This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer (raw, json) Hash identifier: IXPP1gMmgXXXPrN3Mbdt5iSJEB7h8gd07+vMSQMDzvU= Subject key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FFBB000D4A02862DE0E1549D4DF9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.200.245.0/24 IP: 195.190.22.0/24 IP: 2001:67c:2cd0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fb:b0:00:d4:a0:28:62:de:0e:15:49:d4:df:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda104577266ec9b146736c8cc9da7366b1d9781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:67:62:5d:98:1d:08:f6:02:dd:dc:54:d3: 2b:b1:8c:03:d2:87:8f:66:d4:83:af:4b:43:c2:82: d4:58:9f:46:4c:99:09:4a:c0:fc:78:26:ed:c7:3f: d6:18:0c:1b:6b:3e:6c:8d:e5:58:7e:75:c2:71:18: ba:34:9d:62:76:dd:65:53:ec:85:4f:20:49:29:c8: fc:23:1a:c2:0b:94:55:cc:1b:98:ee:1a:2e:6f:23: 01:35:23:65:89:91:31:df:79:0c:22:89:ea:27:48: ff:21:10:e5:59:21:85:00:0e:fb:e2:58:5b:9f:ad: d2:03:78:be:df:f3:d6:d1:c8:65:f4:0e:c2:fe:e2: 29:bc:fa:8e:6a:04:3a:bc:fb:ae:f9:4d:97:b9:9e: 5f:0b:66:0c:b9:f5:e7:b2:9b:b1:f9:55:61:b6:4b: be:0c:b7:95:d7:8a:74:5f:83:55:4c:ab:97:ca:68: b3:a8:2e:ae:07:ed:22:c0:6a:7e:28:c2:6a:bf:57: be:06:23:14:95:ba:d4:ae:ab:26:fb:90:26:c3:12: f0:ce:0c:90:79:93:9b:23:d1:b9:67:73:68:c1:7c: 1a:13:98:eb:ae:84:b0:0f:7d:d4:e5:50:83:bf:4f: f7:75:2c:2c:f1:f5:d1:66:40:7f:11:77:a3:c7:3e: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.245.0/24 195.190.22.0/24 IPv6: 2001:67c:2cd0::/48 Signature Algorithm: sha256WithRSAEncryption 21:e8:2f:0e:8e:07:fe:44:38:f9:e4:c6:13:45:97:1d:5e:8d: e7:10:1c:6f:ae:2c:96:e5:88:05:6a:7c:60:7e:49:80:2b:c6: 76:b3:0e:64:2e:3b:05:3c:d7:58:97:2a:ab:ff:c5:03:34:35: 09:31:90:14:4a:ad:af:97:65:65:f6:8c:06:b2:bd:35:10:7f: 02:ef:7e:0a:2b:8f:e4:df:55:b0:1e:10:23:86:81:70:70:40: 84:34:75:95:8d:f3:c1:73:bb:1d:d7:b2:4b:8e:1a:4b:5c:6c: 89:b0:5b:59:eb:62:4d:fe:c7:d5:de:9a:52:4a:8c:cf:b9:c5: de:c2:e2:c4:44:08:21:f7:b5:12:cc:44:cb:b8:af:a0:68:1e: 49:16:19:a5:e1:59:79:00:ef:0b:88:a5:65:9c:9f:7c:51:79: d8:14:2b:5d:e4:ca:8e:c1:53:a1:7e:74:4d:22:ea:6a:c1:a2: b4:65:55:1a:cf:40:24:c3:b1:10:e5:05:f1:25:e3:ba:ce:24: 16:c3:70:47:77:d6:af:b6:bb:8e:c7:31:93:50:7b:f6:f9:a3: d5:93:0a:28:44:93:c5:f2:e0:7f:91:07:ee:e2:94:37:99:6d: 66:8b:c1:15:d3:7a:46:5d:38:1b:f9:0e:d4:f2:7f:4b:4a:fb: b3:e0:bb:f7 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt8f/uwANSgKGLeDhVJ1N+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGExMDQ1NzcyNjZlYzliMTQ2NzM2YzhjYzlkYTczNjZiMWQ5NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2INnYl2YHQj2At3cVNMrsYwD0oeP ZtSDr0tDwoLUWJ9GTJkJSsD8eCbtxz/WGAwbaz5sjeVYfnXCcRi6NJ1idt1lU+yF TyBJKcj8IxrCC5RVzBuY7houbyMBNSNliZEx33kMIonqJ0j/IRDlWSGFAA774lhb n63SA3i+3/PW0chl9A7C/uIpvPqOagQ6vPuu+U2XuZ5fC2YMufXnspux+VVhtku+ DLeV14p0X4NVTKuXymizqC6uB+0iwGp+KMJqv1e+BiMUlbrUrqsm+5AmwxLwzgyQ eZObI9G5Z3NowXwaE5jrroSwD33U5VCDv0/3dSws8fXRZkB/EXejxz7f1wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFM2hBFdyZuybFGc2yMydpzZrHZeBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzFkMjY1 YS02YTU3LTRjZWQtYmRmNi01ZmIwOWYyMWM2MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMWQyNjVh LTZhNTctNGNlZC1iZGY2LTVmYjA5ZjIxYzYwNy8xL3phRUVWM0ptN0pzVVp6Ykl6 SjJuTm1zZGw0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwcj1AwQAw74WMA8EAgACMAkDBwAgAQZ8LNAw DQYJKoZIhvcNAQELBQADggEBACHoLw6OB/5EOPnkxhNFlx1ejecQHG+uLJbliAVq fGB+SYArxnazDmQuOwU811iXKqv/xQM0NQkxkBRKra+XZWX2jAayvTUQfwLvfgor j+TfVbAeECOGgXBwQIQ0dZWN88Fzux3XskuOGktcbImwW1nrYk3+x9XemlJKjM+5 xd7C4sRECCH3tRLMRMu4r6BoHkkWGaXhWXkA7wuIpWWcn3xRedgUK13kyo7BU6F+ dE0i6mrBorRlVRrPQCTDsRDlBfEl47rOJBbDcEd31q+2u47HMZNQe/b5o9WTCihE k8Xy4H+RB+7ilDeZbWaLwRXTekZdOBv5DtTyf0tK+7Pgu/c= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:31 2026 by rpki-client