This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer File: zmSRf8O1HbiuDlu806YJTANB6S0.cer (raw, json) Hash identifier: hMEDNFiqfHmlD49jYbKdsvFQuZdX834pUVsydmhSv3s= Subject key identifier: CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BAE3B6EDA9415926B6F4214E167C91F37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 11 Jan 2026 18:04:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215878 IP: 194.156.28.0/22 IP: 2a12:51c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:3b:6e:da:94:15:92:6b:6f:42:14:e1:67:c9:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 11 18:04:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:f1:fe:e4:fc:15:b3:27:dc:a0:96:f1:08: 7a:18:00:09:31:20:88:49:3b:07:96:e0:0e:e2:73: fb:fb:59:6a:d6:96:ec:b7:b9:3b:2e:c5:6f:a4:b6: e5:5c:37:02:c6:6f:bf:c2:56:c3:bb:96:41:c6:4e: f5:09:a0:72:42:c2:4a:e4:a5:37:96:53:8e:58:c9: e1:f8:89:5a:57:32:13:44:b4:a6:04:2a:70:f3:a6: 83:fc:ca:56:ba:13:b8:84:73:18:57:a3:18:c4:d7: 77:bb:6a:c5:6b:f0:c5:a7:ed:87:fb:24:d1:b1:7f: ea:31:bb:be:64:64:13:53:86:fe:3d:34:ba:75:d3: 4f:41:f4:4a:1e:92:86:59:fe:7c:44:d2:58:5b:d8: b6:53:c0:18:c8:c2:19:3f:2e:e3:ea:ca:cc:42:57: 3c:f2:6d:4f:f1:95:32:bd:37:ee:2b:ce:6a:e2:2a: 2f:4b:9c:fa:3a:70:38:15:49:a9:2f:b8:fc:0a:0c: 1b:9a:93:de:68:82:d4:4e:aa:39:4a:ba:3a:71:f4: 47:3d:55:9f:7e:59:99:1d:0f:5b:ca:d3:a8:61:c5: 3d:b0:02:a3:5f:57:07:85:cf:4e:a9:ae:04:6a:cd: de:16:11:5f:3c:e2:17:24:a6:45:4e:30:d5:da:78: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.28.0/22 IPv6: 2a12:51c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215878 Signature Algorithm: sha256WithRSAEncryption 38:9f:a5:61:94:3c:e9:0d:ac:e3:62:bb:33:34:0f:06:eb:ba: 61:20:3d:d2:a4:4d:8d:22:c9:ae:46:72:5f:ac:15:37:5b:2d: 17:0b:0b:95:7f:e0:ea:54:30:ef:11:2a:f3:25:e0:c3:fd:fe: c3:df:62:cc:ca:3b:ed:2d:d8:8f:9e:0d:b5:c1:bb:93:7e:dd: e7:fb:c3:b2:42:c4:e1:76:39:c6:5a:47:e2:18:04:2b:e8:fb: 91:d7:2f:1e:03:b7:37:98:c9:2d:a7:b1:4c:df:55:ef:2c:7f: 7f:f9:14:0d:e6:ae:17:c2:fa:3f:22:8d:07:ea:0a:3b:48:fa: 0e:2c:f5:94:21:2d:43:05:9e:82:44:98:7d:f0:c8:fa:ee:c1: 8a:c9:bc:3d:60:14:a1:18:b0:3c:a6:96:f6:a3:19:f5:64:2a: cd:96:f1:a5:e4:76:51:7e:02:01:4c:9b:78:2a:ad:dd:1f:6c: c6:58:3b:a3:0e:39:c3:0a:fd:50:8b:d7:80:66:5d:6e:05:20: 3a:b4:16:4b:f0:fb:f9:6d:e9:0b:1a:10:35:f6:a9:9b:14:5b: 85:15:4d:6d:07:13:1d:bb:b2:9d:da:17:0a:f0:e5:6b:85:86: 6d:a6:0d:1a:6c:07:42:46:68:56:97:86:9c:7d:f9:3b:93:fd: 0e:9d:5e:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZuuO27alBWSa29CFOFnyR83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTExMTgwNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTY0OTE3ZmMzYjUxZGI4YWUwZTViYmNkM2E2MDk0YzAzNDFlOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkzx/uT8FbMn3KCW8Qh6GAAJMSCI STsHluAO4nP7+1lq1pbst7k7LsVvpLblXDcCxm+/wlbDu5ZBxk71CaByQsJK5KU3 llOOWMnh+IlaVzITRLSmBCpw86aD/MpWuhO4hHMYV6MYxNd3u2rFa/DFp+2H+yTR sX/qMbu+ZGQTU4b+PTS6ddNPQfRKHpKGWf58RNJYW9i2U8AYyMIZPy7j6srMQlc8 8m1P8ZUyvTfuK85q4iovS5z6OnA4FUmpL7j8CgwbmpPeaILUTqo5Sro6cfRHPVWf flmZHQ9bytOoYcU9sAKjX1cHhc9Oqa4Eas3eFhFfPOIXJKZFTjDV2nhuIwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM5kkX/DtR24rg5bvNOmCUwDQektMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2U1NDEw NC0wMGMzLTQ5NWUtYTg2Yy0wN2YzZmJmNGQxM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZTU0MTA0 LTAwYzMtNDk1ZS1hODZjLTA3ZjNmYmY0ZDEzYy8xL3ptU1JmOE8xSGJpdURsdTgw NllKVEFOQjZTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwpwcMA0EAgACMAcDBQAqElHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLRjANBgkqhkiG9w0BAQsFAAOCAQEAOJ+lYZQ86Q2s 42K7MzQPBuu6YSA90qRNjSLJrkZyX6wVN1stFwsLlX/g6lQw7xEq8yXgw/3+w99i zMo77S3Yj54NtcG7k37d5/vDskLE4XY5xlpH4hgEK+j7kdcvHgO3N5jJLaexTN9V 7yx/f/kUDeauF8L6PyKNB+oKO0j6Diz1lCEtQwWegkSYffDI+u7Bism8PWAUoRiw PKaW9qMZ9WQqzZbxpeR2UX4CAUybeCqt3R9sxlg7ow45wwr9UIvXgGZdbgUgOrQW S/D7+W3pCxoQNfapmxRbhRVNbQcTHbuyndoXCvDla4WGbaYNGmwHQkZoVpeGnH35 O5P9Dp1e9A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:35 2026 by rpki-client