This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer (raw, json) Hash identifier: LrURpNvtm9Ap9X2TaClG2heRlyqCd8aDiFL2ge+6Z1Y= Subject key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7628E9297D397F507597BDE88E3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 159.255.208.0/21 IP: 185.37.176.0/22 IP: 2a00:a1e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:76:28:e9:29:7d:39:7f:50:75:97:bd:e8:8e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdc84082be96e609d9de9808fbc37866feb4c54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:4d:b4:83:19:1a:42:d2:7d:c2:b5:05:14: dc:78:5e:53:60:3d:76:fe:94:9f:96:90:a5:71:99: ae:93:3c:7a:29:f1:5d:da:17:35:d0:fe:c0:88:3f: 5a:0a:93:75:d7:d0:13:43:24:d4:d7:40:c3:68:ac: c7:a4:69:2b:c8:cd:e7:8e:be:2f:a3:d9:88:44:fe: 85:c6:bf:67:05:f4:b2:84:86:5e:b7:d3:83:1d:8c: 5f:14:3b:3d:06:27:78:e0:e6:de:e2:b1:9f:7d:48: 71:b9:6a:dd:13:2f:c5:3c:4c:b9:e2:a2:22:42:93: 59:7b:6c:fc:c9:e0:4c:de:49:61:22:63:51:2c:a3: ac:d6:13:32:69:37:65:c7:4e:01:f3:6e:c9:a1:10: 25:99:80:0e:35:39:8e:a5:eb:44:d3:a2:d3:35:1b: 70:89:a8:b1:4a:7c:4a:a7:0d:92:01:7c:3b:31:cb: 96:4e:b4:99:f7:ad:eb:bd:67:2a:b0:f0:ac:6f:f8: 95:ed:e1:4d:ed:d0:ab:5d:30:49:68:4f:4a:f9:65: c1:ce:75:de:d4:9a:9c:ee:0e:53:09:92:b8:86:e8: 0e:2a:9f:75:f7:1d:f9:c1:77:e1:b4:10:53:72:15: 37:d2:96:7c:7b:b1:84:eb:c7:64:b9:cb:dc:ab:49: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.208.0/21 185.37.176.0/22 IPv6: 2a00:a1e0::/32 Signature Algorithm: sha256WithRSAEncryption 38:f4:39:af:df:56:b3:3b:1d:5b:44:b3:50:c0:86:91:53:eb: 5f:14:80:05:98:3e:8d:61:8f:08:b9:10:e9:eb:59:2e:e3:c4: c7:46:b6:a5:e6:12:ce:ee:6c:78:04:ee:0e:d8:31:66:48:8d: 02:27:41:ae:ba:85:78:d3:ce:ac:a1:b0:cf:b3:65:6b:7b:ef: 9f:d8:62:85:cc:cb:66:97:cd:bd:2e:12:77:0a:e6:0c:b7:de: 28:9c:8d:df:e9:3e:1b:6e:14:66:82:a3:24:a4:ce:5c:d1:9e: d1:e8:97:8e:07:91:fe:d5:6b:7b:90:9c:28:fd:db:71:97:44: 58:10:e7:0e:90:aa:4a:52:93:0b:18:62:bd:5d:92:32:dd:ca: e1:07:44:1d:65:e1:12:65:db:4d:e1:fc:67:71:fb:a7:be:2c: 34:a8:bc:18:e0:a9:c4:ae:e6:d0:36:88:90:04:cd:22:6d:b2: c2:81:da:0a:31:ec:62:46:c5:5c:71:0d:f6:6a:f4:bb:da:45: 12:b6:a1:35:25:b4:97:26:dd:c0:3e:8c:e3:51:8f:86:8c:d6: 5a:63:e5:5f:1f:5d:67:13:2a:3f:7d:61:25:5d:99:1a:d9:74: 5a:ef:2d:d3:a0:05:01:8c:5e:ba:a3:6c:72:ff:08:68:1c:79: e2:62:4d:81 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5fnYo6Sl9OX9QdZe96I48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGM4NDA4MmJlOTZlNjA5ZDlkZTk4MDhmYmMzNzg2NmZlYjRjNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bBNtIMZGkLSfcK1BRTceF5TYD12 /pSflpClcZmukzx6KfFd2hc10P7AiD9aCpN119ATQyTU10DDaKzHpGkryM3njr4v o9mIRP6Fxr9nBfSyhIZet9ODHYxfFDs9Bid44Obe4rGffUhxuWrdEy/FPEy54qIi QpNZe2z8yeBM3klhImNRLKOs1hMyaTdlx04B827JoRAlmYAONTmOpetE06LTNRtw iaixSnxKpw2SAXw7McuWTrSZ963rvWcqsPCsb/iV7eFN7dCrXTBJaE9K+WXBznXe 1Jqc7g5TCZK4hugOKp919x35wXfhtBBTchU30pZ8e7GE68dkucvcq0lC0wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFM3IQIK+luYJ2d6YCPvDeGb+tMVLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2I3YmY5 NC0zNzdiLTQ0MDAtOGI5Yy1jYmYxNjRlOGJlMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYjdiZjk0 LTM3N2ItNDQwMC04YjljLWNiZjE2NGU4YmUwMS8xL3pjaEFncjZXNWduWjNwZ0kt OE40WnY2MHhVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDn//QAwQCuSWwMA0EAgACMAcDBQAqAKHgMA0G CSqGSIb3DQEBCwUAA4IBAQA49Dmv31azOx1bRLNQwIaRU+tfFIAFmD6NYY8IuRDp 61ku48THRral5hLO7mx4BO4O2DFmSI0CJ0GuuoV4086sobDPs2Vre++f2GKFzMtm l829LhJ3CuYMt94onI3f6T4bbhRmgqMkpM5c0Z7R6JeOB5H+1Wt7kJwo/dtxl0RY EOcOkKpKUpMLGGK9XZIy3crhB0QdZeESZdtN4fxncfunviw0qLwY4KnErubQNoiQ BM0ibbLCgdoKMexiRsVccQ32avS72kUStqE1JbSXJt3APozjUY+GjNZaY+VfH11n Eyo/fWElXZka2XRa7y3ToAUBjF66o2xy/whoHHniYk2B -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:55 2026 by rpki-client