This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer File: zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer (raw, json) Hash identifier: S7w14fIpB+ZPkPnI6jy8//9O1QBqHpCDG/m1yes3i+8= Subject key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C5339F2BB029353DE765E68FBF16B34C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 12 Feb 2026 19:00:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34092 AS: 57033 AS: 60860 IP: 81.22.128.0/20 IP: 89.185.0.0/19 IP: 93.185.208.0/21 IP: 109.72.112.0/20 IP: 185.30.200.0/22 IP: 2a04:4c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:53:39:f2:bb:02:93:53:de:76:5e:68:fb:f1:6b:34:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 12 19:00:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:41:58:e7:7c:4a:3c:9b:e5:c8:c0:39:41: fa:b2:b8:35:3d:5b:98:e8:a4:5e:58:89:22:c0:e9: 46:e5:42:f9:dc:83:4c:93:64:55:59:98:a7:19:25: e1:6c:42:8f:92:4e:fe:fb:a2:f1:64:be:4a:04:b4: e7:1f:9d:fb:fd:a8:90:ac:07:02:af:ae:b9:7d:61: f2:49:61:fd:5a:90:8b:ef:7c:95:0e:d8:23:d9:75: b3:8b:82:de:68:2d:7c:3d:ea:8c:35:b9:be:0e:6c: 13:30:d1:4b:1a:40:84:16:38:bb:f6:ae:f6:5b:3d: 1d:f9:c6:2f:24:b6:9a:0f:a8:06:d2:8f:3d:5f:ad: c7:41:a9:fd:92:82:20:68:01:39:66:06:f7:1b:2c: 3d:d9:21:a0:39:f7:b1:98:6e:f1:1f:aa:47:ab:d9: 73:86:b8:c2:00:81:33:e3:0f:90:04:df:db:20:eb: 9a:44:38:95:57:ef:08:fd:c7:54:16:37:47:cd:d4: a0:1a:2e:df:bd:57:0e:20:ec:85:33:5f:73:c9:35: 1c:10:eb:a7:ed:34:4d:81:90:ca:34:bf:0e:4a:04: 20:cc:a9:6c:1e:5b:9a:7c:c4:a8:cc:76:b6:a4:1e: 2b:17:69:ca:c8:76:d7:3e:f4:89:f9:03:f2:ec:f6: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.128.0/20 89.185.0.0/19 93.185.208.0/21 109.72.112.0/20 185.30.200.0/22 IPv6: 2a04:4c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34092 57033 60860 Signature Algorithm: sha256WithRSAEncryption 8d:08:aa:b6:ad:1a:3a:65:0d:25:64:dd:f4:c8:bd:bc:22:8f: cc:64:b3:4b:2b:1f:0e:08:45:dc:78:8c:29:6e:60:85:9d:ec: 0c:1c:14:4d:c2:94:74:77:91:59:b1:87:df:4d:66:40:e9:da: 4f:62:9b:5c:b0:b6:0c:d2:75:6f:d3:16:88:14:a2:18:fa:52: 76:73:6f:22:e9:2e:1a:29:af:0d:ad:14:21:31:e0:e5:41:b6: 6e:89:35:45:a6:7a:45:cd:05:c8:1f:cc:97:32:ba:83:b2:5e: 22:bb:bc:56:0b:3e:89:8b:4c:92:d8:c9:c5:35:da:6a:73:bd: ec:af:22:1a:4d:3e:c5:3b:df:da:27:47:fe:55:0f:8e:a2:c3: 1e:5c:a7:ca:7c:b7:83:0b:41:a8:48:a7:c3:83:b8:9e:8f:ad: 91:0e:81:ea:e1:74:a5:df:2a:e7:f0:9b:19:1c:ed:7b:57:59: e4:e8:b9:fe:ad:e5:31:ae:5c:7f:48:e0:65:a8:91:bd:c8:10: f3:36:21:01:3d:cb:38:12:a0:75:7a:de:39:ce:ed:da:00:8b: 05:0b:33:8f:99:a6:d9:7c:ba:71:15:97:8c:1f:76:d8:ca:1a: f7:e1:da:d1:0a:93:b4:76:2e:97:f4:f1:b7:52:a0:28:11:71: 0a:9a:3e:c1 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZxTOfK7ApNT3nZeaPvxazTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjEyMTkwMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjA2MzFkMzNhM2M5ZGM1YzQ1NDI0ZDU1YzNlNzY2MzgzODY1N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxBWOd8Sjyb5cjAOUH6srg1PVuY 6KReWIkiwOlG5UL53INMk2RVWZinGSXhbEKPkk7++6LxZL5KBLTnH537/aiQrAcC r665fWHySWH9WpCL73yVDtgj2XWzi4LeaC18PeqMNbm+DmwTMNFLGkCEFji79q72 Wz0d+cYvJLaaD6gG0o89X63HQan9koIgaAE5Zgb3Gyw92SGgOfexmG7xH6pHq9lz hrjCAIEz4w+QBN/bIOuaRDiVV+8I/cdUFjdHzdSgGi7fvVcOIOyFM19zyTUcEOun 7TRNgZDKNL8OSgQgzKlsHluafMSozHa2pB4rF2nKyHbXPvSJ+QPy7Pao8wIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFM8GMdM6PJ3FxFQk1Vw+dmODhlejMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4 YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVjYzE3ODQ4Yy8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3 MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvQ0YwNjMxRDMzQTND OURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgME BFEWgAMEBVm5AAMEA1250AMEBG1IcAMEArkeyDANBAIAAjAHAwUDKgRMQDAkBggr BgEFBQcBCAEB/wQVMBOgETAPAgMAhSwCAwDeyQIDAO28MA0GCSqGSIb3DQEBCwUA A4IBAQCNCKq2rRo6ZQ0lZN30yL28Io/MZLNLKx8OCEXceIwpbmCFnewMHBRNwpR0 d5FZsYffTWZA6dpPYptcsLYM0nVv0xaIFKIY+lJ2c28i6S4aKa8NrRQhMeDlQbZu iTVFpnpFzQXIH8yXMrqDsl4iu7xWCz6Ji0yS2MnFNdpqc73sryIaTT7FO9/aJ0f+ VQ+OosMeXKfKfLeDC0GoSKfDg7iej62RDoHq4XSl3yrn8JsZHO17V1nk6Ln+reUx rlx/SOBlqJG9yBDzNiEBPcs4EqB1et45zu3aAIsFCzOPmabZfLpxFZeMH3bYyhr3 4drRCpO0di6X9PG3UqAoEXEKmj7B -----END CERTIFICATE-----Generated at Sat Feb 14 18:33:55 2026 by rpki-client