This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer File: zV45ZYo-9vE8ohzBGk4z682UZwI.cer (raw, json) Hash identifier: /QPCOP57t7smPQB4TxHZJFaaiwH5bC7k50SgzOqULzY= Subject key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70FD2B1823462BDF155178B92D3DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39074 IP: 85.133.128.0/17 IP: 185.41.0.0/22 IP: 2a04:87c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:d2:b1:82:34:62:bd:f1:55:17:8b:92:d3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:10:9d:eb:be:19:01:86:d4:1b:26:26:27: 27:d5:35:d0:13:f2:ba:6f:72:89:54:fc:a6:e6:c8: 7d:dd:3b:49:50:cb:4c:01:64:e9:7c:1d:c7:32:e0: db:6d:23:3f:d9:4e:8b:7b:93:27:be:84:8d:b7:d7: 11:41:62:aa:ee:a9:a6:1e:56:b4:3d:74:09:84:e2: 0a:e2:d4:ed:92:a1:95:cf:28:71:b9:be:06:8e:6b: 34:06:ee:06:d2:95:79:40:0a:5f:e9:64:8f:bd:8d: b1:e8:c5:63:36:33:28:94:18:c9:95:58:0a:d7:1e: 9a:95:07:0d:a6:4c:ee:b1:78:92:5c:9a:db:dc:01: fa:40:d0:ab:3e:38:54:a8:3a:45:e5:57:f9:6d:fe: 7c:79:5b:61:cf:ff:40:95:a3:e3:c6:18:46:39:a5: 85:ef:44:65:3c:bb:86:dc:2f:92:49:d3:bb:72:77: 04:7a:70:14:12:2c:6c:0f:ad:34:ae:bd:ad:c0:61: 47:8b:6a:92:4e:f4:c9:18:e4:c7:2e:47:c0:fa:ea: 46:d2:07:c0:f0:b2:ac:18:6c:54:c2:fd:2a:c6:05: 8c:13:c7:47:f8:ba:45:7c:f5:81:4b:b4:9a:c7:cc: 11:60:40:7e:15:ba:69:ee:e2:ec:49:95:73:9c:b3: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.128.0/17 185.41.0.0/22 IPv6: 2a04:87c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39074 Signature Algorithm: sha256WithRSAEncryption 59:22:4d:2d:77:fb:03:fa:47:c1:c9:28:f2:db:8c:44:5b:77: 4f:35:fb:2c:24:30:a9:9b:41:d3:52:b3:70:95:dd:fc:86:96: f0:bd:f0:b1:9f:0b:a0:a5:44:fc:29:cb:1c:bf:9c:7b:31:8c: 03:e1:35:99:64:dd:ab:fa:cf:99:26:d8:3e:3c:b9:c3:d2:e1: 8d:26:17:a2:58:63:49:29:0a:31:38:57:f5:b0:6f:c9:4b:81: 49:f1:f5:e8:5a:f8:9b:e8:f3:21:39:8e:a2:f4:c7:4d:a9:9c: fb:d0:70:81:5a:73:58:90:5d:69:8c:1d:98:38:58:41:76:1b: 58:f1:8d:34:af:19:92:ee:c9:0e:a5:e0:d1:e7:c2:0d:9e:e9: 7a:83:7f:82:c9:44:85:70:55:d9:f2:1f:e5:4f:7c:73:27:65: 78:4c:00:ca:74:9a:34:c3:3e:e9:91:1d:e5:28:e7:dd:fa:72: d7:12:f7:9f:13:e5:5d:18:c9:1b:2d:03:29:e2:e6:71:ed:14: 6c:64:53:2a:ef:01:a7:37:f4:29:52:06:ae:20:72:2f:de:95: 4b:21:f0:90:14:0e:97:e1:55:45:ed:00:67:43:eb:97:22:62: 2d:08:a8:6b:d8:ff:b3:f7:b6:88:71:48:6b:08:53:c9:a5:71: f7:61:49:e3 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xw/SsYI0Yr3xVReLktPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDVlMzk2NThhM2VmNmYxM2NhMjFjYzExYTRlMzNlYmNkOTQ2NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXwQneu+GQGG1BsmJicn1TXQE/K6 b3KJVPym5sh93TtJUMtMAWTpfB3HMuDbbSM/2U6Le5MnvoSNt9cRQWKq7qmmHla0 PXQJhOIK4tTtkqGVzyhxub4Gjms0Bu4G0pV5QApf6WSPvY2x6MVjNjMolBjJlVgK 1x6alQcNpkzusXiSXJrb3AH6QNCrPjhUqDpF5Vf5bf58eVthz/9AlaPjxhhGOaWF 70RlPLuG3C+SSdO7cncEenAUEixsD600rr2twGFHi2qSTvTJGOTHLkfA+upG0gfA 8LKsGGxUwv0qxgWME8dH+LpFfPWBS7Sax8wRYEB+Fbpp7uLsSZVznLMCkQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM1eOWWKPvbxPKIcwRpOM+vNlGcCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2VmNTM2 Yy0wM2QzLTRhYzUtYjEyNS01ZDFmYTY2YzM2M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvZWY1MzZj LTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYzYi8xL3pWNDVaWW8tOXZFOG9oekJH azR6NjgyVVp3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQCuSkAMA0EAgACMAcDBQMqBIfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYojANBgkqhkiG9w0BAQsFAAOCAQEAWSJN LXf7A/pHwcko8tuMRFt3TzX7LCQwqZtB01KzcJXd/IaW8L3wsZ8LoKVE/CnLHL+c ezGMA+E1mWTdq/rPmSbYPjy5w9LhjSYXolhjSSkKMThX9bBvyUuBSfH16Fr4m+jz ITmOovTHTamc+9BwgVpzWJBdaYwdmDhYQXYbWPGNNK8Zku7JDqXg0efCDZ7peoN/ gslEhXBV2fIf5U98cydleEwAynSaNMM+6ZEd5Sjn3fpy1xL3nxPlXRjJGy0DKeLm ce0UbGRTKu8Bpzf0KVIGriByL96VSyHwkBQOl+FVRe0AZ0PrlyJiLQioa9j/s/e2 iHFIawhTyaVx92FJ4w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:00 2026 by rpki-client