This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer File: zZFzvIKKtx2i68r6f4mOxqoe6nY.cer (raw, json) Hash identifier: LdMHU8Wg1UyON200vGyw7mIB6bOimvmoDT7FLQAcGtc= Subject key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15443370E3E08A8999A21C0A12C99E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213611 IP: 91.192.163.0/24 IP: 2a14:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:44:33:70:e3:e0:8a:89:99:a2:1c:0a:12:c9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:4a:80:23:fa:23:c8:e7:9a:6d:ae:47:8c: 20:fb:44:c2:83:d3:8f:70:b4:a3:82:ff:37:fc:90: ab:ea:85:4e:ab:e4:53:26:4b:5a:4c:d5:a4:00:40: 7d:7e:29:54:26:0a:fa:9e:12:03:62:ba:d2:11:ae: be:dd:bd:f4:30:8a:66:87:ca:33:70:b8:80:e0:59: 7e:ab:49:cd:35:3f:21:0e:ac:c8:1b:5e:3d:fd:9d: 7c:68:a8:81:98:e1:f6:2c:97:1a:fd:52:41:63:6b: e0:e9:bd:25:df:4e:93:83:42:6b:48:29:76:af:5a: d8:23:17:5d:0b:82:bc:0c:6c:96:9e:c9:11:5d:81: f9:bc:b2:66:9e:aa:a1:ba:e9:a1:a8:87:d2:0e:69: 54:ed:16:60:3c:4c:1c:31:4f:04:a3:56:5f:16:ca: ca:5d:ed:98:2e:2c:c8:49:b0:a9:41:e1:ce:8c:10: 7a:74:be:6a:fe:b4:18:2d:fc:67:14:ad:e0:c8:b1: 82:37:b0:36:25:cb:0f:64:2f:5a:74:83:6e:4a:e1: 62:29:e1:c7:32:a1:36:57:5f:9b:88:a0:de:ef:a4: d8:09:e6:9a:28:a1:cc:86:63:b8:e0:b2:43:4c:33: 73:bd:2b:ef:c9:80:29:12:e9:3f:05:6f:ab:bd:ee: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.163.0/24 IPv6: 2a14:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213611 Signature Algorithm: sha256WithRSAEncryption 2b:46:77:c0:af:b8:db:36:7f:ca:59:6f:2d:96:4a:08:69:35: f2:94:b1:39:cf:54:3c:75:6c:ab:a2:11:ed:2b:31:00:fb:c9: ef:4b:90:ee:72:76:11:1d:4b:65:2b:5c:8c:9b:d9:8f:19:ca: 45:9d:37:3f:9c:79:40:ca:8f:ea:33:9e:34:7f:c0:4a:86:65: 24:f9:0b:1b:b4:a3:1a:c2:84:b2:a5:ba:67:3b:37:ce:7e:6e: fb:7e:49:eb:1c:e5:ee:f7:c0:a6:29:2d:db:e9:75:e3:74:e3: 39:b6:2f:e2:20:97:8c:0e:f3:d0:77:dd:a9:b1:74:02:1d:5d: 73:d1:bc:9e:a9:40:4a:db:22:62:3f:4f:fb:e5:25:e1:65:b0: 9a:14:0d:e7:de:4c:2f:a4:f3:6b:85:53:97:ab:f7:16:53:98: 8c:00:eb:bb:90:71:b6:e6:07:d0:85:f1:73:6a:6d:ef:3e:f2: e4:e3:97:d6:fb:72:ea:ed:c4:55:ed:66:f0:f9:0b:40:c1:9c: cc:e2:98:2e:71:42:08:da:c4:6b:86:e7:ac:49:5f:2b:83:54: e0:8b:e8:67:b2:75:65:c6:56:b2:2a:2d:cb:b6:46:c9:7f:04: 8c:1c:6f:7b:68:39:4a:4a:f3:8b:77:76:07:61:66:d3:05:d3: 10:b2:7f:04 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FUQzcOPgiomZohwKEsmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDkxNzNiYzgyOGFiNzFkYTJlYmNhZmE3Zjg5OGVjNmFhMWVlYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbJKgCP6I8jnmm2uR4wg+0TCg9OP cLSjgv83/JCr6oVOq+RTJktaTNWkAEB9filUJgr6nhIDYrrSEa6+3b30MIpmh8oz cLiA4Fl+q0nNNT8hDqzIG149/Z18aKiBmOH2LJca/VJBY2vg6b0l306Tg0JrSCl2 r1rYIxddC4K8DGyWnskRXYH5vLJmnqqhuumhqIfSDmlU7RZgPEwcMU8Eo1ZfFsrK Xe2YLizISbCpQeHOjBB6dL5q/rQYLfxnFK3gyLGCN7A2JcsPZC9adINuSuFiKeHH MqE2V1+biKDe76TYCeaaKKHMhmO44LJDTDNzvSvvyYApEuk/BW+rve40eQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM2Rc7yCircdouvK+n+JjsaqHup2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzViOGI5 Yy04ZjE5LTRjNmItYWZkNy1jNjk0MjYwMDE3YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNWI4Yjlj LThmMTktNGM2Yi1hZmQ3LWM2OTQyNjAwMTdiMC8xL3paRnp2SUtLdHgyaTY4cjZm NG1PeHFvZTZuWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8CjMA0EAgACMAcDBQMqFEBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCazANBgkqhkiG9w0BAQsFAAOCAQEAK0Z3wK+42zZ/ yllvLZZKCGk18pSxOc9UPHVsq6IR7SsxAPvJ70uQ7nJ2ER1LZStcjJvZjxnKRZ03 P5x5QMqP6jOeNH/ASoZlJPkLG7SjGsKEsqW6Zzs3zn5u+35J6xzl7vfApikt2+l1 43TjObYv4iCXjA7z0HfdqbF0Ah1dc9G8nqlAStsiYj9P++Ul4WWwmhQN595ML6Tz a4VTl6v3FlOYjADru5BxtuYH0IXxc2pt7z7y5OOX1vty6u3EVe1m8PkLQMGczOKY LnFCCNrEa4bnrElfK4NU4IvoZ7J1ZcZWsioty7ZGyX8EjBxve2g5Skrzi3d2B2Fm 0wXTELJ/BA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:19 2026 by rpki-client