This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer File: zVdth24X5nqjsfHBDas52yk14is.cer (raw, json) Hash identifier: MJ4s7KYNRvj+9D7MXbc5r4CTlxL1Y/7CWg3BvleYncc= Subject key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA674C2082ED908FA8517BF376A20E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199218 AS: 208172 IP: 62.169.136.0/23 IP: 72.251.208.0/20 IP: 74.118.124.0/22 IP: 81.27.86.0/24 IP: 109.224.244.0/22 IP: 143.223.96.0/22 IP: 159.26.96.0/19 IP: 185.98.168.0/22 IP: 193.32.144.0/22 IP: 194.126.177.0/24 IP: 205.147.16.0/20 IP: 212.104.214.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:74:c2:08:2e:d9:08:fa:85:17:bf:37:6a:20:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:1b:18:9c:ae:67:16:83:a2:37:89:40:ab: 27:61:d0:07:12:33:9c:9d:e6:ef:d7:a5:34:5c:e0: 4f:56:af:3e:45:66:18:c4:b7:d4:88:c9:51:e5:54: 01:57:e9:4b:5a:ca:d0:39:04:68:00:4b:40:46:ae: a4:64:aa:dc:8c:c4:30:c1:b5:38:b2:1b:65:2a:e7: 64:d2:02:37:3c:33:75:7c:b5:66:03:dd:e9:09:e9: e7:1d:eb:e9:e7:d1:49:3b:16:bc:ae:3f:92:e9:2b: 8a:70:ac:46:42:f8:d7:ea:0f:ca:d4:bf:5c:34:b3: 57:af:19:00:77:aa:4c:3c:ac:7f:b7:6c:aa:d4:a6: f8:bb:4e:ee:20:6f:c6:8d:ac:39:bd:3a:27:90:5e: 39:86:a7:b4:c2:99:32:48:18:d2:ea:48:2b:a7:19: 9c:a3:2a:9f:ca:43:dd:26:09:74:a2:46:18:97:7a: 2d:f2:c6:c9:2e:6a:f7:5d:7f:f0:7b:c9:df:63:8a: 4e:2b:9e:48:d2:af:d6:e1:0c:d0:9d:07:22:3f:77: c3:c6:12:74:a1:1d:01:0f:48:a7:76:cc:51:c0:fe: d6:0d:54:4d:25:92:f6:be:8d:08:e9:01:53:54:0a: 8e:a0:d2:8a:15:a6:18:00:02:69:d1:ab:c3:0e:79: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.136.0/23 72.251.208.0/20 74.118.124.0/22 81.27.86.0/24 109.224.244.0/22 143.223.96.0/22 159.26.96.0/19 185.98.168.0/22 193.32.144.0/22 194.126.177.0/24 205.147.16.0/20 212.104.214.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199218 208172 Signature Algorithm: sha256WithRSAEncryption a0:66:ea:ef:1d:e6:07:74:20:1b:a4:a9:0f:c4:ef:92:91:0f: e4:69:30:56:f3:7c:f5:45:f1:63:b4:8d:ef:da:1b:04:c6:23: bc:74:aa:07:17:2c:9b:d3:c2:b6:4a:7e:db:18:7c:27:4d:43: 2e:95:0c:67:97:24:40:7e:ac:5f:5a:4d:fa:71:e1:8f:b3:5f: 4e:e0:29:2f:b2:1c:63:e5:c6:18:d6:0c:cc:61:52:a0:de:d5: cb:92:1e:c0:3e:89:6e:ff:9e:27:d6:bb:a0:64:5f:11:d7:90: 7c:f1:6b:c5:74:fe:f5:9c:4d:5d:af:1a:4c:b6:00:c7:09:03: b1:d9:74:5b:d4:1e:f7:59:21:9d:63:de:57:08:33:66:59:8b: 2e:e1:69:18:5f:c0:84:22:35:c2:33:2a:ec:f6:95:2c:48:05: 6f:cf:66:09:84:ad:f4:cd:2e:42:27:b4:24:fe:87:01:23:87: 9a:c5:d9:da:09:90:c4:57:ca:26:81:74:5d:9f:cb:35:23:58: ef:ae:6f:dc:6c:ec:ce:0e:ad:b6:60:ff:d2:ec:e6:11:32:dc: e4:8b:5c:3c:91:a2:7b:67:57:b2:fb:ae:b0:34:3e:78:38:32: ec:c4:f1:89:b7:28:fb:37:bf:3a:72:99:65:f9:b3:40:0d:a3: 82:c2:9b:6f -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt+pnTCCC7ZCPqFF783aiDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDU3NmQ4NzZlMTdlNjdhYTNiMWYxYzEwZGFiMzlkYjI5MzVlMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEkbGJyuZxaDojeJQKsnYdAHEjOc nebv16U0XOBPVq8+RWYYxLfUiMlR5VQBV+lLWsrQOQRoAEtARq6kZKrcjMQwwbU4 shtlKudk0gI3PDN1fLVmA93pCennHevp59FJOxa8rj+S6SuKcKxGQvjX6g/K1L9c NLNXrxkAd6pMPKx/t2yq1Kb4u07uIG/Gjaw5vTonkF45hqe0wpkySBjS6kgrpxmc oyqfykPdJgl0okYYl3ot8sbJLmr3XX/we8nfY4pOK55I0q/W4QzQnQciP3fDxhJ0 oR0BD0indsxRwP7WDVRNJZL2vo0I6QFTVAqOoNKKFaYYAAJp0avDDnmDAQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFM1XbYduF+Z6o7HxwQ2rOdspNeIrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzQyZjAx NC1jZDkyLTQyMDUtYWE1My0xYTgwYTJmN2Q3ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNDJmMDE0 LWNkOTItNDIwNS1hYTUzLTFhODBhMmY3ZDdlYS8xL3pWZHRoMjRYNW5xanNmSEJE YXM1MnlrMTRpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDBOBAIAATBIAwQBPqmIAwQESPvQAwQCSnZ8AwQAURtWAwQCbeD0 AwQCj99gAwQFnxpgAwQCuWKoAwQCwSCQAwQAwn6xAwQEzZMQAwQB1GjWMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwMKMgIDAy0sMA0GCSqGSIb3DQEBCwUAA4IBAQCg ZurvHeYHdCAbpKkPxO+SkQ/kaTBW83z1RfFjtI3v2hsExiO8dKoHFyyb08K2Sn7b GHwnTUMulQxnlyRAfqxfWk36ceGPs19O4Ckvshxj5cYY1gzMYVKg3tXLkh7APolu /54n1rugZF8R15B88WvFdP71nE1drxpMtgDHCQOx2XRb1B73WSGdY95XCDNmWYsu 4WkYX8CEIjXCMyrs9pUsSAVvz2YJhK30zS5CJ7Qk/ocBI4eaxdnaCZDEV8omgXRd n8s1I1jvrm/cbOzODq22YP/S7OYRMtzki1w8kaJ7Z1ey+66wND54ODLsxPGJtyj7 N786cpll+bNADaOCwptv -----END CERTIFICATE-----Generated at Sat Jan 31 06:47:28 2026 by rpki-client