This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer File: zWv2DrCPHiOrqLp5fBFyREzhW3E.cer (raw, json) Hash identifier: pstRd66QwvKm4XC3A3UIo6dIy1ZJO88doChy73B60yI= Subject key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F842AAD2FC59415AC7D68795F3A2DE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a07:1940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2a:ad:2f:c5:94:15:ac:7d:68:79:5f:3a:2d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:e8:13:a3:bf:8e:b2:c9:42:fa:6c:d2:c0: 38:8a:ea:87:97:f1:10:81:6d:04:f7:1e:0f:93:34: 8d:ef:ac:0d:6e:0d:37:0b:62:d0:18:f6:19:59:f1: 23:51:d0:1c:9d:2e:47:98:82:4a:3d:fb:6d:ec:b3: 2d:eb:7e:b1:a9:f4:a4:de:47:45:f2:98:99:44:bf: f1:5b:f7:d3:16:d5:c7:28:e3:fc:1c:67:e6:8d:0e: 28:19:79:35:08:61:c9:f2:32:a2:b3:d7:2d:ff:37: ec:2d:2f:4f:f0:83:b6:2d:fd:8d:f8:3a:ce:1e:8a: 73:38:a0:ca:9e:3c:a1:05:70:c5:d3:a4:5b:e2:fd: be:b0:22:bc:6f:15:e9:0e:72:4c:cc:19:f4:5e:44: d3:cc:9a:2a:67:9d:ee:68:f7:11:ac:a2:5f:c7:65: 0f:3f:57:1e:28:d0:c9:a8:93:68:62:38:40:b0:81: 7e:2a:e7:09:12:dd:0c:f1:dc:af:18:e8:d2:5d:2d: ee:16:c4:d2:9d:f1:6c:cc:9a:36:cd:fa:42:52:c7: a2:41:9f:4d:f9:26:f0:55:01:3b:36:94:94:01:90: 0d:04:83:a1:c8:ad:b3:11:da:90:80:64:6f:62:9e: 26:41:59:5d:73:f2:9f:b2:1f:13:0c:a8:ac:18:94: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:1940::/29 Signature Algorithm: sha256WithRSAEncryption a2:0e:99:62:df:05:11:67:04:a3:5d:cb:3e:8b:4e:bf:35:34: d5:20:15:16:a2:91:c7:40:22:b9:ba:52:3a:e0:7b:3c:19:a0: 18:47:07:5b:d3:aa:2d:ec:3d:b5:15:57:d9:85:fc:99:b7:79: ad:2a:85:15:d6:30:36:42:ee:04:7b:a1:74:d6:ab:75:89:06: 44:6b:c2:df:ed:dc:f6:96:53:e5:8f:30:19:b5:92:7d:fb:d8: f2:f9:16:bb:31:3d:89:ee:52:be:02:26:56:94:5d:9d:9d:5c: a2:33:47:e7:5a:23:04:b1:64:ea:dc:d9:31:9b:ae:a0:bf:5b: b4:2d:a5:ee:c3:3f:53:a3:b6:32:ab:a6:8a:6b:fc:0f:b4:7a: 20:dc:50:f9:1e:74:48:4d:f7:c1:87:b5:42:f9:8b:ff:f9:4e: 11:6d:4c:5f:e1:e9:53:cc:b8:8e:4e:3b:58:79:df:47:6c:ce: e8:b0:c3:b6:80:1f:bf:be:47:d7:f0:0b:16:42:67:3d:1a:aa: ed:cf:64:7f:ba:fb:2a:d4:7f:08:e1:5d:31:9a:2f:c1:1a:bc: bb:48:d9:db:82:d8:2c:5f:9b:8e:a7:18:63:57:d6:1d:b9:5a: 5e:18:14:00:e5:06:cf:3d:1b:04:0b:3d:18:32:b2:96:47:a8: 1d:de:c8:67 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt/hCqtL8WUFax9aHlfOi3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDZiZjYwZWIwOGYxZTIzYWJhOGJhNzk3YzExNzI0NDRjZTE1YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3PoE6O/jrLJQvps0sA4iuqHl/EQ gW0E9x4PkzSN76wNbg03C2LQGPYZWfEjUdAcnS5HmIJKPftt7LMt636xqfSk3kdF 8piZRL/xW/fTFtXHKOP8HGfmjQ4oGXk1CGHJ8jKis9ct/zfsLS9P8IO2Lf2N+DrO HopzOKDKnjyhBXDF06Rb4v2+sCK8bxXpDnJMzBn0XkTTzJoqZ53uaPcRrKJfx2UP P1ceKNDJqJNoYjhAsIF+KucJEt0M8dyvGOjSXS3uFsTSnfFszJo2zfpCUseiQZ9N +SbwVQE7NpSUAZANBIOhyK2zEdqQgGRvYp4mQVldc/Kfsh8TDKisGJSRAwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFM1r9g6wjx4jq6i6eXwRckRM4VtxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2U4NzU2 Ny02ZGQ4LTRhNjAtOTIxZS0yYTA3MjJhZTE2NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTg3NTY3 LTZkZDgtNGE2MC05MjFlLTJhMDcyMmFlMTY0NC8xL3pXdjJEckNQSGlPcnFMcDVm QkZ5UkV6aFczRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgcZQDANBgkqhkiG9w0BAQsFAAOCAQEAog6Z Yt8FEWcEo13LPotOvzU01SAVFqKRx0AiubpSOuB7PBmgGEcHW9OqLew9tRVX2YX8 mbd5rSqFFdYwNkLuBHuhdNardYkGRGvC3+3c9pZT5Y8wGbWSffvY8vkWuzE9ie5S vgImVpRdnZ1cojNH51ojBLFk6tzZMZuuoL9btC2l7sM/U6O2Mqumimv8D7R6INxQ +R50SE33wYe1QvmL//lOEW1MX+HpU8y4jk47WHnfR2zO6LDDtoAfv75H1/ALFkJn PRqq7c9kf7r7KtR/COFdMZovwRq8u0jZ24LYLF+bjqcYY1fWHblaXhgUAOUGzz0b BAs9GDKylkeoHd7IZw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:04 2026 by rpki-client