This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer (raw, json) Hash identifier: rc1PALettu2l1ZzNOtlGUqMO6LVnyXBypVQmPQ770o0= Subject key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CF78FB5AD3A11AC1173163BE36C9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.105.33.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f7:8f:b5:ad:3a:11:ac:11:73:16:3b:e3:6c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:5a:3a:f6:e6:9b:0f:88:ad:b6:1b:6e:b9: 15:de:19:d4:fb:3c:43:05:11:37:bb:40:63:97:74: d2:10:43:27:7e:52:65:6c:88:da:6a:0e:9f:30:45: 3c:99:d8:8a:30:44:18:e7:69:b9:f9:8b:67:34:89: c1:b6:d1:84:79:71:24:6f:75:8e:8f:c8:0f:51:08: c7:56:04:3a:7a:60:83:90:33:5f:1b:01:15:bd:60: c4:73:2a:b6:ad:57:9c:43:23:1f:c8:dc:a1:16:df: bd:21:81:e6:8d:03:64:dc:b5:92:43:f4:31:2a:93: 8d:56:70:78:e9:6a:ea:35:91:b0:79:8f:65:9b:ac: 66:3f:08:b2:af:4b:43:99:64:85:7a:f6:7f:26:e6: 24:ba:97:b7:19:df:08:f0:ee:90:97:be:b9:45:82: 21:29:1f:86:fd:f6:d5:e2:b9:7f:bf:8c:50:5f:ac: f8:67:20:6a:fb:c0:5d:30:22:f6:85:60:8d:c7:af: 71:a2:c6:f7:08:77:a3:bb:f9:d7:bd:8a:cb:af:db: 25:62:31:90:61:1a:0a:52:7a:f3:56:ff:b3:a2:63: 8c:78:7e:e5:ef:c8:ef:30:6e:6e:40:f3:66:2a:0c: 8b:aa:32:b0:b4:94:44:3f:70:c6:b3:62:8c:f6:c0: ad:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.33.0/24 Signature Algorithm: sha256WithRSAEncryption 85:7e:09:a8:df:51:2c:ec:c2:71:ac:ff:c1:f8:04:44:f8:6b: 63:f8:ef:da:98:bb:db:3a:09:4a:2f:71:73:ba:17:1d:4c:65: 94:f6:b8:ef:d6:62:52:2c:75:b2:2a:b0:2b:c2:52:6c:8d:bd: ac:1d:29:66:83:9b:e2:45:af:b7:a3:f2:51:46:3d:72:82:cf: 66:4a:c9:35:92:21:28:a8:fc:30:7e:23:a6:60:cb:e8:71:f4: 99:10:90:8f:31:7e:ba:99:be:0d:b6:ca:a8:df:c9:a7:ba:4d: 3d:77:80:18:36:bf:21:7d:ca:c0:f3:02:f2:a0:fa:24:85:16: 33:09:f5:84:09:60:50:be:44:1a:64:60:f9:ff:ed:bc:ab:cf: f0:64:88:9f:c0:e2:fa:b5:85:47:77:2e:67:48:cc:37:6f:15: dc:14:e0:55:94:16:7c:5a:a5:21:71:c3:be:f8:62:8f:14:f5: 97:cf:e7:24:d9:4a:f9:37:74:f5:0e:38:a8:be:4d:84:f4:37: f8:e3:e4:09:5c:e8:12:54:5b:aa:e8:92:20:26:f2:13:08:47: 2b:d1:a7:01:b5:cb:68:83:d1:b3:6b:b6:f0:f7:0a:62:ad:cd: 14:ba:a3:42:31:b8:0f:61:53:dd:eb:19:28:2b:61:ed:eb:1e: ca:df:4c:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XPePta06EawRcxY742yfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjEyODAxMTlmNDQwZWI5OWMxZTY0ZDczNWYyZGIxZWZjZjkzODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f5aOvbmmw+IrbYbbrkV3hnU+zxD BRE3u0Bjl3TSEEMnflJlbIjaag6fMEU8mdiKMEQY52m5+YtnNInBttGEeXEkb3WO j8gPUQjHVgQ6emCDkDNfGwEVvWDEcyq2rVecQyMfyNyhFt+9IYHmjQNk3LWSQ/Qx KpONVnB46WrqNZGweY9lm6xmPwiyr0tDmWSFevZ/JuYkupe3Gd8I8O6Ql765RYIh KR+G/fbV4rl/v4xQX6z4ZyBq+8BdMCL2hWCNx69xosb3CHeju/nXvYrLr9slYjGQ YRoKUnrzVv+zomOMeH7l78jvMG5uQPNmKgyLqjKwtJREP3DGs2KM9sCtrQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM8SgBGfRA65nB5k1zXy2x78+TgnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzE3NTNi Yy1kMjc2LTQ3MTMtOGVkMi1kMjM2ZDk2Y2MyYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMTc1M2Jj LWQyNzYtNDcxMy04ZWQyLWQyMzZkOTZjYzJhZi8xL3p4S0FFWjlFRHJtY0htVFhO ZkxiSHZ6NU9DYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWkhMA0GCSqGSIb3DQEBCwUAA4IBAQCFfgmo 31Es7MJxrP/B+ARE+Gtj+O/amLvbOglKL3FzuhcdTGWU9rjv1mJSLHWyKrArwlJs jb2sHSlmg5viRa+3o/JRRj1ygs9mSsk1kiEoqPwwfiOmYMvocfSZEJCPMX66mb4N tsqo38mnuk09d4AYNr8hfcrA8wLyoPokhRYzCfWECWBQvkQaZGD5/+28q8/wZIif wOL6tYVHdy5nSMw3bxXcFOBVlBZ8WqUhccO++GKPFPWXz+ck2Ur5N3T1Djiovk2E 9Df44+QJXOgSVFuq6JIgJvITCEcr0acBtctog9Gza7bw9wpirc0UuqNCMbgPYVPd 6xkoK2Ht6x7K30xg -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:02 2026 by rpki-client