This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer (raw, json) Hash identifier: g/FmqQxqMkCN+AWJ58rp/VUt47bz11FDfeBvb28fU5k= Subject key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351E42D2628AAE61D27A0F21DCA4BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.145.152.0/22 IP: 80.83.80.0 -- 80.83.89.255 IP: 80.83.91.0 -- 80.83.95.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1e:42:d2:62:8a:ae:61:d2:7a:0f:21:dc:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:59:2f:2b:10:21:2e:cc:6f:8e:76:87:05: 61:0c:7a:81:26:8d:a3:e7:ba:17:cc:47:c0:e9:42: 29:0c:9f:c2:cb:ad:a0:c4:d9:9b:d9:b7:9e:4d:7d: 4a:9c:7d:18:60:8b:c6:e2:01:ee:90:2b:34:8a:79: 97:39:e7:52:a0:cd:69:1b:68:98:82:55:f1:8f:dc: b5:78:94:43:50:cc:6a:01:96:b5:c8:81:25:1e:96: 77:f4:81:91:80:c8:64:18:9d:21:5d:d1:aa:8f:e7: 4c:f1:4d:86:a1:f3:be:bb:ca:e0:d7:d9:a9:3c:d4: 84:11:26:05:cf:32:b4:01:f4:a5:58:47:db:3a:5e: 46:f2:ab:6a:93:97:5a:a6:5d:d4:cc:ec:c8:8a:57: 27:3b:25:f5:39:2a:0d:c4:c2:cd:cd:6c:a5:62:a6: 72:8d:b0:6b:37:e7:44:0b:50:34:34:fa:39:fd:31: b7:8e:ce:4c:a3:e7:8a:68:04:1f:28:f3:9b:81:91: 97:bc:ed:1c:9a:e5:65:9a:eb:81:a0:00:27:b8:01: ba:17:3d:c4:b2:a8:d5:fc:5c:6b:d9:81:fe:7c:c0: a5:5a:a6:f6:a5:30:b6:05:81:e0:db:68:7d:f5:a6: 24:d7:de:fb:8e:4a:be:1f:6d:6c:89:6e:13:b4:b8: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.152.0/22 80.83.80.0-80.83.89.255 80.83.91.0-80.83.95.255 Signature Algorithm: sha256WithRSAEncryption 76:0c:b3:d9:e7:53:01:8a:34:3b:fe:f3:e8:e5:32:e7:3e:56: c8:ab:55:24:9a:68:ac:e1:5f:99:8e:9c:42:53:06:81:ee:d4: a3:d3:17:66:55:e6:33:28:59:a9:b7:d1:ff:27:11:19:eb:3d: f8:28:63:de:fa:fd:31:6a:9a:02:9f:07:fa:0e:d0:66:c6:bc: 0c:62:94:89:da:19:2f:68:4c:b2:db:59:63:4f:ee:60:09:53: 83:b8:b8:af:c0:f7:c1:48:63:7d:60:ef:bc:e1:15:d8:7f:98: ad:bb:64:09:56:c5:6d:d6:6e:44:b7:68:0c:1a:3d:ba:16:30: df:0c:4b:0b:7b:e5:04:33:11:72:bb:d1:58:a1:73:0a:e4:15: 33:62:17:6d:13:1f:96:08:ec:54:dd:76:66:2b:87:fd:8e:cd: 74:4e:32:08:5f:6a:8c:45:73:8d:08:f9:7c:9f:1f:50:bd:69: aa:34:6f:91:4a:ae:17:97:60:a5:d2:70:12:44:50:4e:7e:31: 9d:f9:d2:92:18:4e:0f:91:6c:59:c2:52:75:be:0a:33:76:ea: cf:40:d8:ee:87:4f:00:c7:86:15:31:1d:47:2c:88:10:03:96: 21:9e:60:91:9e:d8:89:78:ec:8f:cd:14:5b:76:bc:60:7b:58: 9e:1c:2f:8a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NR5C0mKKrmHSeg8h3KS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWM1YWZlNzY5Yjk0MzQ2ZTFjZDM2MmViODVmODc1YjIzYjE3Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl85ZLysQIS7Mb452hwVhDHqBJo2j 57oXzEfA6UIpDJ/Cy62gxNmb2beeTX1KnH0YYIvG4gHukCs0inmXOedSoM1pG2iY glXxj9y1eJRDUMxqAZa1yIElHpZ39IGRgMhkGJ0hXdGqj+dM8U2GofO+u8rg19mp PNSEESYFzzK0AfSlWEfbOl5G8qtqk5dapl3UzOzIilcnOyX1OSoNxMLNzWylYqZy jbBrN+dEC1A0NPo5/TG3js5Mo+eKaAQfKPObgZGXvO0cmuVlmuuBoAAnuAG6Fz3E sqjV/Fxr2YH+fMClWqb2pTC2BYHg22h99aYk1977jkq+H21siW4TtLgeMQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzNkNTY5 Yy0xOTA3LTRkMmMtYWNlZC0zMzI0N2M4ZTFjMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvM2Q1Njlj LTE5MDctNGQyYy1hY2VkLTMzMjQ3YzhlMWMxZi8xL3pzV3Y1Mm01UTBiaHpUWXV1 Ri1IV3lPeGNuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjAoBAIAATAiAwQCLZGYMAwDBARQU1ADBAFQU1gwDAMEAFBTWwME BVBTQDANBgkqhkiG9w0BAQsFAAOCAQEAdgyz2edTAYo0O/7z6OUy5z5WyKtVJJpo rOFfmY6cQlMGge7Uo9MXZlXmMyhZqbfR/ycRGes9+Chj3vr9MWqaAp8H+g7QZsa8 DGKUidoZL2hMsttZY0/uYAlTg7i4r8D3wUhjfWDvvOEV2H+YrbtkCVbFbdZuRLdo DBo9uhYw3wxLC3vlBDMRcrvRWKFzCuQVM2IXbRMflgjsVN12ZiuH/Y7NdE4yCF9q jEVzjQj5fJ8fUL1pqjRvkUquF5dgpdJwEkRQTn4xnfnSkhhOD5FsWcJSdb4KM3bq z0DY7odPAMeGFTEdRyyIEAOWIZ5gkZ7YiXjsj80UW3a8YHtYnhwvig== -----END CERTIFICATE-----Generated at Wed Jan 21 21:33:12 2026 by rpki-client