This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer File: zig0CiCbK6Eq6QOnTLteLiOu0jg.cer (raw, json) Hash identifier: Icx8rTzex+ZrQ6RtyO9qpym6ayQ++SwIQdrBXU4MMQw= Subject key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC939042ED79BD2AB3920F1653BAA1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62298 IP: 91.205.40.0/24 IP: 2a01:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:39:04:2e:d7:9b:d2:ab:39:20:f1:65:3b:aa:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:89:63:16:2e:0f:e1:21:f2:80:23:41:e9: 66:96:d3:56:97:58:a7:42:1d:2f:de:88:6e:e1:00: 8c:b3:69:13:c6:3c:cb:8d:9a:f2:c2:35:13:dc:64: 2f:0f:24:cd:ec:a5:d1:2b:3d:fa:8e:24:4e:75:29: 59:c7:d9:1e:2e:e8:97:aa:d8:1a:07:ba:71:91:b7: 6e:d8:02:df:a6:3b:5c:7e:55:94:99:ab:a6:43:84: 2f:d5:8e:64:e6:77:ed:40:0d:b0:df:88:62:61:e2: c3:a2:f2:b4:dc:08:c0:f8:5c:e4:9e:d0:56:24:69: ab:5a:d0:77:c2:09:b4:da:0b:20:09:f1:8d:23:b3: 80:e6:52:f4:9e:c5:20:35:e8:90:9d:90:f1:bf:1d: 0f:bf:b4:8e:d1:de:ab:98:e3:fb:50:a6:2b:e0:99: 72:a1:4b:af:f6:ff:e4:2f:97:f9:a7:12:19:3a:76: 29:cc:82:6e:80:03:5e:53:a5:56:60:31:36:2e:29: 5a:dc:a6:fc:82:15:77:7a:d0:99:22:6a:b4:c1:ab: 46:d8:ba:6c:97:fc:1a:d9:f7:3d:9c:3d:a3:ba:7c: 77:72:ac:d1:58:ba:79:25:9b:25:40:e3:83:44:a3: 02:8f:75:bd:d5:2b:11:2c:5b:6d:5d:fe:74:f2:f9: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.40.0/24 IPv6: 2a01:5340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62298 Signature Algorithm: sha256WithRSAEncryption 46:c2:a9:a7:00:f5:c6:5b:ce:5d:e5:cb:82:da:d6:09:9f:7e: b4:7c:f9:74:a6:46:d6:33:63:2a:ff:17:5a:17:05:52:ef:f0: 3a:3c:a2:33:fb:ed:4f:4c:f0:db:dd:fd:bb:e1:fc:85:80:6c: 4d:cb:1d:81:98:e4:29:51:0f:8a:6d:16:d8:ff:2a:ff:5f:c2: aa:7e:56:5d:62:71:4b:d3:31:bd:bf:ed:a1:c5:23:04:3d:f8: 9d:58:1b:79:6c:fd:28:ef:18:f8:7f:0e:23:83:64:53:fd:05: 77:ea:9e:47:c5:0e:6c:5f:74:70:70:db:bc:7e:ce:3d:26:e8: 09:2c:47:5d:57:d3:83:0b:53:93:43:b1:77:99:02:48:fd:7a: ed:9b:57:27:cf:22:dc:a7:d2:6e:e4:54:57:ea:f9:87:28:42: a8:3e:7a:b6:3d:9d:c7:b2:ea:49:28:d3:81:e1:e0:90:f4:ee: 2e:36:13:b0:4f:b9:49:be:0f:f5:16:33:e8:64:25:06:66:56: 8a:8e:0d:c2:c9:fc:67:ea:0e:f2:52:98:8f:54:02:a4:42:5b: ad:4f:cf:04:db:03:0a:8d:74:35:bf:0d:d5:67:77:ab:4d:dd: 8c:dc:28:9a:ab:55:a7:86:eb:ac:24:1d:7f:81:26:af:88:de: 69:eb:13:4d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yTkELteb0qs5IPFlO6oaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI4MzQwYTIwOWIyYmExMmFlOTAzYTc0Y2JiNWUyZTIzYWVkMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjuJYxYuD+Eh8oAjQelmltNWl1in Qh0v3ohu4QCMs2kTxjzLjZrywjUT3GQvDyTN7KXRKz36jiROdSlZx9keLuiXqtga B7pxkbdu2ALfpjtcflWUmaumQ4Qv1Y5k5nftQA2w34hiYeLDovK03AjA+FzkntBW JGmrWtB3wgm02gsgCfGNI7OA5lL0nsUgNeiQnZDxvx0Pv7SO0d6rmOP7UKYr4Jly oUuv9v/kL5f5pxIZOnYpzIJugANeU6VWYDE2Lila3Kb8ghV3etCZImq0watG2Lps l/wa2fc9nD2junx3cqzRWLp5JZslQOODRKMCj3W91SsRLFttXf508vl6WQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM4oNAogmyuhKukDp0y7Xi4jrtI4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzQ1YzY4 OS03NTFmLTQ2ZDctOWI2Yy1iMWZjNTQ3YjczMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNDVjNjg5 LTc1MWYtNDZkNy05YjZjLWIxZmM1NDdiNzMyMi8xL3ppZzBDaUNiSzZFcTZRT25U THRlTGlPdTBqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW80oMA0EAgACMAcDBQMqAVNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzWjANBgkqhkiG9w0BAQsFAAOCAQEARsKppwD1xlvO XeXLgtrWCZ9+tHz5dKZG1jNjKv8XWhcFUu/wOjyiM/vtT0zw2939u+H8hYBsTcsd gZjkKVEPim0W2P8q/1/Cqn5WXWJxS9Mxvb/tocUjBD34nVgbeWz9KO8Y+H8OI4Nk U/0Fd+qeR8UObF90cHDbvH7OPSboCSxHXVfTgwtTk0Oxd5kCSP167ZtXJ88i3KfS buRUV+r5hyhCqD56tj2dx7LqSSjTgeHgkPTuLjYTsE+5Sb4P9RYz6GQlBmZWio4N wsn8Z+oO8lKYj1QCpEJbrU/PBNsDCo10Nb8N1Wd3q03djNwomqtVp4brrCQdf4Em r4jeaesTTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:25 2026 by rpki-client