This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer File: CEGOlpDQ-3Eavzh04cUApidpPAo.cer (raw, json) Hash identifier: 6HhzoKiq07jwMHjl0JaFDAyPeIpVgwUH3FG7wIfS5gM= Subject key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED41FED91E857F95FBBD2C485830EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33171 IP: 31.217.254.0/24 IP: 81.16.180.0/22 IP: 2a11:7340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:fe:d9:1e:85:7f:95:fb:bd:2c:48:58:30:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08418e9690d0fb711abf3874e1c500a627693c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f6:de:87:f9:f3:80:6b:3b:a9:53:ee:9c:f0: a6:75:5f:97:60:8f:c3:b2:5e:2a:a1:5f:67:47:18: 95:46:96:56:01:fe:cf:04:84:45:dc:6d:44:37:c7: 04:a5:62:30:eb:12:9d:e6:61:f4:f0:3e:b8:4f:ee: 8f:fc:d3:34:50:0a:7f:27:36:33:d3:79:3b:85:38: 3e:7a:b3:58:63:df:17:0b:4a:11:40:c2:aa:40:59: 7e:2b:26:6a:c7:59:cd:d9:f1:7b:2e:a3:da:ca:f7: 02:a9:71:57:fd:cb:82:9b:2d:1a:9c:09:c4:7c:9b: ee:8c:a2:d1:9a:16:13:e6:a5:83:63:87:12:d3:a4: 87:7c:61:e2:92:a3:17:3d:c0:24:8b:07:b1:0b:6c: 45:bf:f8:4c:bf:f9:61:42:d4:8f:f8:be:a7:a3:95: eb:4c:10:cb:b7:52:c6:83:de:c4:88:a9:15:aa:5e: 4d:66:a3:bc:81:c4:8c:de:cf:63:52:23:15:15:81: df:46:d0:1d:29:74:7b:31:5f:df:bd:54:08:4f:f8: 12:b3:bd:67:ca:6a:43:ca:c1:f7:68:94:2d:75:da: c9:93:ed:ef:c6:dd:e0:39:a1:92:bc:21:8b:f9:d5: b3:2f:04:fd:1e:65:a4:50:f6:70:c3:23:ef:0d:00: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.254.0/24 81.16.180.0/22 IPv6: 2a11:7340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33171 Signature Algorithm: sha256WithRSAEncryption 4d:b1:14:65:8c:ed:5b:1d:63:6f:74:f8:89:93:bf:19:04:8a: ca:c7:97:9a:53:27:7d:10:93:86:df:51:13:44:14:91:ac:a8: 73:7b:f3:1d:4c:73:cf:e5:3c:4d:07:1c:72:5d:a6:e9:fb:ca: 11:2b:da:69:76:aa:ad:28:35:67:a0:18:8e:97:ff:1a:20:79: b0:28:10:ee:8e:47:de:22:9d:cc:18:9e:fc:1d:78:6c:df:bd: 42:80:61:b9:66:a2:87:c2:03:fa:e4:49:58:24:d2:fa:3a:e8: 91:3b:cd:ed:c7:b6:aa:6a:1d:13:4d:0a:57:57:f1:5f:6f:f1: ad:fb:60:0d:d6:29:04:da:e4:30:fa:40:3a:ab:da:34:ea:fb: 69:15:f9:c1:83:bd:ab:38:89:ec:6b:a3:5a:9a:b8:23:98:a2: 5b:fa:d3:bd:49:d8:e1:43:08:53:cf:97:f4:c6:99:50:95:b8: 71:2a:6c:d1:cf:33:4a:bd:18:05:e2:f4:81:27:35:3d:d2:67: 47:52:d0:8b:09:ca:8a:90:d4:2a:9d:31:cc:b6:13:48:1f:1a: e7:8b:6e:00:f9:0c:fa:48:99:17:bc:cc:bb:2c:2a:ce:60:8d: c2:27:ca:2c:37:dc:dd:e8:0e:56:28:51:b7:ef:0a:b4:fe:ec: 7b:48:87:0b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57UH+2R6Ff5X7vSxIWDDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODQxOGU5NjkwZDBmYjcxMWFiZjM4NzRlMWM1MDBhNjI3NjkzYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fbeh/nzgGs7qVPunPCmdV+XYI/D sl4qoV9nRxiVRpZWAf7PBIRF3G1EN8cEpWIw6xKd5mH08D64T+6P/NM0UAp/JzYz 03k7hTg+erNYY98XC0oRQMKqQFl+KyZqx1nN2fF7LqPayvcCqXFX/cuCmy0anAnE fJvujKLRmhYT5qWDY4cS06SHfGHikqMXPcAkiwexC2xFv/hMv/lhQtSP+L6no5Xr TBDLt1LGg97EiKkVql5NZqO8gcSM3s9jUiMVFYHfRtAdKXR7MV/fvVQIT/gSs71n ympDysH3aJQtddrJk+3vxt3gOaGSvCGL+dWzLwT9HmWkUPZwwyPvDQAkuwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAhBjpaQ0PtxGr84dOHFAKYnaTwKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2U5NzU2 My1jN2U1LTQwMzYtYTc5Ni0yMmMwY2EyMTMzODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvZTk3NTYz LWM3ZTUtNDAzNi1hNzk2LTIyYzBjYTIxMzM4MC8xL0NFR09scERRLTNFYXZ6aDA0 Y1VBcGlkcFBBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAH9n+AwQCURC0MA0EAgACMAcDBQMqEXNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCBkzANBgkqhkiG9w0BAQsFAAOCAQEATbEU ZYztWx1jb3T4iZO/GQSKyseXmlMnfRCTht9RE0QUkayoc3vzHUxzz+U8TQcccl2m 6fvKESvaaXaqrSg1Z6AYjpf/GiB5sCgQ7o5H3iKdzBie/B14bN+9QoBhuWaih8ID +uRJWCTS+jrokTvN7ce2qmodE00KV1fxX2/xrftgDdYpBNrkMPpAOqvaNOr7aRX5 wYO9qziJ7GujWpq4I5iiW/rTvUnY4UMIU8+X9MaZUJW4cSps0c8zSr0YBeL0gSc1 PdJnR1LQiwnKipDUKp0xzLYTSB8a54tuAPkM+kiZF7zMuywqzmCNwifKLDfc3egO VihRt+8KtP7se0iHCw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:14 2026 by rpki-client