This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer (raw, json) Hash identifier: qZ2LIPoUzlU50YyRaIxFpyM5yRmd2bYHtqSk3Fyt3vE= Subject key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152D37DF2C9BC21744133E2454E3CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202733 IP: 91.245.24.0/21 IP: 2001:67c:1b64::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2d:37:df:2c:9b:c2:17:44:13:3e:24:54:e3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:a0:a5:3a:f1:e9:4f:d0:25:be:23:7d:b2: 8f:01:01:92:fb:6b:02:72:0f:11:e2:66:a2:8b:93: cb:88:80:56:27:4b:31:a0:b4:54:4e:fd:2c:a2:23: 60:6f:32:94:a9:a5:d8:77:43:12:1d:24:01:eb:03: b8:bc:1d:57:2e:22:46:03:cb:35:6b:bc:52:00:59: e0:b6:18:c9:5e:55:59:28:2f:1b:b6:65:1a:cc:06: f2:4b:f0:00:11:30:b4:e1:d5:91:e8:c7:ba:c4:a7: cd:99:1c:5b:98:57:b2:98:6d:9c:ed:e0:88:75:1a: a6:b4:9c:56:65:68:8b:8c:b8:ad:a9:84:8b:7f:d7: bd:b5:e5:83:14:70:3b:2b:5c:f7:f8:da:b3:7a:9f: 34:ff:c9:34:c7:93:31:2b:b8:22:9c:42:a8:50:2c: 3d:de:f6:e6:aa:4e:aa:67:fa:fc:b5:15:79:c0:12: 2c:ae:83:62:7d:f9:0b:1b:e8:30:8e:06:91:f1:90: 22:04:df:ae:7d:e3:06:ca:7b:a3:59:66:13:24:f9: 76:88:e3:f5:24:84:39:d3:ea:5f:f0:35:cf:a5:ba: 40:f3:71:6c:da:2b:70:0e:5e:2c:04:f7:86:28:88: af:b7:e5:7b:63:7a:e4:bd:50:c0:37:da:da:e5:73: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.24.0/21 IPv6: 2001:67c:1b64::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202733 Signature Algorithm: sha256WithRSAEncryption 66:0f:61:2b:21:1f:ce:2e:2e:a8:34:31:45:69:15:d0:9c:2b: d5:8f:10:c8:9f:79:fb:6f:8c:64:33:be:58:51:ea:6e:9d:a8: df:ed:6d:b4:d9:de:00:43:d3:f0:c3:da:97:57:c6:04:48:14: b9:b1:a8:ac:9e:88:c8:0b:b5:06:7f:c0:80:39:8c:6c:bb:03: 64:93:e0:1c:45:27:db:32:e8:f3:b9:93:c7:ae:7b:23:7f:d3: 3c:1c:41:16:48:44:fc:8a:eb:bf:00:ea:5f:1e:b1:5f:ba:f2: dc:0e:97:82:9d:2a:6c:bc:f2:25:05:14:01:50:db:ed:00:7d: 8e:7b:e6:1c:40:f7:15:c8:0c:d4:11:8b:d5:46:5c:ad:ba:92: 37:6e:79:8b:34:cf:b0:d3:e8:05:dd:c5:d1:f3:dc:77:6e:57: b1:d4:2c:2e:40:b8:31:af:a9:e9:b2:b5:8c:f6:ed:e6:6a:3b: 17:fc:f9:ab:9a:01:7d:f7:8c:0e:c9:1d:93:13:3a:45:7e:96: b0:00:8d:03:ea:2c:e4:6d:08:55:00:39:b6:bb:5b:f2:df:61: 06:70:48:0a:28:ea:d7:09:d4:bb:51:e6:da:52:8d:cb:4f:00: 6e:54:c2:d1:17:53:e6:e8:5c:97:67:15:89:82:a6:be:70:ac: f6:80:67:01 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/FS033yybwhdEEz4kVOPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTRkZGFmYzJjZjU2NThkMDJlNTY4MjhjMmM5MTM1MzUyOWVkZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihGgpTrx6U/QJb4jfbKPAQGS+2sC cg8R4maii5PLiIBWJ0sxoLRUTv0soiNgbzKUqaXYd0MSHSQB6wO4vB1XLiJGA8s1 a7xSAFngthjJXlVZKC8btmUazAbyS/AAETC04dWR6Me6xKfNmRxbmFeymG2c7eCI dRqmtJxWZWiLjLitqYSLf9e9teWDFHA7K1z3+Nqzep80/8k0x5MxK7ginEKoUCw9 3vbmqk6qZ/r8tRV5wBIsroNiffkLG+gwjgaR8ZAiBN+ufeMGynujWWYTJPl2iOP1 JIQ50+pf8DXPpbpA83Fs2itwDl4sBPeGKIivt+V7Y3rkvVDAN9ra5XOluwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFM5N2vws9WWNAuVoKMLJE1NSnt6OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzIzOTdm Yi0wZGQwLTQxYzMtYmM2ZS1iYTg3NDM5YjdkYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMjM5N2Zi LTBkZDAtNDFjMy1iYzZlLWJhODc0MzliN2RhOS8xL3prM2FfQ3oxWlkwQzVXZ293 c2tUVTFLZTNvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDW/UYMA8EAgACMAkDBwAgAQZ8G2QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxftMA0GCSqGSIb3DQEBCwUAA4IBAQBmD2ErIR/O Li6oNDFFaRXQnCvVjxDIn3n7b4xkM75YUepunajf7W202d4AQ9Pww9qXV8YESBS5 saisnojIC7UGf8CAOYxsuwNkk+AcRSfbMujzuZPHrnsjf9M8HEEWSET8iuu/AOpf HrFfuvLcDpeCnSpsvPIlBRQBUNvtAH2Oe+YcQPcVyAzUEYvVRlytupI3bnmLNM+w 0+gF3cXR89x3blex1CwuQLgxr6npsrWM9u3majsX/PmrmgF994wOyR2TEzpFfpaw AI0D6izkbQhVADm2u1vy32EGcEgKKOrXCdS7UebaUo3LTwBuVMLRF1Pm6FyXZxWJ gqa+cKz2gGcB -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:19 2026 by rpki-client