This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer File: zEseS1uaUAMbWdQZcyGgmahXBUA.cer (raw, json) Hash identifier: qPnPiE8PXMG8nuKFdRa7s8l1W2DeOZsepgS3OYJSBdY= Subject key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ABC2C2D9F933904A55AB50434DBD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a03:2ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bc:2c:2d:9f:93:39:04:a5:5a:b5:04:34:db:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:58:3f:dd:a0:3e:7c:25:46:d7:eb:a3:40: 0d:62:0e:d3:c7:17:96:f9:b6:34:a0:b8:ac:1c:05: d9:3d:64:d8:83:a8:d2:f0:d0:33:fc:64:00:f1:bc: 31:3a:fe:ac:6c:d5:28:f3:72:3e:d7:42:87:93:de: 01:de:a1:7d:a4:de:e2:26:af:fc:c4:57:53:bf:85: 21:a4:e6:4c:7c:7e:59:7a:64:33:5c:03:dc:6d:21: 5f:0d:a1:1b:4d:ed:bb:69:47:a4:e5:ee:e8:ab:c4: ec:1b:46:60:b9:e9:d2:b9:fe:f5:8a:12:03:ef:27: ff:88:77:b8:13:7e:78:67:b8:c5:f3:4d:4e:f3:e3: 85:28:ca:63:72:de:e5:78:ca:8f:6c:fb:b8:d6:c9: b9:6b:35:62:25:0f:f2:b6:2d:2c:3d:93:82:fa:1f: 91:5c:aa:10:76:33:c2:10:b9:08:25:0c:c4:4d:65: a4:58:fe:cf:e3:a4:0e:a5:f8:53:1b:b3:95:20:fe: 45:fa:13:5b:a5:3b:cf:e7:19:fa:75:d6:4d:69:83: eb:46:9d:e2:ef:a2:0c:57:a2:d1:7e:4b:23:2b:8c: f5:df:8e:b7:8f:da:2a:38:9f:85:7e:39:f1:c1:cb: 14:62:4f:34:66:a5:a6:01:19:d3:86:98:97:0a:76: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption b0:59:7f:73:3e:7d:39:28:32:32:80:81:21:17:be:02:8c:54: cc:ea:f3:18:5a:7a:b2:38:2b:2a:8d:db:ea:0f:42:c2:61:a3: 2d:08:ba:d8:2c:5c:bc:c0:37:73:31:6c:7f:7a:9f:2d:40:ae: 37:ca:10:0d:45:42:65:c1:c7:2a:5d:4a:16:0e:4a:37:86:0b: e0:bd:72:a4:48:a6:09:f2:57:f6:fe:1c:5b:61:4d:b9:e3:aa: f5:e3:2c:66:99:90:dd:e8:c3:d0:d2:eb:b4:ac:0d:4d:77:6b: dd:24:0c:5b:b5:e6:82:a9:f9:ce:66:64:a1:70:81:bd:4e:ec: 0f:af:eb:a5:24:74:66:98:fe:80:63:bc:d9:d5:3e:3c:cd:a0: 68:dd:dd:9e:70:88:97:09:fd:a7:d7:79:5d:fe:fc:0e:49:f8: 43:b6:45:7e:38:95:12:24:d7:13:b6:43:5d:2f:c0:46:cd:15: 0c:a3:5e:a3:06:72:69:90:89:5f:42:65:a9:5e:2c:c4:63:77: 74:6a:84:5e:9c:99:a6:c5:29:f9:20:d1:4c:b5:8e:b8:f6:2e: 87:00:e0:19:9c:18:b4:54:29:5f:d5:1e:53:37:12:f8:62:ca: ea:a3:dc:f7:65:29:5e:00:e3:2c:34:51:f2:f4:42:30:6e:0a: 77:b7:93:1c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6WrwsLZ+TOQSlWrUENNvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzRiMWU0YjViOWE1MDAzMWI1OWQ0MTk3MzIxYTA5OWE4NTcwNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnixYP92gPnwlRtfro0ANYg7TxxeW +bY0oLisHAXZPWTYg6jS8NAz/GQA8bwxOv6sbNUo83I+10KHk94B3qF9pN7iJq/8 xFdTv4UhpOZMfH5ZemQzXAPcbSFfDaEbTe27aUek5e7oq8TsG0ZguenSuf71ihID 7yf/iHe4E354Z7jF801O8+OFKMpjct7leMqPbPu41sm5azViJQ/yti0sPZOC+h+R XKoQdjPCELkIJQzETWWkWP7P46QOpfhTG7OVIP5F+hNbpTvP5xn6ddZNaYPrRp3i 76IMV6LRfksjK4z13463j9oqOJ+FfjnxwcsUYk80ZqWmARnThpiXCnYUVQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFMxLHktbmlADG1nUGXMhoJmoVwVAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzcyY2Yy Zi1hNzgxLTRiNTctYjg2Mi03MzVhM2ZhZTYyMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNzJjZjJm LWE3ODEtNGI1Ny1iODYyLTczNWEzZmFlNjIxNi8xL3pFc2VTMXVhVUFNYldkUVpj eUdnbWFoWEJVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgMuwDANBgkqhkiG9w0BAQsFAAOCAQEAsFl/ cz59OSgyMoCBIRe+AoxUzOrzGFp6sjgrKo3b6g9CwmGjLQi62CxcvMA3czFsf3qf LUCuN8oQDUVCZcHHKl1KFg5KN4YL4L1ypEimCfJX9v4cW2FNueOq9eMsZpmQ3ejD 0NLrtKwNTXdr3SQMW7Xmgqn5zmZkoXCBvU7sD6/rpSR0Zpj+gGO82dU+PM2gaN3d nnCIlwn9p9d5Xf78Dkn4Q7ZFfjiVEiTXE7ZDXS/ARs0VDKNeowZyaZCJX0JlqV4s xGN3dGqEXpyZpsUp+SDRTLWOuPYuhwDgGZwYtFQpX9UeUzcS+GLK6qPc92UpXgDj LDRR8vRCMG4Kd7eTHA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:22 2026 by rpki-client