This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer (raw, json) Hash identifier: 0uGqAWz+JGn8FoBiob/SQBiLd0attjhTSXEcBQvOWY4= Subject key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7559CE23D7AB00BA0EC645968F226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.106.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:9c:e2:3d:7a:b0:0b:a0:ec:64:59:68:f2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:47:2f:e9:c5:01:56:46:14:8c:08:a8:b8: cd:04:d5:7d:bf:79:ef:65:3c:d9:46:e5:5f:7e:9c: f1:45:02:81:a0:a4:d8:b3:eb:59:50:28:0c:5e:dd: d3:3d:d0:8a:ac:c5:11:d2:72:a0:64:b0:9f:bd:07: a3:fc:12:e6:9f:e9:9f:f7:21:35:78:bc:39:dc:2e: 5a:39:33:39:1f:7a:93:03:15:30:e1:49:e5:33:48: 16:29:e3:01:f1:fd:9d:47:a2:a4:89:ef:2c:d1:35: 35:e4:ca:a2:7e:46:a6:c9:bf:e8:87:7a:b5:7a:c7: f9:bb:74:6a:e5:67:81:76:00:d2:50:ca:45:ac:63: 8f:4e:7e:ad:9e:64:d4:c1:68:4e:f2:b6:95:c1:d5: 49:55:24:dd:11:65:b1:8e:0f:72:6c:23:a2:0e:08: 3b:f1:4b:cb:d0:29:7c:6f:a0:ec:6a:83:65:68:4e: 47:11:1c:44:93:ff:5f:d1:ae:cc:db:bc:63:c3:29: 12:8d:0d:e3:6e:c5:bc:c9:c1:68:5f:d0:2f:9d:63: f4:db:c6:1e:39:49:06:f7:9b:b8:02:d0:1f:75:a0: 58:d1:5c:39:c5:06:fc:e4:6c:56:35:9f:c7:a3:3f: 34:cb:45:7c:b4:11:dc:02:5c:b8:f1:c9:8c:a5:0b: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.106.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:e7:04:04:2c:32:d5:54:28:4b:95:86:4d:36:c4:e6:1c:e9: 0d:f4:12:7a:6a:f7:b8:8a:05:25:ca:51:0d:d0:4b:56:eb:26: 8c:3a:2f:c8:99:90:dc:a2:94:77:1d:76:5c:2c:26:8a:c8:ea: f7:57:eb:b0:59:dc:5f:ed:c0:09:f5:ee:67:10:cc:4e:1a:b9: c5:b0:59:22:71:34:05:4c:f8:32:5d:e4:cd:c7:85:d0:ba:21: 85:8a:46:42:5d:df:2f:c3:94:19:41:ba:61:5b:25:15:46:4a: 40:b4:90:da:50:22:1b:d0:e6:15:24:3b:44:03:1d:55:54:7e: 7e:96:78:52:a7:a3:c3:9b:d7:d5:cc:49:72:9d:94:2c:75:0d: 49:cd:d4:2e:be:3d:0b:cb:90:89:4a:20:b2:27:50:43:70:78: d4:4c:fc:fc:88:34:23:52:67:4d:93:11:d5:19:2b:a8:d0:b2: cc:13:b9:98:5a:f8:32:63:0f:b6:2a:d6:eb:28:65:36:90:66: 88:c7:2e:ea:6b:bf:7e:cb:c6:22:59:71:f7:d9:8e:75:c7:27: b7:02:70:63:2f:d8:57:23:10:c6:4f:7a:40:ec:da:f8:d3:2f: 9b:3c:81:e5:f2:20:18:f5:92:fb:1e:e5:db:7e:ff:a2:97:fc: f0:c6:1a:c2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+p1Wc4j16sAug7GRZaPImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWI1OTI5MzYxZTFkMGRlMTYwYjg3MWYyOWJkZDVhNDA0MGNhMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GpHL+nFAVZGFIwIqLjNBNV9v3nv ZTzZRuVffpzxRQKBoKTYs+tZUCgMXt3TPdCKrMUR0nKgZLCfvQej/BLmn+mf9yE1 eLw53C5aOTM5H3qTAxUw4UnlM0gWKeMB8f2dR6Kkie8s0TU15Mqifkamyb/oh3q1 esf5u3Rq5WeBdgDSUMpFrGOPTn6tnmTUwWhO8raVwdVJVSTdEWWxjg9ybCOiDgg7 8UvL0Cl8b6DsaoNlaE5HERxEk/9f0a7M27xjwykSjQ3jbsW8ycFoX9AvnWP028Ye OUkG95u4AtAfdaBY0Vw5xQb85GxWNZ/Hoz80y0V8tBHcAly48cmMpQu/6wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFM61kpNh4dDeFguHHym91aQEDKERMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2Q0ZGRl ZC1jNTEwLTQ3N2MtOGZhZC1mNjE2ZjAwOTRiMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvZDRkZGVk LWM1MTAtNDc3Yy04ZmFkLWY2MTZmMDA5NGIxNC8xL3pyV1NrMkhoME40V0M0Y2ZL YjNWcEFRTW9SRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAhmowDQYJKoZIhvcNAQELBQADggEBAE/nBAQs MtVUKEuVhk02xOYc6Q30Enpq97iKBSXKUQ3QS1brJow6L8iZkNyilHcddlwsJorI 6vdX67BZ3F/twAn17mcQzE4aucWwWSJxNAVM+DJd5M3HhdC6IYWKRkJd3y/DlBlB umFbJRVGSkC0kNpQIhvQ5hUkO0QDHVVUfn6WeFKno8Ob19XMSXKdlCx1DUnN1C6+ PQvLkIlKILInUENweNRM/PyINCNSZ02TEdUZK6jQsswTuZha+DJjD7Yq1usoZTaQ ZojHLuprv37LxiJZcffZjnXHJ7cCcGMv2FcjEMZPekDs2vjTL5s8geXyIBj1kvse 5dt+/6KX/PDGGsI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:56 2026 by rpki-client