This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer File: zr9l4AadvMdre1VujB1wWInfJ-k.cer (raw, json) Hash identifier: 3bzeiwarugy3JsL5FHxLqOG9lW1jJTojSJuIO1OREJc= Subject key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC817F572C2E5C877E35D6D72C8249B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202364 IP: 185.119.108.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:17:f5:72:c2:e5:c8:77:e3:5d:6d:72:c8:24:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:9c:e4:a4:7f:ab:5a:68:94:1f:e1:c7:12: fc:db:5e:ff:9a:68:d3:a0:54:e3:81:ce:c8:29:ea: 25:e4:6f:3e:7b:95:2c:fc:cf:3d:03:01:ba:af:e8: fe:62:49:e1:4a:f8:17:72:c5:94:d6:bd:1c:f6:cd: f1:74:bd:09:1e:b7:ee:7e:9d:dc:67:0d:8c:17:02: 1f:a1:6e:35:bc:fc:ac:c2:4d:da:cf:7a:ce:3a:c8: 7d:11:83:c2:31:f8:e7:91:75:04:d3:fe:8e:02:7a: 33:94:48:74:e9:f4:11:e6:a9:80:d6:d6:57:88:10: a6:9a:30:6b:8c:48:2b:2e:3f:cf:96:ca:a5:9b:d1: 82:7c:38:ae:90:54:8d:49:58:3c:62:9d:74:8a:bd: 2f:27:45:7e:5f:54:b4:af:49:c0:0d:77:fa:71:cd: 57:e8:1d:81:6c:45:51:d9:86:ff:b0:38:9d:cb:c5: 69:c4:47:ed:94:6a:86:66:0c:b1:50:4f:34:e8:a7: 42:97:8b:4a:27:60:80:ef:a1:13:29:15:c6:aa:58: 36:73:16:26:26:2b:b4:6c:6e:2d:bb:8d:b0:bd:71: 57:f9:6d:47:85:e2:df:c0:be:ba:dd:38:d9:d1:18: a7:df:1a:6b:1f:9c:3d:4b:ab:0b:30:c8:67:9e:49: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202364 Signature Algorithm: sha256WithRSAEncryption 73:fe:10:61:8a:57:00:64:3b:cf:4d:a5:b5:ba:6d:ee:e9:02: 71:e1:c4:55:96:2d:bc:87:96:42:37:82:74:cc:83:1e:e5:0e: ae:d3:1e:a4:52:48:85:de:a5:8e:4d:a4:ee:b8:6f:df:6a:d5: be:68:1f:5b:63:82:04:9b:41:ba:e9:1b:64:03:1e:94:f3:15: 78:07:e9:b9:5d:77:71:7e:df:ca:79:15:01:1a:5f:ac:7e:46: b4:38:30:24:43:2b:b6:fb:84:48:e2:5e:33:0e:93:8d:f7:4f: 65:a4:63:ce:ff:b7:90:54:5c:a5:6b:85:29:5a:92:29:7a:8c: 4d:6c:6c:1b:eb:69:f2:ed:f8:c4:ff:68:31:9b:69:db:d2:ff: 26:16:c6:77:a2:01:56:cd:b4:5e:c2:63:f5:fa:00:10:64:ce: 43:04:89:9e:c9:7d:29:b6:1c:1c:65:d5:37:b0:3c:18:5c:38: a0:ef:16:79:17:8e:f5:56:87:c4:b1:c3:8e:3b:05:c4:13:d8: 43:03:38:0e:3c:9f:6c:28:56:9b:9a:24:47:1d:61:88:8b:7f: ca:80:63:b2:4d:bc:9f:9e:2c:76:e9:16:fb:2e:1e:7d:6f:4a: d4:6a:e9:ed:0c:ce:12:11:7a:bd:80:f1:7d:a8:ac:e3:1b:85: 0c:78:26:0a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yBf1csLlyHfjXW1yyCSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWJmNjVlMDA2OWRiY2M3NmI3YjU1NmU4YzFkNzA1ODg5ZGYyN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Gc5KR/q1polB/hxxL8217/mmjT oFTjgc7IKeol5G8+e5Us/M89AwG6r+j+YknhSvgXcsWU1r0c9s3xdL0JHrfufp3c Zw2MFwIfoW41vPyswk3az3rOOsh9EYPCMfjnkXUE0/6OAnozlEh06fQR5qmA1tZX iBCmmjBrjEgrLj/Plsqlm9GCfDiukFSNSVg8Yp10ir0vJ0V+X1S0r0nADXf6cc1X 6B2BbEVR2Yb/sDidy8VpxEftlGqGZgyxUE806KdCl4tKJ2CA76ETKRXGqlg2cxYm Jiu0bG4tu42wvXFX+W1HheLfwL663TjZ0Rin3xprH5w9S6sLMMhnnknZVwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2VhZDc5 YS1kOGExLTRlODctYmFjZi0yM2JhNGE5MWExMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZWFkNzlh LWQ4YTEtNGU4Ny1iYWNmLTIzYmE0YTkxYTEwNS8xL3pyOWw0QWFkdk1kcmUxVnVq QjF3V0luZkotay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXdsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMWfDANBgkqhkiG9w0BAQsFAAOCAQEAc/4QYYpXAGQ7z02ltbpt7ukCceHEVZYt vIeWQjeCdMyDHuUOrtMepFJIhd6ljk2k7rhv32rVvmgfW2OCBJtBuukbZAMelPMV eAfpuV13cX7fynkVARpfrH5GtDgwJEMrtvuESOJeMw6TjfdPZaRjzv+3kFRcpWuF KVqSKXqMTWxsG+tp8u34xP9oMZtp29L/JhbGd6IBVs20XsJj9foAEGTOQwSJnsl9 KbYcHGXVN7A8GFw4oO8WeReO9VaHxLHDjjsFxBPYQwM4DjyfbChWm5okRx1hiIt/ yoBjsk28n54sdukW+y4efW9K1Grp7QzOEhF6vYDxfais4xuFDHgmCg== -----END CERTIFICATE-----Generated at Sat Feb 7 05:45:32 2026 by rpki-client