This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer File: zsY7h6iuwJPb5H3MqShg6oQSKOA.cer (raw, json) Hash identifier: ksmxdjvugdMyrqWStVUcGdLvRStFF5OUNutmE1+NAlU= Subject key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FEF5BC47A9B2B8ECCDA7B6CF54F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29513 AS: 31697 IP: 37.60.184.0/21 IP: 46.31.208.0/21 IP: 80.64.224.0/21 IP: 89.251.48.0/20 IP: 146.66.144.0/21 IP: 193.105.225.0/24 IP: 194.180.228.0/22 IP: 217.64.48.0/20 IP: 2a01:1c0::/32 IP: 2a06:15c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:f5:bc:47:a9:b2:b8:ec:cd:a7:b6:cf:54:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec63b87a8aec093dbe47dcca92860ea841228e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:83:c1:cb:3b:fa:23:85:1e:e0:f3:07:14: e8:4e:12:9f:d1:8a:70:43:7b:88:a6:09:88:24:06: cf:4c:4f:18:48:eb:79:94:a7:18:23:84:dc:79:83: 6b:43:4e:78:dc:bd:25:fc:b1:63:05:1c:76:6f:b0: e9:7b:49:db:fd:19:d8:cd:d4:11:ff:06:4f:70:33: 45:f3:36:87:a2:bb:c6:53:2d:05:d4:25:94:d8:b1: a9:a8:f1:d3:48:76:36:b4:39:86:b1:40:ae:58:be: a5:ff:54:23:40:3e:59:c2:69:83:9c:39:45:d8:a5: ac:67:ef:74:2c:45:a4:50:d0:e0:de:97:c3:06:ba: 9a:78:79:cf:9f:6d:1a:69:24:82:61:0e:47:71:49: 1d:f5:8b:12:86:b7:3e:36:d6:2a:14:b9:c6:b2:f8: 2a:6f:00:fb:f0:16:10:bd:e4:db:8d:68:b8:a6:17: 42:66:b3:9d:32:e4:c8:81:e6:71:38:87:31:fe:44: 45:42:08:a5:78:48:ba:37:63:a3:f1:52:48:31:46: 86:fb:dc:11:81:9b:95:4d:91:c8:1c:ec:47:4d:fa: be:01:08:e2:50:4c:2a:f6:6b:e8:74:7a:07:b5:90: 8d:68:f1:40:3a:46:2f:59:b9:15:1c:4e:92:85:fc: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.184.0/21 46.31.208.0/21 80.64.224.0/21 89.251.48.0/20 146.66.144.0/21 193.105.225.0/24 194.180.228.0/22 217.64.48.0/20 IPv6: 2a01:1c0::/32 2a06:15c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29513 31697 Signature Algorithm: sha256WithRSAEncryption 49:9e:45:e6:94:0f:0f:da:e2:73:58:bc:07:bf:e5:f1:de:8d: f8:9a:ac:c3:dd:a6:0a:f1:4a:cc:3b:c1:2a:6b:15:9c:c3:69: 48:1c:ca:52:9a:6f:ce:26:55:f1:45:96:17:cd:c0:4a:0c:d6: df:30:86:95:d0:b5:26:31:c7:51:13:6a:53:e9:64:a7:9b:a8: 8f:ea:09:22:cc:04:b2:e2:b3:d6:4f:82:f3:ea:dd:40:83:ee: a3:19:b5:44:36:5e:8f:cd:6f:0f:f8:bd:ac:b2:35:10:59:f1: 11:66:24:c7:64:d1:a8:06:6c:bb:00:1f:c1:ee:ae:f8:65:22: 02:39:77:f8:8a:90:df:29:46:30:fa:51:43:2f:5b:e3:45:34: ce:95:f6:9a:65:65:a9:58:6e:27:30:86:2c:ff:33:35:ce:ec: 8d:ef:38:29:16:13:54:d0:74:e8:5d:d5:c1:60:59:b0:3b:d3: 0c:b5:24:34:11:29:3a:09:15:fe:60:be:11:29:44:2a:85:ba: ec:3a:8f:79:bb:0b:70:24:e5:7b:e4:11:18:88:cb:8b:4e:e7: ec:d4:76:1d:89:1d:63:df:77:9d:5e:b9:70:57:55:d0:4d:7a: c7:15:6a:27:21:8a:8a:e0:4d:bd:52:91:0d:10:91:be:24:93: be:5f:27:4d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt+pv71vEepsrjszae2z1T2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWM2M2I4N2E4YWVjMDkzZGJlNDdkY2NhOTI4NjBlYTg0MTIyOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3uDwcs7+iOFHuDzBxToThKf0Ypw Q3uIpgmIJAbPTE8YSOt5lKcYI4TceYNrQ0543L0l/LFjBRx2b7Dpe0nb/RnYzdQR /wZPcDNF8zaHorvGUy0F1CWU2LGpqPHTSHY2tDmGsUCuWL6l/1QjQD5ZwmmDnDlF 2KWsZ+90LEWkUNDg3pfDBrqaeHnPn20aaSSCYQ5HcUkd9YsShrc+NtYqFLnGsvgq bwD78BYQveTbjWi4phdCZrOdMuTIgeZxOIcx/kRFQgileEi6N2Oj8VJIMUaG+9wR gZuVTZHIHOxHTfq+AQjiUEwq9mvodHoHtZCNaPFAOkYvWbkVHE6Shfy8rwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFM7GO4eorsCT2+R9zKkoYOqEEijgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E4MmY0 My01MDJiLTQyZmItODhlYi04M2JkNjZmNGU2ZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTgyZjQz LTUwMmItNDJmYi04OGViLTgzYmQ2NmY0ZTZmNi8xL3pzWTdoNml1d0pQYjVIM01x U2hnNm9RU0tPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQDJTy4AwQDLh/QAwQDUEDgAwQEWfswAwQDkkKQ AwQAwWnhAwQCwrTkAwQE2UAwMBQEAgACMA4DBQAqAQHAAwUDKgYVwDAdBggrBgEF BQcBCAEB/wQOMAygCjAIAgJzSQICe9EwDQYJKoZIhvcNAQELBQADggEBAEmeReaU Dw/a4nNYvAe/5fHejfiarMPdpgrxSsw7wSprFZzDaUgcylKab84mVfFFlhfNwEoM 1t8whpXQtSYxx1ETalPpZKebqI/qCSLMBLLis9ZPgvPq3UCD7qMZtUQ2Xo/Nbw/4 vayyNRBZ8RFmJMdk0agGbLsAH8HurvhlIgI5d/iKkN8pRjD6UUMvW+NFNM6V9ppl ZalYbicwhiz/MzXO7I3vOCkWE1TQdOhd1cFgWbA70wy1JDQRKToJFf5gvhEpRCqF uuw6j3m7C3Ak5XvkERiIy4tO5+zUdh2JHWPfd51euXBXVdBNescVaichiorgTb1S kQ0Qkb4kk75fJ00= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:35 2026 by rpki-client