This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer File: zfYsvWz36AgiT2z4cl424qllNSw.cer (raw, json) Hash identifier: Gwx2idtyV2mEmkcG0MVZ0NQC/9HHpTaLU6C8kQlUdGg= Subject key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AB8A53A7E933BA5340EE6C9AC1A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8298 AS: 50869 IP: 194.1.163.0/24 IP: 2001:678:d78::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:8a:53:a7:e9:33:ba:53:40:ee:6c:9a:c1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:ee:eb:4b:d2:8a:ab:ea:37:5f:48:22:dd: e9:8e:35:24:58:d6:c8:48:5b:56:58:02:75:ea:44: bb:42:4d:69:29:94:eb:0b:ea:18:14:3c:e3:6d:25: a0:60:77:04:24:a8:32:36:51:72:f7:ad:90:31:0c: 14:5e:50:fb:32:88:6b:eb:86:e6:1a:bb:11:bb:56: 69:96:ce:69:eb:88:02:e2:49:bb:11:5e:12:ad:1a: 74:cc:b2:2b:74:d1:70:69:0b:f4:b1:35:f0:37:c4: a6:cf:4a:36:77:3b:93:c6:63:26:4e:06:cc:1e:1f: 36:48:cd:b8:40:9f:e8:51:12:d2:3b:bf:a4:3a:ab: 19:c2:8e:e5:a3:24:ef:a7:9a:9c:5c:7e:b8:5a:fb: 0a:a5:8a:92:84:57:4d:3e:40:05:b7:32:23:d4:8c: fa:84:5c:c2:46:c8:43:60:69:1c:a9:58:53:64:99: 5e:4a:2f:ef:af:ae:fa:53:1d:e1:e6:eb:21:74:05: ae:ce:56:31:f8:b8:a7:7c:55:16:a6:fe:00:d2:51: cf:3d:40:75:04:64:d2:fb:ce:cb:f1:27:1c:de:47: 53:76:bf:56:7c:97:cc:29:31:e8:35:7b:84:bd:0f: 23:8b:2b:be:87:c8:9b:71:8c:39:e0:a2:85:36:7a: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.163.0/24 IPv6: 2001:678:d78::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8298 50869 Signature Algorithm: sha256WithRSAEncryption 3f:14:af:0e:2c:b6:36:67:a9:43:35:47:57:2e:4a:30:2e:1e: 92:43:a0:5a:12:25:70:7a:1b:68:fd:9f:64:cf:d7:9f:2d:2a: ce:54:96:35:6b:92:47:53:79:30:2b:f0:b8:9d:7a:d8:3a:b9: 24:bb:b5:fc:8c:fd:65:53:ea:48:f3:21:ca:8e:fd:87:3c:81: 31:5f:ab:cf:96:4d:aa:bc:b6:91:2d:00:0b:34:c6:74:c5:1b: 5e:ab:91:4b:75:be:2d:02:d8:d3:0b:ca:c2:61:16:6f:66:55: f0:d9:0d:2b:e9:68:b5:89:39:24:cb:0d:dd:35:7c:cf:13:92: dd:fe:a7:29:c6:dd:ca:02:b4:8f:03:1b:f8:8f:51:73:fb:2a: 07:fc:e3:20:17:95:f8:31:14:86:bc:22:e4:b0:4f:4a:eb:b1: 5d:d3:0f:8a:ed:9f:04:e6:77:2e:e2:fb:3e:02:85:6e:9d:81: 43:55:9f:2a:d8:40:97:e8:c6:da:fd:db:4b:c0:74:52:ed:75: 76:25:5d:7b:9b:7c:d0:aa:a4:7f:2f:6b:16:4b:42:e9:f0:29: b6:be:6c:19:67:0b:42:c6:26:2d:ab:95:4e:70:26:40:99:b4: b2:2c:ac:44:b3:78:31:1f:b1:c8:b7:5c:3f:2f:02:a9:a8:be: b8:1c:c9:59 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yKuKU6fpM7pTQO5smsGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGY2MmNiZDZjZjdlODA4MjI0ZjZjZjg3MjVlMzZlMmE5NjUzNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ju60vSiqvqN19IIt3pjjUkWNbI SFtWWAJ16kS7Qk1pKZTrC+oYFDzjbSWgYHcEJKgyNlFy962QMQwUXlD7Mohr64bm GrsRu1Zpls5p64gC4km7EV4SrRp0zLIrdNFwaQv0sTXwN8Smz0o2dzuTxmMmTgbM Hh82SM24QJ/oURLSO7+kOqsZwo7loyTvp5qcXH64WvsKpYqShFdNPkAFtzIj1Iz6 hFzCRshDYGkcqVhTZJleSi/vr676Ux3h5ushdAWuzlYx+LinfFUWpv4A0lHPPUB1 BGTS+87L8Scc3kdTdr9WfJfMKTHoNXuEvQ8jiyu+h8ibcYw54KKFNnrhqQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM32LL1s9+gIIk9s+HJeNuKpZTUsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2U5MTY5 YS1lZTA2LTRlNGEtYjIxZS04NDk0MTdhZTYzNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvZTkxNjlh LWVlMDYtNGU0YS1iMjFlLTg0OTQxN2FlNjM0ZC8xL3pmWXN2V3ozNkFnaVQyejRj bDQyNHFsbE5Tdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwgGjMA8EAgACMAkDBwAgAQZ4DXgwHgYIKwYB BQUHAQgBAf8EDzANoAswCQICIGoCAwDGtTANBgkqhkiG9w0BAQsFAAOCAQEAPxSv Diy2NmepQzVHVy5KMC4ekkOgWhIlcHobaP2fZM/Xny0qzlSWNWuSR1N5MCvwuJ16 2Dq5JLu1/Iz9ZVPqSPMhyo79hzyBMV+rz5ZNqry2kS0ACzTGdMUbXquRS3W+LQLY 0wvKwmEWb2ZV8NkNK+lotYk5JMsN3TV8zxOS3f6nKcbdygK0jwMb+I9Rc/sqB/zj IBeV+DEUhrwi5LBPSuuxXdMPiu2fBOZ3LuL7PgKFbp2BQ1WfKthAl+jG2v3bS8B0 Uu11diVde5t80Kqkfy9rFktC6fAptr5sGWcLQsYmLauVTnAmQJm0siysRLN4MR+x yLdcPy8Cqai+uBzJWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:11 2026 by rpki-client