This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer File: zltHouqq5MEDTJEAPnz-PTjR5VU.cer (raw, json) Hash identifier: GNu2ZL/wAP/3Q0fTv0pZG7BtNJwCEw46HDN2+Sy1sNE= Subject key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED1F53DC95FC5EEA6DD202C0998106 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199126 IP: 195.66.67.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:53:dc:95:fc:5e:ea:6d:d2:02:c0:99:81:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:69:13:7d:9f:7a:4b:1d:06:e1:b5:51:a2: c8:3a:d4:0e:6f:62:c4:de:49:f2:a8:f8:c7:17:ac: a3:1a:f7:69:b7:61:6a:61:0c:19:5a:92:d3:84:e1: d2:42:b2:6d:3d:48:69:52:c6:06:e0:69:9f:e5:86: 4d:63:eb:43:60:e7:a9:3a:06:e7:61:2d:c4:b8:1c: 6c:be:0e:18:01:7c:08:8a:71:12:e1:82:08:37:a0: 0e:1a:8e:b1:e7:ae:b2:6b:1e:e5:04:64:7b:a5:d9: dd:3f:e0:7e:a4:de:b5:87:41:17:7f:3d:8b:5e:3a: b1:39:5f:e1:ac:af:8d:73:ef:ec:ea:e2:15:d8:84: f3:38:e5:75:61:79:76:58:ae:5f:76:8a:86:63:74: b9:84:3b:19:4d:9a:f3:ee:0b:97:3d:83:fd:65:ba: a7:fe:a2:44:09:fe:7c:9b:a5:78:1e:96:01:d0:49: 3a:f9:d2:02:61:c6:4b:ea:66:e4:94:71:3c:28:28: ec:78:97:8b:6b:78:c0:b9:ff:8c:f6:9c:c2:3a:a5: 24:d7:4d:4e:fc:9e:b7:87:2f:f6:18:bc:31:5a:7c: be:7f:ae:5e:ce:b8:9e:11:9f:16:b1:da:a5:19:d7: 57:cd:7d:af:b4:21:87:93:d0:f9:f2:99:5b:b3:ab: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.67.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199126 Signature Algorithm: sha256WithRSAEncryption 61:2a:71:ca:73:34:6d:79:f1:f4:19:f8:46:80:52:df:ed:4e: 9f:57:fb:94:76:34:b3:c3:78:71:d7:55:5f:d7:09:61:e9:59: bd:3e:75:96:65:e8:3c:8e:a2:9b:41:a2:8b:49:92:93:12:14: 7e:3d:d7:09:e1:c1:c6:ae:66:17:ce:95:fb:20:1b:1d:ad:bb: 76:45:fe:06:ea:77:2f:76:0c:2d:d1:d5:2c:57:0f:0a:9a:ae: 45:5d:f4:fb:d0:fb:f2:e8:1e:f8:53:8b:f0:7a:3e:c4:59:7f: 62:b8:16:00:2e:ac:35:ce:99:6d:da:67:d1:21:2e:2e:7a:99: f8:7f:58:ac:4f:4c:70:48:68:50:25:31:e0:4c:b6:65:c7:cd: 2f:e2:c5:85:c9:9b:09:3e:71:d8:c3:fc:64:4c:8a:4a:1e:9c: 0d:a1:41:ca:33:ad:0d:73:cb:a4:07:90:a6:bc:66:87:1a:88: e7:79:29:52:3d:e3:32:20:ec:df:54:9b:0f:b3:00:c4:28:86: d5:c9:09:e5:cc:40:cd:95:80:5a:5f:f3:e9:e4:2a:0b:96:e6: 40:73:cd:72:c1:95:cc:71:86:bc:37:2c:b5:f0:c9:f4:c3:8d: 96:c5:ce:29:83:c0:3a:b1:ad:a8:87:3a:45:21:6e:57:26:a2: bf:7b:98:ee -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57R9T3JX8Xupt0gLAmYEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTViNDdhMmVhYWFlNGMxMDM0YzkxMDAzZTdjZmUzZDM4ZDFlNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYZpE32feksdBuG1UaLIOtQOb2LE 3knyqPjHF6yjGvdpt2FqYQwZWpLThOHSQrJtPUhpUsYG4Gmf5YZNY+tDYOepOgbn YS3EuBxsvg4YAXwIinES4YIIN6AOGo6x566yax7lBGR7pdndP+B+pN61h0EXfz2L XjqxOV/hrK+Nc+/s6uIV2ITzOOV1YXl2WK5fdoqGY3S5hDsZTZrz7guXPYP9Zbqn /qJECf58m6V4HpYB0Ek6+dICYcZL6mbklHE8KCjseJeLa3jAuf+M9pzCOqUk101O /J63hy/2GLwxWny+f65ezrieEZ8WsdqlGddXzX2vtCGHk9D58plbs6uNywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM5bR6LqquTBA0yRAD58/j040eVVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzMxZjI1 Zi1lZWQ1LTQ3YWQtOTJkNC1lMjczNjA3OTZlMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMzFmMjVm LWVlZDUtNDdhZC05MmQ0LWUyNzM2MDc5NmUxOC8xL3psdEhvdXFxNU1FRFRKRUFQ bnotUFRqUjVWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0JDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMJ1jANBgkqhkiG9w0BAQsFAAOCAQEAYSpxynM0bXnx9Bn4RoBS3+1On1f7lHY0 s8N4cddVX9cJYelZvT51lmXoPI6im0Gii0mSkxIUfj3XCeHBxq5mF86V+yAbHa27 dkX+Bup3L3YMLdHVLFcPCpquRV30+9D78uge+FOL8Ho+xFl/YrgWAC6sNc6Zbdpn 0SEuLnqZ+H9YrE9McEhoUCUx4Ey2ZcfNL+LFhcmbCT5x2MP8ZEyKSh6cDaFByjOt DXPLpAeQprxmhxqI53kpUj3jMiDs31SbD7MAxCiG1ckJ5cxAzZWAWl/z6eQqC5bm QHPNcsGVzHGGvDcstfDJ9MONlsXOKYPAOrGtqIc6RSFuVyaiv3uY7g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:07 2026 by rpki-client