This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer (raw, json) Hash identifier: 9eiYKcuw87BIvCyXkrypCATiCnDx1Ht4MZ3AVnYGcpQ= Subject key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D94186473188D0984549C15D8CC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199062 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d9:41:86:47:31:88:d0:98:45:49:c1:5d:8c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:e6:96:2e:8e:8f:af:4a:a2:70:02:f3:99: 12:f2:32:c5:12:84:10:48:a9:be:3d:2a:cb:54:be: 80:9c:63:27:a0:82:21:f9:21:2b:3f:79:e7:a6:37: 29:62:29:29:fd:12:02:c6:11:fd:a0:36:b2:cf:ff: 12:69:9e:8d:12:a5:56:b4:2f:87:33:84:c0:9c:0e: b5:ca:a8:43:6e:5d:89:bd:0e:94:47:6c:c9:a7:33: 79:aa:dc:40:ce:a8:fa:3e:93:9b:b6:77:f6:4a:de: 57:c7:2f:18:3a:a6:b9:d9:2d:bc:34:e8:f9:9e:df: 80:e7:68:fb:9c:b8:9b:f4:40:dd:ab:0c:6a:ae:54: d0:9b:80:00:82:ea:24:bf:d7:75:b5:37:c6:15:73: 74:ce:c0:f5:79:af:7d:17:90:c1:67:c0:20:08:64: 53:89:5b:35:c6:0f:45:fc:51:91:cc:32:64:06:13: 97:27:15:71:b0:46:34:db:fc:58:d9:f3:ed:50:e4: 54:e2:fb:65:f9:b0:f8:aa:8b:07:43:f4:28:64:29: 64:d4:fb:3f:fd:9d:bd:ac:84:49:e1:ce:26:91:e3: 83:a3:23:03:fd:b6:a7:cf:e2:4e:ab:01:ca:23:be: 61:ba:aa:d2:e3:9a:0f:51:61:7b:86:d4:cf:f7:a6: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199062 Signature Algorithm: sha256WithRSAEncryption 7c:53:92:9e:70:53:d4:c4:7a:e0:1c:ac:16:f7:a5:f1:72:f7: 59:a3:05:6a:f9:b7:d4:45:59:32:b2:6e:d6:bf:bc:a9:0b:1f: a0:c6:38:be:52:f0:ea:43:4e:89:ba:bd:2c:23:af:ee:a6:89: e0:4f:06:bd:47:58:02:5f:a2:29:5a:bb:58:bc:f4:c0:51:56: 9c:bb:e2:37:f4:1c:8b:41:91:6c:9e:64:3f:c5:24:1b:f2:bf: e9:95:da:17:a2:46:e6:b4:97:9d:f3:9a:c1:fc:3c:f3:fb:cb: 94:4b:c6:69:2f:bf:9a:34:42:7e:b7:9e:1d:26:7b:c7:24:c4: 84:e2:0c:ac:9a:c3:db:7f:9a:2d:0c:97:6d:66:59:ed:9d:e8: d7:22:60:08:36:45:84:2d:2a:61:f3:d2:b2:ab:42:2d:94:82: fd:c4:87:74:bb:01:ab:86:8b:0f:b4:05:09:1e:79:ab:6a:ea: 9a:c5:87:d7:b1:09:b3:82:88:f2:79:33:93:68:35:9c:01:10: 80:98:ca:04:c5:cc:66:cf:2f:ee:ea:e0:70:10:81:8d:09:99: d2:56:be:53:d0:a9:3c:f7:9e:75:c0:80:59:2a:17:01:09:38: ee:30:4b:fe:e0:1d:16:26:11:b3:f8:08:96:f7:82:0a:9e:d7: e8:22:a4:2e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gNlBhkcxiNCYRUnBXYzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWVkYWEzNjA0NTE0NmViYzU4NGU3MWI1YzFhZmE2OGE3Mzk5OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG/mli6Oj69KonAC85kS8jLFEoQQ SKm+PSrLVL6AnGMnoIIh+SErP3nnpjcpYikp/RICxhH9oDayz/8SaZ6NEqVWtC+H M4TAnA61yqhDbl2JvQ6UR2zJpzN5qtxAzqj6PpObtnf2St5Xxy8YOqa52S28NOj5 nt+A52j7nLib9EDdqwxqrlTQm4AAguokv9d1tTfGFXN0zsD1ea99F5DBZ8AgCGRT iVs1xg9F/FGRzDJkBhOXJxVxsEY02/xY2fPtUORU4vtl+bD4qosHQ/QoZClk1Ps/ /Z29rIRJ4c4mkeODoyMD/banz+JOqwHKI75huqrS45oPUWF7htTP96Yg9wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFM7tqjYEUUbrxYTnG1wa+minOZmYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzNlN2Rl ZC0zZDBlLTRjZWMtOTYzYy00NDMxZTRmY2IzODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvM2U3ZGVk LTNkMGUtNGNlYy05NjNjLTQ0MzFlNGZjYjM4Mi8xL3p1MnFOZ1JSUnV2RmhPY2JY QnI2YUtjNW1aZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMJljANBgkqhkiG9w0BAQsFAAOCAQEAfFOSnnBT1MR6 4BysFvel8XL3WaMFavm31EVZMrJu1r+8qQsfoMY4vlLw6kNOibq9LCOv7qaJ4E8G vUdYAl+iKVq7WLz0wFFWnLviN/Qci0GRbJ5kP8UkG/K/6ZXaF6JG5rSXnfOawfw8 8/vLlEvGaS+/mjRCfreeHSZ7xyTEhOIMrJrD23+aLQyXbWZZ7Z3o1yJgCDZFhC0q YfPSsqtCLZSC/cSHdLsBq4aLD7QFCR55q2rqmsWH17EJs4KI8nkzk2g1nAEQgJjK BMXMZs8v7urgcBCBjQmZ0la+U9CpPPeedcCAWSoXAQk47jBL/uAdFiYRs/gIlveC Cp7X6CKkLg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:17 2026 by rpki-client