This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer (raw, json) Hash identifier: 3gToT66CsoQ9Nj/+e2F0c6ddWPKZ44NMV6FAXrRi5g4= Subject key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E734257E4CC877561EC95D2FE495 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210623 IP: 2001:67c:9e4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e7:34:25:7e:4c:c8:77:56:1e:c9:5d:2f:e4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd35f6ff567bde93394fff282fad417da0b53614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:bd:eb:0a:d9:18:22:28:f1:88:3e:24:7b: 12:be:f4:e6:2a:e4:f8:4b:f4:d4:45:47:36:03:b4: 62:04:e5:a5:1e:88:30:78:bf:be:25:0a:0c:ee:47: fd:14:fe:64:bd:f1:14:c9:33:11:2f:a2:40:5b:8b: 39:65:26:f1:69:4d:08:e8:90:07:0a:76:99:fa:47: a2:03:d3:24:bb:57:6f:6a:a2:1c:bf:9c:81:37:f7: 91:52:75:9c:e5:45:6f:89:70:95:30:ae:9e:b7:c5: 5a:e0:72:fb:dc:54:1d:07:0e:ad:28:1b:bc:df:64: 81:0c:fa:12:b1:d7:5c:e5:d9:70:bc:fb:36:6b:f3: 3d:d8:8b:03:3c:92:fb:47:73:8e:d0:0e:7d:ff:c7: 75:4d:5f:30:43:03:91:2f:a0:d8:4d:ca:4f:75:f5: bb:03:87:8b:75:1c:7f:61:2f:07:a3:63:40:99:5a: dc:ed:ed:ea:11:f6:68:2d:db:df:46:0c:ec:60:bc: bd:51:a9:a4:82:33:fe:8e:9f:ae:a0:b1:be:7b:1b: 14:7c:2b:5f:3e:a0:71:f1:8b:3e:9a:4b:ad:20:63: 91:af:be:5a:a2:87:58:d2:18:f3:09:29:ec:99:ca: 21:1d:a7:1f:94:2d:f3:0d:3e:7a:41:0a:f9:32:38: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:9e4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210623 Signature Algorithm: sha256WithRSAEncryption 6d:7e:cb:53:92:8b:b9:b4:80:7d:79:ba:b2:0f:4d:20:b4:ba: d4:d2:f7:5b:89:e6:1e:7d:85:5d:ad:a9:74:49:f3:93:60:fa: d7:a3:92:34:21:7c:07:4d:b7:b1:39:66:bb:6e:0b:42:e7:11: 98:3f:2c:ce:be:d3:0f:c4:d8:1e:d0:cb:c0:8e:8e:e6:00:f8: de:da:c3:14:6e:3e:0f:08:41:81:e8:51:e9:ec:2c:a7:07:e6: 79:d5:d1:9f:52:7c:a1:b3:3c:96:2b:c6:8d:8e:09:b5:a6:db: 01:6b:e0:49:55:5c:7b:f2:f5:9f:b6:a7:9c:ee:17:77:f3:82: 81:4a:fe:62:7f:c5:20:36:6d:64:8f:dc:91:bc:98:56:0b:5c: 37:5e:0a:1f:d2:9e:42:6c:51:d1:6e:db:67:1f:02:30:9a:0f: d9:7a:d6:43:56:df:78:a7:d1:65:c8:19:3b:b0:17:8a:ac:d9: 18:4a:a5:e0:96:8e:d2:5a:ce:00:04:fd:36:27:2f:38:30:9f: a4:0f:73:a8:e2:ce:26:21:c5:e8:b0:18:a6:72:db:ec:88:4c: 93:e0:28:ff:69:fc:9e:99:36:3c:ec:c2:33:83:47:6a:f4:64: a9:d4:62:ae:80:f1:ab:cb:e9:07:3d:73:9d:9a:3f:73:75:9e: 09:ac:c9:58 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7Nec0JX5MyHdWHsldL+SVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDM1ZjZmZjU2N2JkZTkzMzk0ZmZmMjgyZmFkNDE3ZGEwYjUzNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrK96wrZGCIo8Yg+JHsSvvTmKuT4 S/TURUc2A7RiBOWlHogweL++JQoM7kf9FP5kvfEUyTMRL6JAW4s5ZSbxaU0I6JAH CnaZ+keiA9Mku1dvaqIcv5yBN/eRUnWc5UVviXCVMK6et8Va4HL73FQdBw6tKBu8 32SBDPoSsddc5dlwvPs2a/M92IsDPJL7R3OO0A59/8d1TV8wQwORL6DYTcpPdfW7 A4eLdRx/YS8Ho2NAmVrc7e3qEfZoLdvfRgzsYLy9UamkgjP+jp+uoLG+exsUfCtf PqBx8Ys+mkutIGORr75aoodY0hjzCSnsmcohHacflC3zDT56QQr5MjjMuQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFM019v9We96TOU//KC+tQX2gtTYUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzA5ZGRk Zi1mODNmLTQ2NTAtYTM0Ny00NGEzMDc1NDVkNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMDlkZGRm LWY4M2YtNDY1MC1hMzQ3LTQ0YTMwNzU0NWQ3NC8xL3pUWDJfMVo3M3BNNVRfOG9M NjFCZmFDMU5oUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAnkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM2vzANBgkqhkiG9w0BAQsFAAOCAQEAbX7LU5KLubSAfXm6sg9NILS61NL3 W4nmHn2FXa2pdEnzk2D616OSNCF8B023sTlmu24LQucRmD8szr7TD8TYHtDLwI6O 5gD43trDFG4+DwhBgehR6ewspwfmedXRn1J8obM8livGjY4JtabbAWvgSVVce/L1 n7annO4Xd/OCgUr+Yn/FIDZtZI/ckbyYVgtcN14KH9KeQmxR0W7bZx8CMJoP2XrW Q1bfeKfRZcgZO7AXiqzZGEql4JaO0lrOAAT9NicvODCfpA9zqOLOJiHF6LAYpnLb 7IhMk+Ao/2n8npk2POzCM4NHavRkqdRiroDxq8vpBz1znZo/c3WeCazJWA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:03 2026 by rpki-client