This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer File: zpE13-0LtjNdGd3W1-mfSK--PAE.cer (raw, json) Hash identifier: 9DyJGvQcQrhMQ0X1xEiYwSlZbdBMGtBGb1vzkdeXVd4= Subject key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1528796AFC37E417BCD536237C5FA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13005 AS: 21233 IP: 85.113.68.0/23 IP: 85.113.80.0/22 IP: 85.113.85.0/24 IP: 85.113.89.0/24 IP: 213.170.128.0 -- 213.170.132.255 IP: 213.170.134.0/24 IP: 213.170.136.0 -- 213.170.140.255 IP: 213.170.144.0/24 IP: 213.170.147.0 -- 213.170.150.255 IP: 213.170.152.0 -- 213.170.154.255 IP: 2001:be0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:28:79:6a:fc:37:e4:17:bc:d5:36:23:7c:5f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:6d:64:0c:86:2d:92:4f:dc:ac:80:cd:08: 7a:fa:0d:4e:43:9d:be:f5:96:31:3d:d3:86:a0:23: 33:0b:34:a5:f4:fa:a6:8d:34:8c:5c:ca:58:6c:e5: f0:22:da:27:40:6b:49:6d:27:ce:67:99:d1:ad:05: 99:b9:0b:74:4f:ad:3f:01:fd:2e:b9:5c:63:35:61: 94:d9:96:2a:d9:c2:e6:ac:90:50:e9:0e:d5:ad:9c: 35:fd:a6:aa:3d:d7:25:f9:9c:53:c4:12:63:98:ea: aa:f0:d1:e7:ee:cd:7f:86:ba:4d:e2:a7:c8:c7:11: 5b:65:66:07:c0:7b:1e:57:56:38:15:5a:90:26:f6: d9:aa:3b:21:d8:98:75:73:83:f3:d2:af:21:af:68: 72:f2:23:44:26:09:a8:3a:b2:2f:21:e5:f1:c8:56: c8:97:8a:80:77:9f:33:70:5f:7b:11:58:9a:79:f9: 17:c6:2c:10:a0:56:06:bd:a6:44:68:7e:8c:49:c2: 10:2e:05:02:9d:fd:5f:03:fc:16:a2:f4:0c:17:d9: 9e:1d:65:05:78:e0:24:be:66:59:7b:21:c3:49:42: 17:f5:62:07:cd:4b:30:92:8b:0c:46:16:d3:fd:08: 46:9d:13:90:2c:18:43:2b:83:32:cf:4d:83:8a:6c: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.113.68.0/23 85.113.80.0/22 85.113.85.0/24 85.113.89.0/24 213.170.128.0-213.170.132.255 213.170.134.0/24 213.170.136.0-213.170.140.255 213.170.144.0/24 213.170.147.0-213.170.150.255 213.170.152.0-213.170.154.255 IPv6: 2001:be0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13005 21233 Signature Algorithm: sha256WithRSAEncryption 72:e8:67:5f:5a:29:8e:e9:bc:00:f1:58:c0:75:db:b1:a6:19: d4:af:95:e3:9a:03:11:4e:26:78:03:22:c9:4d:65:00:90:2b: 20:50:6a:64:f6:8c:a6:5b:86:90:c4:e8:b6:04:d7:5b:73:69: 24:a9:9e:6d:d3:33:79:05:7f:70:10:66:3a:5b:13:5e:05:aa: 6c:50:1b:2a:3f:7b:1f:81:f4:a0:55:bb:61:97:5b:60:e9:88: ff:8a:81:0d:70:77:54:eb:18:24:39:e3:d6:3d:3a:c0:65:59: f0:30:f1:6a:82:01:ec:19:77:45:ec:a9:e6:9d:1d:91:82:d6: cc:ba:79:9d:31:26:29:a1:75:ed:70:d0:49:6b:98:1c:a6:1d: cf:ab:32:e8:40:d7:13:57:b5:b5:4d:e9:bd:14:e0:6a:4d:d4: ef:62:9a:00:17:a1:9e:41:d8:ff:31:72:04:18:a5:87:5e:99: 43:8f:a7:0f:49:0e:af:29:db:cc:37:77:b1:2f:61:55:bb:35: ac:25:1c:48:93:87:56:94:67:68:0e:78:75:19:dc:38:57:b2: 65:5f:ee:89:4d:26:e3:10:c6:e7:0a:21:5f:18:f6:5b:e7:24: e5:a7:95:ff:bc:94:86:e0:87:3b:73:92:23:bd:ad:04:f6:fe: 13:8b:dc:5a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt/FSh5avw35Be81TYjfF+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTkxMzVkZmVkMGJiNjMzNWQxOWRkZDZkN2U5OWY0OGFmYmUzYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWZtZAyGLZJP3KyAzQh6+g1OQ52+ 9ZYxPdOGoCMzCzSl9PqmjTSMXMpYbOXwItonQGtJbSfOZ5nRrQWZuQt0T60/Af0u uVxjNWGU2ZYq2cLmrJBQ6Q7VrZw1/aaqPdcl+ZxTxBJjmOqq8NHn7s1/hrpN4qfI xxFbZWYHwHseV1Y4FVqQJvbZqjsh2Jh1c4Pz0q8hr2hy8iNEJgmoOrIvIeXxyFbI l4qAd58zcF97EViaefkXxiwQoFYGvaZEaH6MScIQLgUCnf1fA/wWovQMF9meHWUF eOAkvmZZeyHDSUIX9WIHzUswkosMRhbT/QhGnROQLBhDK4Myz02Dimyv0QIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFM6RNd/tC7YzXRnd1tfpn0ivvjwBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzNjOWMz Yy1kNjA4LTRlYTItOWEyOC1jMTFlYzZlYTg2YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvM2M5YzNj LWQ2MDgtNGVhMi05YTI4LWMxMWVjNmVhODZiOC8xL3pwRTEzLTBMdGpOZEdkM1cx LW1mU0stLVBBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGEBggrBgEF BQcBBwEB/wR1MHMwYgQCAAEwXAMEAVVxRAMEAlVxUAMEAFVxVQMEAFVxWTAMAwQH 1aqAAwQA1aqEAwQA1aqGMAwDBAPVqogDBADVqowDBADVqpAwDAMEANWqkwMEANWq ljAMAwQD1aqYAwQA1aqaMA0EAgACMAcDBQMgAQvgMB0GCCsGAQUFBwEIAQH/BA4w DKAKMAgCAjLNAgJS8TANBgkqhkiG9w0BAQsFAAOCAQEAcuhnX1opjum8APFYwHXb saYZ1K+V45oDEU4meAMiyU1lAJArIFBqZPaMpluGkMTotgTXW3NpJKmebdMzeQV/ cBBmOlsTXgWqbFAbKj97H4H0oFW7YZdbYOmI/4qBDXB3VOsYJDnj1j06wGVZ8DDx aoIB7Bl3Reyp5p0dkYLWzLp5nTEmKaF17XDQSWuYHKYdz6sy6EDXE1e1tU3pvRTg ak3U72KaABehnkHY/zFyBBilh16ZQ4+nD0kOrynbzDd3sS9hVbs1rCUcSJOHVpRn aA54dRncOFeyZV/uiU0m4xDG5wohXxj2W+ck5aeV/7yUhuCHO3OSI72tBPb+E4vc Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:44 2026 by rpki-client