This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer File: zTu8GVzaflgkWmHLMLlv5XL9eBE.cer (raw, json) Hash identifier: DxZvXWNXwDZ5nyvSZn5MSM5xd4qPC/89GerlOpGJqGY= Subject key identifier: CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE3640CCBA791C058C53EA57338AC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210692 IP: 62.106.88.0/24 IP: 94.154.112.0/24 IP: 2a11:5c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:36:40:cc:ba:79:1c:05:8c:53:ea:57:33:8a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:07:16:14:68:b1:1b:94:6d:7d:14:ae:1e: 8d:7d:4a:b5:38:b8:e4:14:9a:82:ea:0d:3e:2c:77: 41:47:75:b4:c4:39:2c:9f:9c:90:da:4b:3c:4a:a3: bb:76:56:91:2c:23:a5:79:8c:9b:23:a5:c5:14:81: fc:db:26:e9:ab:b0:39:3e:74:e3:53:bb:8b:7c:c1: 67:33:d5:2f:6b:62:32:60:29:3a:e6:d6:21:50:2b: 8a:a6:a9:09:54:80:c3:e8:88:14:e5:8c:9b:72:03: f2:f1:56:e3:3b:8e:12:e0:bc:30:e2:27:6b:4f:a9: a8:a9:9e:cc:b3:2a:5a:a9:b6:d7:63:d6:27:5a:52: 69:f2:dd:96:a0:48:92:e7:5a:7c:5d:b7:0f:21:20: a7:b8:cc:57:d1:f1:4c:af:a1:47:91:95:ad:20:bc: a6:62:b8:0a:6e:d1:54:af:20:43:63:9b:27:d4:e9: 20:7c:02:e1:17:bf:7b:ef:76:9c:c7:ce:62:ba:87: b2:a3:89:e3:10:d2:41:66:17:a0:98:d0:3d:5f:76: 11:8b:1b:35:8c:ff:69:54:d9:63:89:81:74:bd:1e: f3:64:82:ad:5d:9f:ed:24:11:4f:c5:61:fd:af:43: d1:a8:bd:33:c0:75:21:c1:33:4c:89:cc:06:ef:aa: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.88.0/24 94.154.112.0/24 IPv6: 2a11:5c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210692 Signature Algorithm: sha256WithRSAEncryption 5b:cc:f4:fa:88:7c:1d:be:ca:8c:c0:79:38:5d:2b:be:ae:71: 57:6f:29:b0:e0:e2:27:d7:2c:64:0a:3e:e3:83:7c:05:70:e0: 4b:56:4e:f3:25:32:12:27:72:5c:a2:61:56:de:de:f6:31:e0: 1d:49:c8:20:56:dd:02:55:f6:e1:4a:6b:91:f6:86:05:6f:05: 3f:8e:d4:2b:11:a1:de:0d:d3:23:ed:45:b7:e4:ee:75:17:60: 4c:e0:41:19:e6:7c:7b:99:aa:36:02:fc:c1:55:b9:f7:ea:b2: d6:09:a7:ab:f8:ce:8e:c4:d4:8c:e5:de:6d:88:43:12:47:35: 70:eb:75:51:c6:59:c7:b0:af:b1:23:a9:5b:ce:cc:79:ce:b1: 30:f9:d6:bd:8b:ad:86:9e:84:c6:db:49:69:ec:b5:bf:8a:80: 88:a0:3d:44:cd:4a:d2:3e:85:f2:74:01:3d:52:be:97:fa:9c: a9:53:73:dc:92:e8:56:34:53:2e:5c:89:81:75:02:e2:48:b2: 7c:b9:a3:3f:79:b0:78:a3:25:a1:ea:62:39:c8:e3:fd:5e:1c: fb:b9:04:33:27:57:3b:fa:85:f8:77:16:20:c2:e7:bc:53:1c: 86:99:bb:87:be:6d:0e:2d:f0:6b:a3:d2:76:fd:ab:3d:e8:30: fa:91:4d:bd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87jZAzLp5HAWMU+pXM4rFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNiYmMxOTVjZGE3ZTU4MjQ1YTYxY2IzMGI5NmZlNTcyZmQ3ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMgHFhRosRuUbX0Urh6NfUq1OLjk FJqC6g0+LHdBR3W0xDksn5yQ2ks8SqO7dlaRLCOleYybI6XFFIH82ybpq7A5PnTj U7uLfMFnM9Uva2IyYCk65tYhUCuKpqkJVIDD6IgU5YybcgPy8VbjO44S4Lww4idr T6moqZ7MsypaqbbXY9YnWlJp8t2WoEiS51p8XbcPISCnuMxX0fFMr6FHkZWtILym YrgKbtFUryBDY5sn1OkgfALhF79773acx85iuoeyo4njENJBZhegmNA9X3YRixs1 jP9pVNljiYF0vR7zZIKtXZ/tJBFPxWH9r0PRqL0zwHUhwTNMicwG76ro9wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM07vBlc2n5YJFphyzC5b+Vy/XgRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzVhZjdh NS1iNjdjLTQ1OWEtOTg5My1jNmZhZGViMjg1YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvNWFmN2E1 LWI2N2MtNDU5YS05ODkzLWM2ZmFkZWIyODViYS8xL3pUdThHVnphZmxna1dtSExN TGx2NVhMOWVCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAPmpYAwQAXppwMA0EAgACMAcDBQMqEVxAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3BDANBgkqhkiG9w0BAQsFAAOCAQEAW8z0 +oh8Hb7KjMB5OF0rvq5xV28psODiJ9csZAo+44N8BXDgS1ZO8yUyEidyXKJhVt7e 9jHgHUnIIFbdAlX24UprkfaGBW8FP47UKxGh3g3TI+1Ft+TudRdgTOBBGeZ8e5mq NgL8wVW59+qy1gmnq/jOjsTUjOXebYhDEkc1cOt1UcZZx7CvsSOpW87Mec6xMPnW vYuthp6ExttJaey1v4qAiKA9RM1K0j6F8nQBPVK+l/qcqVNz3JLoVjRTLlyJgXUC 4kiyfLmjP3mweKMloepiOcjj/V4c+7kEMydXO/qF+HcWIMLnvFMchpm7h75tDi3w a6PSdv2rPegw+pFNvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:20 2026 by rpki-client