This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer (raw, json) Hash identifier: Nc2sbzUz8t0GBqIfVgZdjljEKd8JvhAaRCFz2qZWL8s= Subject key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE8AA94C14C5EC606DE4D33490238 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50281 IP: 193.46.89.0/24 IP: 193.106.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:aa:94:c1:4c:5e:c6:06:de:4d:33:49:02:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:b3:7d:ad:0a:f0:cd:f4:29:a0:bc:0f:49: a8:3c:76:4e:8d:5b:85:2c:80:ef:30:d2:5d:60:31: b3:5f:ef:9b:a8:9e:dc:4c:57:54:d3:c2:03:d9:23: cc:f0:47:1c:01:1e:6f:95:c3:38:16:bb:31:75:b7: fd:5a:c6:b7:c3:fb:8f:32:6b:02:4b:c5:9f:00:34: 33:45:e2:ba:56:96:5c:b3:42:53:e0:ed:98:1e:4c: 12:c6:e4:f5:91:a6:50:cc:b7:c0:84:83:90:3d:cc: cc:fa:98:a5:d9:20:dd:65:d9:6e:40:c1:08:fb:2c: a4:7c:dc:5f:3b:7f:ac:63:13:0c:b9:35:78:2f:ab: 20:86:3a:b0:29:2f:b2:21:33:0c:20:56:2c:9d:2c: 3f:1e:ec:44:91:6e:cd:f4:6e:fb:97:d3:bb:c6:74: e4:1d:af:48:62:f9:5b:1e:9a:c5:12:4c:00:9b:37: 94:27:12:da:85:db:bf:a1:44:e7:5b:5f:a8:6a:1e: 86:9a:d9:26:b9:e8:2f:d2:02:48:37:c9:d8:45:51: 79:39:3b:dd:ad:61:25:cb:87:0f:55:bd:63:87:b6: d8:5a:93:65:97:50:e4:e0:fd:a8:fc:ad:65:78:d4: c0:2a:a4:20:89:d2:a2:34:3f:cc:d1:ac:23:8d:27: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.89.0/24 193.106.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50281 Signature Algorithm: sha256WithRSAEncryption 4a:e7:f7:32:71:3c:ea:c0:03:92:1f:eb:c1:c0:57:02:ba:f5: 1a:18:a8:ce:63:49:71:df:01:e5:77:cd:d5:d5:eb:82:17:21: d6:22:d9:a4:bd:4d:2b:20:a1:f6:4e:58:14:5f:f0:e2:00:a5: ac:7c:8c:a8:d6:ec:31:57:69:4f:2f:9c:1f:61:ef:2f:a2:e3: 37:54:fe:28:50:a8:44:61:a9:cd:2a:e4:91:21:9d:ac:97:c3: e5:71:08:08:f6:c4:d4:28:c7:61:8e:8d:63:1b:bf:66:1e:c7: 0a:b2:70:48:0f:bb:fb:d7:68:6a:c0:de:3f:f8:17:f1:c4:6c: f8:6b:ff:5a:af:6d:55:be:40:c2:38:57:01:b1:d1:b5:a7:7d: 03:be:66:74:77:83:b2:a9:96:59:ac:97:11:33:92:6a:ba:59: 02:b9:31:c8:70:ac:76:3b:80:72:78:49:c3:b6:04:f2:3d:9f: e6:e1:ce:63:03:b6:0c:cf:64:8b:e9:84:d2:da:2b:31:61:86: f8:74:2a:2a:1a:8b:3d:02:67:bc:7e:43:f6:bd:18:2b:39:98: e5:e5:66:1a:54:f1:cf:bf:cc:ee:fe:d8:b3:54:3f:71:24:8e: 40:a2:b9:a9:5d:73:52:c7:6a:21:3c:a4:58:b8:2f:83:ec:34: 6a:c8:e8:9e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9XOiqlMFMXsYG3k0zSQI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTJiY2MxMGQxNmIwZmVkMjg1NWU5Mjk1ZmM0MDlkNjUwN2I0M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcuzfa0K8M30KaC8D0moPHZOjVuF LIDvMNJdYDGzX++bqJ7cTFdU08ID2SPM8EccAR5vlcM4Frsxdbf9Wsa3w/uPMmsC S8WfADQzReK6VpZcs0JT4O2YHkwSxuT1kaZQzLfAhIOQPczM+pil2SDdZdluQMEI +yykfNxfO3+sYxMMuTV4L6sghjqwKS+yITMMIFYsnSw/HuxEkW7N9G77l9O7xnTk Ha9IYvlbHprFEkwAmzeUJxLahdu/oUTnW1+oah6Gmtkmuegv0gJIN8nYRVF5OTvd rWEly4cPVb1jh7bYWpNll1Dk4P2o/K1leNTAKqQgidKiND/M0awjjSfsawIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFM4rzBDRaw/tKFXpKV/ECdZQe0PWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2RmNzU3 Yy00OTlkLTQwMjAtYTVjMy02MTE2MWE2NWQzZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZGY3NTdj LTQ5OWQtNDAyMC1hNWMzLTYxMTYxYTY1ZDNkNi8xL3ppdk1FTkZyRC0wb1Zla3BY OFFKMWxCN1E5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwS5ZAwQCwWo8MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDEaTANBgkqhkiG9w0BAQsFAAOCAQEASuf3MnE86sADkh/rwcBXArr1 GhiozmNJcd8B5XfN1dXrghch1iLZpL1NKyCh9k5YFF/w4gClrHyMqNbsMVdpTy+c H2HvL6LjN1T+KFCoRGGpzSrkkSGdrJfD5XEICPbE1CjHYY6NYxu/Zh7HCrJwSA+7 +9doasDeP/gX8cRs+Gv/Wq9tVb5AwjhXAbHRtad9A75mdHeDsqmWWayXETOSarpZ ArkxyHCsdjuAcnhJw7YE8j2f5uHOYwO2DM9ki+mE0torMWGG+HQqKhqLPQJnvH5D 9r0YKzmY5eVmGlTxz7/M7v7Ys1Q/cSSOQKK5qV1zUsdqITykWLgvg+w0asjong== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:50 2026 by rpki-client