This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer File: zvRG_kRyumlPwimCmKT40VWZXhY.cer (raw, json) Hash identifier: AWqDSrmQHE82iRuZAccYDhF1SeRVCKF/m8IPdnOJ9bw= Subject key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B12012F4054AA09A647C699A842A0A65B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 10:00:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209083 IP: 5.104.227.0/24 IP: 5.104.229.0 -- 5.104.231.255 IP: 37.148.164.0/24 IP: 37.148.166.0/23 IP: 77.95.224.0/24 IP: 77.95.226.0/23 IP: 77.95.230.0/24 IP: 78.41.200.0/24 IP: 78.41.202.0/24 IP: 89.207.133.0/24 IP: 128.204.193.0/24 IP: 128.204.195.0 -- 128.204.198.255 IP: 128.204.200.0/21 IP: 195.20.204.0/23 IP: 2a14:d680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:2f:40:54:aa:09:a6:47:c6:99:a8:42:a0:a6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 10:00:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cef446fe4472ba694fc2298298a4f8d155995e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:86:4c:7d:ba:b0:d6:00:40:7b:5f:c8:7a: 62:be:9a:b1:57:7c:51:e9:aa:9c:02:fb:e4:75:d0: cf:f2:1c:83:b4:3b:77:9a:af:24:ea:f3:ea:35:53: fe:a9:be:98:08:f1:83:4e:a2:fb:b5:c0:5a:b6:e8: e1:8a:a6:be:ae:0d:7d:fb:7a:1c:bb:50:64:33:36: 1b:c2:ee:00:81:06:01:01:6d:f4:92:9f:f1:e7:52: d6:e7:60:35:e8:94:5e:c3:a3:d0:88:90:c0:7e:c5: b0:57:9a:da:fd:1e:12:10:c2:ea:91:97:e2:f7:d5: f9:89:95:36:96:e4:01:42:71:b7:a5:0e:d4:5d:9d: db:61:a4:a3:11:58:09:51:0e:ff:ca:be:27:76:f3: 87:2c:18:e7:af:2c:36:88:85:cb:23:82:e5:fc:6f: 1f:ed:19:5c:0c:5b:c5:76:68:17:d6:25:f2:8d:d8: 43:f2:aa:6e:2d:16:7c:e6:6e:c4:02:cc:6c:fa:47: 0a:37:8b:43:7d:61:6b:ce:e3:29:d5:d9:10:73:0f: bd:50:d0:3c:1e:ea:fa:ee:51:06:91:26:7e:78:3a: d8:a0:23:94:cf:79:55:2e:c1:d8:b8:43:98:ce:06: 64:40:07:68:d4:59:1d:52:cc:8a:bf:9e:bb:d8:ed: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.227.0/24 5.104.229.0-5.104.231.255 37.148.164.0/24 37.148.166.0/23 77.95.224.0/24 77.95.226.0/23 77.95.230.0/24 78.41.200.0/24 78.41.202.0/24 89.207.133.0/24 128.204.193.0/24 128.204.195.0-128.204.198.255 128.204.200.0/21 195.20.204.0/23 IPv6: 2a14:d680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209083 Signature Algorithm: sha256WithRSAEncryption 3e:59:e1:a2:66:1a:87:ba:75:b0:0e:3a:11:85:73:c1:b6:ab: b5:97:5b:88:b5:0e:9e:4b:92:42:ad:c6:25:00:91:73:13:76: 46:be:a6:1f:74:10:85:9e:ff:59:ed:4d:bf:0c:c4:8d:84:c8: c3:66:aa:ce:ac:30:aa:3b:83:d7:52:8a:ec:f5:70:6e:c2:95: 39:21:99:c1:78:3e:5e:ff:65:39:7a:9f:07:26:38:02:ec:d3: e1:1b:a1:c4:f9:78:d1:a1:5b:84:3a:60:97:92:e9:e8:4a:f8: 78:82:70:31:13:02:2d:bc:b8:6a:a0:92:84:db:8b:74:f4:94: c7:14:b8:55:38:3c:2a:1c:62:89:2a:08:d2:dc:5a:61:ea:5a: 14:2b:16:85:3b:66:64:e3:b9:43:3a:89:0f:c8:45:36:6d:92: d4:28:d5:11:df:27:8f:2a:41:80:26:cf:bc:3c:4b:c1:92:6f: 92:bb:d4:94:9a:56:d5:8b:9d:d9:b7:cf:dc:fb:76:1c:9c:be: 22:8a:2a:bd:90:46:d7:bf:3e:d6:56:26:fb:64:9c:5c:de:34: 0a:b0:76:62:e7:31:86:48:69:94:c0:e5:25:fe:7e:08:a6:4a: 7e:70:87:68:34:d0:0b:48:49:ed:7f:81:89:a4:2f:f6:29:37: 75:18:04:6d -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAZsSAS9AVKoJpkfGmahCoKZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMTAwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY0NDZmZTQ0NzJiYTY5NGZjMjI5ODI5OGE0ZjhkMTU1OTk1ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLCGTH26sNYAQHtfyHpivpqxV3xR 6aqcAvvkddDP8hyDtDt3mq8k6vPqNVP+qb6YCPGDTqL7tcBatujhiqa+rg19+3oc u1BkMzYbwu4AgQYBAW30kp/x51LW52A16JRew6PQiJDAfsWwV5ra/R4SEMLqkZfi 99X5iZU2luQBQnG3pQ7UXZ3bYaSjEVgJUQ7/yr4ndvOHLBjnryw2iIXLI4Ll/G8f 7RlcDFvFdmgX1iXyjdhD8qpuLRZ85m7EAsxs+kcKN4tDfWFrzuMp1dkQcw+9UNA8 Hur67lEGkSZ+eDrYoCOUz3lVLsHYuEOYzgZkQAdo1FkdUsyKv5672O2yuwIDAQAB o4IDDjCCAwowHQYDVR0OBBYEFM70Rv5EcrppT8Ipgpik+NFVmV4WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzUwODQy YS1lZDAyLTRhOWYtYTc4OS05MDEwMDZiYzFmZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNTA4NDJh LWVkMDItNGE5Zi1hNzg5LTkwMTAwNmJjMWZkOC8xL3p2Ukdfa1J5dW1sUHdpbUNt S1Q0MFZXWlhoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGMBggrBgEF BQcBBwEB/wR9MHswagQCAAEwZAMEAAVo4zAMAwQABWjlAwQDBWjgAwQAJZSkAwQB JZSmAwQATV/gAwQBTV/iAwQATV/mAwQATinIAwQATinKAwQAWc+FAwQAgMzBMAwD BACAzMMDBACAzMYDBAOAzMgDBAHDFMwwDQQCAAIwBwMFAyoU1oAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAzC7MA0GCSqGSIb3DQEBCwUAA4IBAQA+WeGiZhqHunWw DjoRhXPBtqu1l1uItQ6eS5JCrcYlAJFzE3ZGvqYfdBCFnv9Z7U2/DMSNhMjDZqrO rDCqO4PXUors9XBuwpU5IZnBeD5e/2U5ep8HJjgC7NPhG6HE+XjRoVuEOmCXkuno Svh4gnAxEwItvLhqoJKE24t09JTHFLhVODwqHGKJKgjS3Fph6loUKxaFO2Zk47lD OokPyEU2bZLUKNUR3yePKkGAJs+8PEvBkm+Su9SUmlbVi53Zt8/c+3YcnL4iiiq9 kEbXvz7WVib7ZJxc3jQKsHZi5zGGSGmUwOUl/n4Ipkp+cIdoNNALSEntf4GJpC/2 KTd1GARt -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:55 2025 by rpki-client