This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer (raw, json) Hash identifier: e5huZaHbzzBsdhJAzmf1J3K26lUnODxF1DA4J4kJ0IQ= Subject key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380FA090AC409DE590DA7EED2D954A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31422 IP: 157.84.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0f:a0:90:ac:40:9d:e5:90:da:7e:ed:2d:95:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:cd:af:f2:cc:a0:48:ba:77:65:9c:f3:8d: 48:fb:4a:f4:e5:18:8b:78:1f:09:e5:6e:9c:da:e5: d0:34:0f:e7:50:86:cf:3d:07:10:48:0a:83:be:c6: b6:6a:75:01:1a:85:ff:fc:8d:bc:f5:46:06:7e:c5: 19:21:86:dc:2f:b7:b7:96:9c:f5:9f:1e:f5:97:bc: 79:08:aa:48:a1:e3:6b:b8:a7:a6:d0:b7:70:d4:3f: 19:fc:0d:89:e3:37:b1:ce:86:72:88:fc:75:7d:01: d0:6d:48:3f:51:0d:64:47:96:3f:fa:97:63:5e:ab: 9d:2a:0b:ea:73:ee:dc:41:e6:3f:19:8a:f4:a1:c7: 43:7d:f2:07:37:cb:0f:e1:a8:eb:ba:a0:69:35:44: 85:5d:f5:ef:50:1f:14:1c:a6:28:f5:09:35:25:47: 7e:76:d1:9f:ad:96:cb:e8:f6:fa:65:63:88:62:35: 9d:a2:92:b8:46:0a:30:bd:22:c1:60:6c:c7:84:d4: de:9d:39:33:a7:17:75:3f:60:61:a0:7d:c4:03:84: 5b:5a:d6:67:6f:fb:e3:47:53:3c:2c:51:9e:9d:6d: 13:4d:88:fe:4c:5b:4a:54:9e:57:ac:df:54:24:bf: 91:ae:4d:2e:5a:fe:c1:2b:89:ec:6f:dd:e8:43:f7: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.84.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31422 Signature Algorithm: sha256WithRSAEncryption 9e:10:dc:0f:a7:ca:76:c8:3d:a5:df:36:14:a1:a7:d4:c6:a0: 46:9d:97:4d:26:ae:cf:9d:af:f3:db:6d:d1:22:84:27:b3:cb: 85:a8:65:5b:64:7a:fe:52:f9:d4:ae:c0:93:52:3e:12:3c:7d: b7:65:ea:3b:1b:10:89:63:82:56:27:ce:ae:10:4e:b1:cc:f9: d7:76:63:80:22:ae:7e:03:8d:81:9e:9f:16:75:11:28:0f:24: a2:48:ae:87:1c:3b:ab:25:32:39:ff:82:77:c6:b4:95:cc:12: af:32:ae:58:43:f6:79:1f:ef:48:ab:25:9c:89:07:e5:eb:fb: aa:1f:d1:1d:3f:64:70:78:79:84:99:75:f7:fb:5d:0c:64:70: cf:cd:a1:08:ea:9c:ea:09:be:eb:17:ca:27:80:a6:f6:4a:8f: 72:e4:7b:91:8a:e2:c3:c6:1e:cd:37:77:f8:5f:e0:ef:1d:43: 1a:01:e0:9d:8f:16:11:d4:bf:a7:2c:c9:bb:b4:b7:88:fd:d9: a1:6d:20:03:41:49:d2:2c:82:39:f2:70:7a:5b:f6:a6:1d:86: ae:65:52:3a:01:22:1f:1e:a1:09:e6:b0:4b:ac:3c:29:7b:0c: b5:3f:12:41:52:ef:39:f8:65:7d:86:83:66:c5:4e:70:94:b5: ee:6d:5e:a2 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt+OA+gkKxAneWQ2n7tLZVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2I3NTM0MTUwMDgwN2E5NzUwYThjZjU1YmY0ZTQ1ZmYwM2YzMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKDNr/LMoEi6d2Wc841I+0r05RiL eB8J5W6c2uXQNA/nUIbPPQcQSAqDvsa2anUBGoX//I289UYGfsUZIYbcL7e3lpz1 nx71l7x5CKpIoeNruKem0Ldw1D8Z/A2J4zexzoZyiPx1fQHQbUg/UQ1kR5Y/+pdj XqudKgvqc+7cQeY/GYr0ocdDffIHN8sP4ajruqBpNUSFXfXvUB8UHKYo9Qk1JUd+ dtGfrZbL6Pb6ZWOIYjWdopK4RgowvSLBYGzHhNTenTkzpxd1P2BhoH3EA4RbWtZn b/vjR1M8LFGenW0TTYj+TFtKVJ5XrN9UJL+Rrk0uWv7BK4nsb93oQ/dSNQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFMy3U0FQCAepdQqM9Vv05F/wPzEqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2VmZmIy Zi05ZmJmLTQ4OGItOTMxNS1hOTlhMjEwMTU5MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZWZmYjJm LTlmYmYtNDg4Yi05MzE1LWE5OWEyMTAxNTkzNy8xL3pMZFRRVkFJQjZsMUNvejFX X1RrWF9BX01Tby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnVQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC er4wDQYJKoZIhvcNAQELBQADggEBAJ4Q3A+nynbIPaXfNhShp9TGoEadl00mrs+d r/PbbdEihCezy4WoZVtkev5S+dSuwJNSPhI8fbdl6jsbEIljglYnzq4QTrHM+dd2 Y4Airn4DjYGenxZ1ESgPJKJIroccO6slMjn/gnfGtJXMEq8yrlhD9nkf70irJZyJ B+Xr+6of0R0/ZHB4eYSZdff7XQxkcM/NoQjqnOoJvusXyieApvZKj3Lke5GK4sPG Hs03d/hf4O8dQxoB4J2PFhHUv6csybu0t4j92aFtIANBSdIsgjnycHpb9qYdhq5l UjoBIh8eoQnmsEusPCl7DLU/EkFS7zn4ZX2Gg2bFTnCUte5tXqI= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:25 2026 by rpki-client