This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer File: zEa__4uQ43SFVboUR_1O3sw0ChM.cer (raw, json) Hash identifier: kE9sm1tPiSx/60QSyp9K9PBi2EJS03GKVV/OeUmVZzU= Subject key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B8307A51A1A65517CCC52277698D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57222 IP: 195.162.4.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:83:07:a5:1a:1a:65:51:7c:cc:52:27:76:98:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:b1:d1:76:0f:4f:5e:5c:5f:c4:46:e0:8f: d7:bd:96:bc:1a:79:0d:12:9b:2f:e7:a7:23:2f:6a: 34:0a:95:59:f1:61:fb:85:c0:f9:fe:54:de:70:25: 86:2e:92:0b:93:8e:ec:b3:cc:7b:de:85:f0:64:5d: 6b:cc:43:08:67:f3:f2:60:a6:85:2a:97:25:09:6d: cf:ab:35:80:55:31:41:fc:83:ab:d1:68:2b:f8:46: 9c:2d:c9:b2:1f:65:7e:2e:1d:d9:e8:ca:f6:57:30: 05:88:f3:5e:2d:4d:4e:19:d8:ce:a7:25:95:31:32: 7f:b3:be:97:95:d4:a8:c5:fb:cb:3a:9f:22:5a:0a: ef:4e:7c:31:7d:1b:d8:ec:b7:4c:61:43:de:e6:5a: 6a:f4:b9:ec:a7:c4:17:f9:38:88:9c:df:3b:ec:47: 79:00:c2:02:14:bf:b0:12:6e:f5:73:c7:2d:7c:41: 3d:c6:6e:95:9e:04:d4:77:fe:1c:70:c7:20:bf:17: c6:5d:42:87:77:a3:37:b7:54:5f:d5:71:fe:3f:08: 66:90:0a:1b:32:89:0d:01:cb:5a:47:1c:50:54:6b: 8f:e3:ff:50:df:72:98:6c:67:35:fe:df:48:a2:ef: ea:77:0c:ae:d5:b0:8f:57:d8:f1:a9:62:79:13:fe: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.4.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57222 Signature Algorithm: sha256WithRSAEncryption 64:a4:d2:2a:ce:9a:cd:73:f8:3b:fa:89:3b:40:71:fc:f7:c7: 13:0f:b0:1d:ca:5c:1a:a8:e6:cc:16:c6:5e:b6:3d:d4:76:9e: a6:5d:3a:5f:97:13:85:4c:ac:47:de:a0:10:f5:1d:e0:bb:e2: 90:57:9b:d3:9b:1c:86:c6:6b:dc:d6:0a:63:d9:09:ca:21:f7: f5:ce:f5:0f:56:87:97:ae:1d:41:49:9e:31:83:f8:af:37:82: 07:d0:65:33:56:ed:34:86:25:21:95:0b:aa:58:ee:af:6e:4d: 6f:1e:a2:35:9b:a1:90:9c:a4:81:fb:4a:7c:c7:0b:01:41:de: 0c:04:2b:38:ac:3d:19:d4:88:cd:65:22:eb:8b:8b:10:fd:42: 50:c0:7c:e1:ca:3f:00:f5:b8:70:61:81:e9:71:74:0b:42:e7: 3f:04:f8:1d:c5:75:02:54:e0:4d:e2:86:fd:fd:4a:30:33:67: e6:f6:3c:49:11:d9:e4:bf:c4:cb:c3:96:57:24:a6:4b:36:f2: 09:ac:a2:f5:b9:51:80:d2:d1:71:a7:52:f4:3b:09:35:bf:bf: 68:67:c7:8a:c4:21:24:8a:5d:52:35:6c:74:50:02:ea:76:c1: b0:c5:e3:c5:b2:5f:d5:32:2f:56:a9:ef:56:b1:a4:2f:17:b7: 70:54:a4:d8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9W4MHpRoaZVF8zFIndpjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQ2YmZmZjhiOTBlMzc0ODU1NWJhMTQ0N2ZkNGVkZWNjMzQwYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ux0XYPT15cX8RG4I/XvZa8GnkN Epsv56cjL2o0CpVZ8WH7hcD5/lTecCWGLpILk47ss8x73oXwZF1rzEMIZ/PyYKaF KpclCW3PqzWAVTFB/IOr0Wgr+EacLcmyH2V+Lh3Z6Mr2VzAFiPNeLU1OGdjOpyWV MTJ/s76XldSoxfvLOp8iWgrvTnwxfRvY7LdMYUPe5lpq9Lnsp8QX+TiInN877Ed5 AMICFL+wEm71c8ctfEE9xm6VngTUd/4ccMcgvxfGXUKHd6M3t1Rf1XH+PwhmkAob MokNActaRxxQVGuP4/9Q33KYbGc1/t9Iou/qdwyu1bCPV9jxqWJ5E/5RZwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMxGv/+LkON0hVW6FEf9Tt7MNAoTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1Lzg0ZDQ5 Yy0wYzg0LTQ1NmEtYjY0MC00ZGM5YmY2NDJkZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvODRkNDlj LTBjODQtNDU2YS1iNjQwLTRkYzliZjY0MmRkMi8xL3pFYV9fNHVRNDNTRlZib1VS XzFPM3N3MENoTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw6IEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDfhjANBgkqhkiG9w0BAQsFAAOCAQEAZKTSKs6azXP4O/qJO0Bx/PfHEw+wHcpc GqjmzBbGXrY91Haepl06X5cThUysR96gEPUd4LvikFeb05schsZr3NYKY9kJyiH3 9c71D1aHl64dQUmeMYP4rzeCB9BlM1btNIYlIZULqljur25Nbx6iNZuhkJykgftK fMcLAUHeDAQrOKw9GdSIzWUi64uLEP1CUMB84co/APW4cGGB6XF0C0LnPwT4HcV1 AlTgTeKG/f1KMDNn5vY8SRHZ5L/Ey8OWVySmSzbyCayi9blRgNLRcadS9DsJNb+/ aGfHisQhJIpdUjVsdFAC6nbBsMXjxbJf1TIvVqnvVrGkLxe3cFSk2A== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:18 2026 by rpki-client