3OWQ4MjdlMC8xL3pFSDI3bWNlNmxOWTV4em5f QkhKTnN3M2JHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVZ4MAwQDXV5AMA0EAgACMAcDBQAqAgEQMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCu6DANBgkqhkiG9w0BAQsFAAOCAQEAchfJ 1BKE7FlcHwxj6ZZmKQP/3ldGe61TaNmYNJQ2mWWQ5VlbtJt/lswIQ4uitq6kDCpc CPrgMAZ7jmuGaGRhUajxSkl3esnYGyhdddqSb1fZY63PR1a95WqNWZsoVEYB6kn2 zMqDBd2Y/owsIFStXSyRe01jRm4EUNUEXj8NDHz6hDusSAdk8zfK992+UU1/qduS VL1PnpG7E1FI3k1fJPUn7mkdUFJfacdjqUOZucBbPM4hVYIOLqda7RNC8bZOKGES g852+OcWck93vpZq+ONr35aFZKUa7bq6+q5jXl0K2YISWzzlpBnrc30pPcpVwgDc vTQA48Y2Y4j4r0yQXw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:32 2026 by rpki-client