This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer File: zo2SrOCAEcTQrsjyKGVxW9kaASI.cer (raw, json) Hash identifier: NlWy7wYx849J3tb3iibbT4HS/dBdMjH/8k12wgxXDLw= Subject key identifier: CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AF60ED7F9EEB376634FE77A350FC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202657 IP: 185.158.64.0/22 IP: 2a07:aa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f6:0e:d7:f9:ee:b3:76:63:4f:e7:7a:35:0f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce8d92ace08011c4d0aec8f22865715bd91a0122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:57:d1:03:04:04:1c:d0:61:e2:d0:16:a1: e0:c6:5d:90:b3:bc:ce:4f:18:3f:bb:93:4e:40:d2: 9e:5f:bd:89:43:e3:40:14:d4:60:98:66:2d:e0:c0: ba:e0:a5:ff:67:91:c3:82:f4:20:3a:e0:b7:fb:95: c9:7a:9c:1c:5d:1f:31:f0:1d:67:cf:d1:ce:42:ab: e6:95:2c:08:94:dc:55:30:0e:c7:89:9e:f9:5f:2f: 47:4f:af:56:8c:69:92:2e:e7:97:a8:bc:08:ec:10: e6:62:0c:69:5d:cd:cb:e9:64:b5:d4:8b:7a:18:30: 05:a8:f0:31:4f:2a:a2:29:41:ba:88:46:c5:a3:2e: 2a:24:9c:b2:a4:e5:a7:0f:be:fc:d6:ad:cc:6c:ca: bb:60:8b:07:88:36:3c:bd:c0:d4:07:3a:75:20:78: ed:53:cc:cb:9a:45:74:8e:5b:9e:ae:a2:a9:da:3b: ed:b1:33:6e:f7:e1:8d:cb:25:74:f0:06:d9:7d:63: 90:56:d3:f9:a2:92:63:38:b3:43:d6:5b:00:c8:37: 2b:44:31:f0:b4:4a:e1:0c:de:15:01:fa:48:6c:f2: 13:98:ef:ba:d6:d9:33:ef:40:45:2b:76:e1:33:77: 45:1c:1b:9c:fc:ef:6a:b7:b0:4a:36:fc:cf:ed:98: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.64.0/22 IPv6: 2a07:aa80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202657 Signature Algorithm: sha256WithRSAEncryption 20:e4:8f:b2:2a:4f:a4:07:6c:65:ee:69:64:80:c4:e9:80:64: ea:34:12:91:7a:4c:8d:93:db:22:1e:5a:db:b2:6f:46:c4:27: 30:d0:59:8e:6f:b1:05:52:58:76:c2:67:4d:2b:ff:d3:35:18: c7:0a:f0:e9:4e:d5:77:18:77:78:ac:43:7b:4e:d0:84:e7:3d: 7d:b4:13:fd:3c:77:f3:d0:95:c9:52:87:57:e8:60:58:f4:54: ff:24:7c:7c:bf:32:56:6d:be:09:70:60:1f:05:73:b2:bb:d3: fd:d2:be:23:d8:5f:2f:47:5d:49:df:15:16:fe:3f:22:f3:ae: 0d:7e:d7:46:5c:31:0e:0c:e9:2e:07:52:03:a2:05:92:51:ae: 10:c5:e6:b0:52:36:b5:33:02:df:d8:3b:1f:04:d3:fc:ea:2f: d9:03:4c:36:89:aa:14:d7:f3:e2:8d:b9:5b:72:e4:bd:27:61: de:4f:6f:54:9a:af:a4:61:6d:5f:e7:b3:93:5f:85:e1:22:f6: d2:a7:1c:13:92:36:55:9e:e8:79:fe:1f:ea:d8:e4:99:20:ec: 97:0f:32:b4:0d:e4:29:10:c5:e1:6b:6b:e4:f7:97:fa:7c:b3: a2:51:7c:ff:aa:61:77:12:a3:78:ab:a6:c1:d5:3c:71:7f:92: b4:7c:45:aa -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9WvYO1/nus3ZjT+d6NQ/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZThkOTJhY2UwODAxMWM0ZDBhZWM4ZjIyODY1NzE1YmQ5MWEwMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFRX0QMEBBzQYeLQFqHgxl2Qs7zO Txg/u5NOQNKeX72JQ+NAFNRgmGYt4MC64KX/Z5HDgvQgOuC3+5XJepwcXR8x8B1n z9HOQqvmlSwIlNxVMA7HiZ75Xy9HT69WjGmSLueXqLwI7BDmYgxpXc3L6WS11It6 GDAFqPAxTyqiKUG6iEbFoy4qJJyypOWnD7781q3MbMq7YIsHiDY8vcDUBzp1IHjt U8zLmkV0jluerqKp2jvtsTNu9+GNyyV08AbZfWOQVtP5opJjOLND1lsAyDcrRDHw tErhDN4VAfpIbPITmO+61tkz70BFK3bhM3dFHBuc/O9qt7BKNvzP7ZjqEwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM6NkqzggBHE0K7I8ihlcVvZGgEiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzE0M2Qw Yi03NzU1LTQyNTAtOGE4Yy01NDU0NDllNDlmNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMTQzZDBi LTc3NTUtNDI1MC04YThjLTU0NTQ0OWU0OWY3My8xL3pvMlNyT0NBRWNUUXJzanlL R1Z4VzlrYUFTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ5AMA0EAgACMAcDBQMqB6qAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXoTANBgkqhkiG9w0BAQsFAAOCAQEAIOSPsipPpAds Ze5pZIDE6YBk6jQSkXpMjZPbIh5a27JvRsQnMNBZjm+xBVJYdsJnTSv/0zUYxwrw 6U7Vdxh3eKxDe07QhOc9fbQT/Tx389CVyVKHV+hgWPRU/yR8fL8yVm2+CXBgHwVz srvT/dK+I9hfL0ddSd8VFv4/IvOuDX7XRlwxDgzpLgdSA6IFklGuEMXmsFI2tTMC 39g7HwTT/Oov2QNMNomqFNfz4o25W3LkvSdh3k9vVJqvpGFtX+ezk1+F4SL20qcc E5I2VZ7oef4f6tjkmSDslw8ytA3kKRDF4Wtr5PeX+nyzolF8/6phdxKjeKumwdU8 cX+StHxFqg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:18 2026 by rpki-client