This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer File: zyddD-Y5mOobfTnlGPsyn3a-0WY.cer (raw, json) Hash identifier: AChoxvFRBjX6NWQr+oFxd6bzrV7EdMjUK+fmzzNP4ec= Subject key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE281E99EF16D57ABE0B21892079DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206506 IP: 212.108.110.0/24 IP: 2001:678:360::/48 IP: 2a0c:8200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:28:1e:99:ef:16:d5:7a:be:0b:21:89:20:79:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:ce:eb:b9:59:63:35:9a:f9:b5:78:10:fd: aa:6e:02:2c:1c:ad:54:1b:a6:93:6c:82:87:05:bf: 09:1d:a2:5a:d3:bc:02:90:f3:55:64:65:84:c4:bc: 0f:4f:de:0e:d6:55:dd:20:99:32:47:33:77:b1:d2: cf:31:11:a8:ba:6d:12:e9:7e:bf:27:2b:dd:12:ac: a4:f1:8f:2e:46:66:dd:7b:1c:b5:71:e1:b8:85:69: 61:1d:38:9b:d7:6a:ae:1f:b0:d9:4f:d7:60:d8:f9: fc:74:01:23:60:e4:82:f9:bb:db:bf:62:4e:ed:2c: bf:fb:de:fe:1a:f1:37:b7:3a:33:41:4e:69:9f:f7: 07:1b:6b:c1:78:32:6d:34:d3:96:ec:31:bc:ce:4a: bb:1c:29:e3:0d:62:ad:57:44:64:aa:9c:69:08:91: 08:24:c8:af:e4:11:f4:97:c4:81:b3:e5:53:ca:ac: ed:79:33:d3:2a:11:71:b8:52:f1:62:10:c0:2c:13: 94:7e:df:7a:8c:4d:dd:31:02:87:54:b3:9c:d1:98: 17:d5:c6:d1:6b:aa:40:73:2c:72:b3:eb:90:18:b5: 6c:56:f0:f7:53:a1:b5:3b:02:e2:c3:ff:ae:a5:85: 74:d7:84:f6:b5:c0:bb:77:34:2e:32:5b:52:9a:56: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.110.0/24 IPv6: 2001:678:360::/48 2a0c:8200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206506 Signature Algorithm: sha256WithRSAEncryption 65:1b:54:b4:25:c8:4a:f6:7c:8f:32:fb:a0:ab:b2:1f:fd:d2: 00:a9:1a:08:fc:bf:05:ab:9b:3b:ca:01:7b:81:44:36:37:91: f5:2a:33:69:60:9f:7e:e2:0f:be:42:44:bd:0d:dd:ff:94:b8: ae:3b:08:41:c3:3e:a8:89:30:42:5f:53:0d:40:32:5f:6b:6b: b4:3d:37:ec:f1:80:34:db:fc:25:cf:77:fe:4e:69:0c:63:a9: 28:f5:99:9a:7a:de:96:93:3b:77:5c:8e:49:64:98:29:18:58: 91:34:77:16:bd:c6:3d:43:fa:33:80:59:1d:20:f1:95:3c:56: 46:b8:61:39:08:50:27:6e:ab:42:e5:16:34:04:75:33:6d:09: 36:67:00:1d:47:74:16:1b:b9:67:75:01:96:2a:41:4b:76:ed: 79:23:85:dc:be:21:1a:de:63:1e:86:23:18:c9:cc:80:a0:7b: e5:1d:56:22:c5:0f:c7:2d:20:f0:22:9e:1c:11:b5:dd:91:51: 28:d3:bf:b7:fc:6a:18:2e:61:27:2b:2a:2b:3a:3d:8f:89:23: 59:d0:74:38:81:9e:07:9d:d7:47:7b:34:0f:45:c0:79:70:d8: 91:75:8e:d7:9b:c5:6d:81:af:a7:15:60:03:46:91:66:b5:2d: c1:65:45:da -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt87igeme8W1Xq+CyGJIHnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI3NWQwZmU2Mzk5OGVhMWI3ZDM5ZTUxOGZiMzI5Zjc2YmVkMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBLO67lZYzWa+bV4EP2qbgIsHK1U G6aTbIKHBb8JHaJa07wCkPNVZGWExLwPT94O1lXdIJkyRzN3sdLPMRGoum0S6X6/ JyvdEqyk8Y8uRmbdexy1ceG4hWlhHTib12quH7DZT9dg2Pn8dAEjYOSC+bvbv2JO 7Sy/+97+GvE3tzozQU5pn/cHG2vBeDJtNNOW7DG8zkq7HCnjDWKtV0RkqpxpCJEI JMiv5BH0l8SBs+VTyqzteTPTKhFxuFLxYhDALBOUft96jE3dMQKHVLOc0ZgX1cbR a6pAcyxys+uQGLVsVvD3U6G1OwLiw/+upYV014T2tcC7dzQuMltSmlak4QIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFM8nXQ/mOZjqG3055Rj7Mp92vtFmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2E3ODUx Yy1iYjc4LTRmMjktYTFkOS03Yjk5MTgyNGJkODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYTc4NTFj LWJiNzgtNGYyOS1hMWQ5LTdiOTkxODI0YmQ4My8xL3p5ZGRELVk1bU9vYmZUbmxH UHN5bjNhLTBXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQA1GxuMBYEAgACMBADBwAgAQZ4A2ADBQMqDIIA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmqjANBgkqhkiG9w0BAQsFAAOCAQEA ZRtUtCXISvZ8jzL7oKuyH/3SAKkaCPy/BaubO8oBe4FENjeR9SozaWCffuIPvkJE vQ3d/5S4rjsIQcM+qIkwQl9TDUAyX2trtD037PGANNv8Jc93/k5pDGOpKPWZmnre lpM7d1yOSWSYKRhYkTR3Fr3GPUP6M4BZHSDxlTxWRrhhOQhQJ26rQuUWNAR1M20J NmcAHUd0Fhu5Z3UBlipBS3bteSOF3L4hGt5jHoYjGMnMgKB75R1WIsUPxy0g8CKe HBG13ZFRKNO/t/xqGC5hJysqKzo9j4kjWdB0OIGeB53XR3s0D0XAeXDYkXWO15vF bYGvpxVgA0aRZrUtwWVF2g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:03 2026 by rpki-client