This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer File: zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer (raw, json) Hash identifier: RbUi741rqr/JMisMX7qhHYjNfPK60GwN6vDGt/AZNig= Subject key identifier: CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366164820435C6AA64B649D1086F14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.217.7.0/24 IP: 2a13:43c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:61:64:82:04:35:c6:aa:64:b6:49:d1:08:6f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce42b4385e5772f51d588e2bb7219a122399587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:b8:73:c5:e8:d7:bb:11:a6:e3:4f:dd:e3: d7:d7:e5:bc:97:e8:91:09:8d:52:eb:51:19:4a:c7: 71:2a:99:3d:67:8a:2d:cb:02:3f:e1:9e:0e:43:4c: 8a:ac:d1:d1:12:92:a3:09:1a:61:c7:61:cc:51:00: 43:58:14:9a:f1:f0:f6:eb:08:88:b8:cf:e5:7b:1f: 34:3a:7c:a8:e3:39:8f:13:44:45:66:45:2c:a7:46: d3:e0:3e:2a:ea:31:74:d6:d7:2f:f0:af:89:6e:87: a1:c6:6e:13:48:25:c9:b8:36:e9:1f:d2:cc:fd:21: c3:86:1a:2c:07:9c:ee:dc:91:ca:c4:9a:e9:dd:85: 11:3b:13:dd:50:f7:89:bd:64:64:2c:a1:8c:44:a2: 0d:40:6d:82:df:db:6e:6c:ff:48:87:8f:94:96:04: f4:f2:1f:26:58:09:de:93:20:9d:dd:10:12:e1:94: 93:29:94:ca:be:df:3c:d4:69:61:c7:0d:97:94:42: 57:af:d6:7d:dd:ab:39:0b:e5:5a:9a:32:96:e1:4e: 9c:03:2a:e6:79:bd:23:34:29:e5:70:de:b2:8e:f1: f4:44:66:95:fb:ed:a3:0d:a1:a2:ab:ad:14:70:79: 85:33:b9:fe:5d:0a:f2:de:76:81:2e:0a:30:1f:c6: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.7.0/24 IPv6: 2a13:43c0::/29 Signature Algorithm: sha256WithRSAEncryption 04:41:2a:e2:f2:67:81:b9:3c:55:e0:29:a7:3a:11:1a:b9:0e: 45:95:37:d2:b0:8a:7b:32:5a:4a:58:1c:9c:05:53:4a:87:fe: 29:aa:cc:e7:18:23:59:0f:01:47:e1:9b:13:81:22:a7:a6:e8: 27:59:40:00:0a:e7:a2:e6:4a:a3:7b:ec:1a:e0:c8:85:ec:41: 46:fd:f7:30:34:dd:22:04:e4:3c:16:d7:16:ff:a6:af:6c:90: 81:3d:cd:d6:ae:04:37:23:47:b3:1d:5d:5a:0f:1e:80:47:74: 20:8e:81:68:6e:64:b8:79:f1:79:88:20:7a:cd:c0:10:9a:ab: ba:9a:8f:cc:31:2e:0f:3a:f2:de:94:c2:1e:e9:97:08:3f:fa: 0d:2c:71:39:e5:e0:f6:69:cf:64:6d:66:bc:39:37:eb:6b:e6: e9:60:49:e6:55:b9:2c:06:a7:21:d7:26:22:37:16:39:47:f2: 11:56:a3:52:91:50:99:41:a2:f6:cd:ca:f2:49:b2:46:f2:f7: 0c:9d:a8:c2:ee:b9:3c:18:d9:04:e4:dc:a0:a1:74:fd:f8:81: d5:98:54:c9:58:7f:99:8f:d5:df:33:1d:7e:f8:cb:2c:50:0d: 8d:ed:ea:65:41:1f:d2:6d:e0:8e:cb:d6:d0:5c:68:0c:c0:91: 4b:99:cf:d5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NmFkggQ1xqpktknRCG8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTQyYjQzODVlNTc3MmY1MWQ1ODhlMmJiNzIxOWExMjIzOTk1ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6y4c8Xo17sRpuNP3ePX1+W8l+iR CY1S61EZSsdxKpk9Z4otywI/4Z4OQ0yKrNHREpKjCRphx2HMUQBDWBSa8fD26wiI uM/lex80Onyo4zmPE0RFZkUsp0bT4D4q6jF01tcv8K+Jboehxm4TSCXJuDbpH9LM /SHDhhosB5zu3JHKxJrp3YUROxPdUPeJvWRkLKGMRKINQG2C39tubP9Ih4+UlgT0 8h8mWAnekyCd3RAS4ZSTKZTKvt881Glhxw2XlEJXr9Z93as5C+VamjKW4U6cAyrm eb0jNCnlcN6yjvH0RGaV++2jDaGiq60UcHmFM7n+XQry3naBLgowH8Z0wQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFM5CtDheV3L1HViOK7chmhIjmVh6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2IyZTUy OC1mMWY1LTRjMDUtOTNlZS1jYTE1ZWJmMzdlYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvYjJlNTI4 LWYxZjUtNGMwNS05M2VlLWNhMTVlYmYzN2VjNy8xL3prSzBPRjVYY3ZVZFdJNHJ0 eUdhRWlPWldIby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudkHMA0EAgACMAcDBQMqE0PAMA0GCSqGSIb3 DQEBCwUAA4IBAQAEQSri8meBuTxV4CmnOhEauQ5FlTfSsIp7MlpKWBycBVNKh/4p qsznGCNZDwFH4ZsTgSKnpugnWUAACuei5kqje+wa4MiF7EFG/fcwNN0iBOQ8FtcW /6avbJCBPc3WrgQ3I0ezHV1aDx6AR3QgjoFobmS4efF5iCB6zcAQmqu6mo/MMS4P OvLelMIe6ZcIP/oNLHE55eD2ac9kbWa8OTfra+bpYEnmVbksBqch1yYiNxY5R/IR VqNSkVCZQaL2zcrySbJG8vcMnajC7rk8GNkE5NygoXT9+IHVmFTJWH+Zj9XfMx1+ +MssUA2N7eplQR/SbeCOy9bQXGgMwJFLmc/V -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:44 2026 by rpki-client