This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer File: CEl1fj41qqtdV8UYYkOkNxc-TTY.cer (raw, json) Hash identifier: zVG+JjGwWYOOfqGOeuOjwZHSyuxk5nXAmQrp0Ltty6M= Subject key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BBC9A6D8ECD1A194ED0CD3B14096 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49769 AS: 213195 IP: 5.254.168.0/21 IP: 5.254.192.0/19 IP: 46.230.168.0 -- 46.230.255.255 IP: 91.149.32.0/20 IP: 92.241.208.0/21 IP: 93.179.32.0/19 IP: 178.72.0.0/20 IP: 178.72.24.0/21 IP: 185.153.156.0/22 IP: 2a05:c740::/29 IP: 2a0b:4500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bb:c9:a6:d8:ec:d1:a1:94:ed:0c:d3:b1:40:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0849757e3e35aaab5d57c5186243a437173e4d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:d5:8c:c7:00:da:6f:79:29:cd:53:27:4c: 53:e6:5a:31:8c:1b:df:1e:c1:35:ff:86:21:8d:b1: 83:6c:f4:94:90:55:c3:34:c3:66:e1:14:a6:cb:b5: 00:8f:45:e0:bf:60:13:76:76:00:63:f6:65:7c:47: 4b:37:67:65:40:50:43:c4:93:61:09:8c:e0:dc:0e: a2:63:8f:5a:37:8c:dc:f4:1c:98:52:22:51:a1:81: ff:be:31:cd:eb:89:70:52:50:33:00:89:cb:cc:94: db:83:62:ac:85:97:fe:6d:4f:13:36:7a:5a:cf:33: 2a:bd:82:4e:c3:08:7b:4f:e2:1d:bd:0c:14:fb:92: 5f:86:c4:1d:a5:51:3b:b8:23:8d:fa:d9:a3:93:b3: b0:5b:67:69:ad:55:f0:fa:23:fe:39:47:0f:02:5a: b5:6e:d3:b3:42:39:b4:2c:f7:56:87:92:0d:f9:ca: 32:41:6e:05:af:fd:9e:99:4b:11:0f:6d:a8:b3:a7: 7e:79:fa:56:35:47:d8:e7:f9:5b:45:56:0a:3d:b1: bc:c9:3c:d5:3c:fb:cd:33:28:ea:1b:88:c3:c1:c8: 95:01:ec:55:24:7c:1c:d1:60:95:52:33:49:1c:c1: 41:97:cb:c8:61:30:fc:54:ef:57:80:7c:3e:f0:de: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.168.0/21 5.254.192.0/19 46.230.168.0-46.230.255.255 91.149.32.0/20 92.241.208.0/21 93.179.32.0/19 178.72.0.0/20 178.72.24.0/21 185.153.156.0/22 IPv6: 2a05:c740::/29 2a0b:4500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49769 213195 Signature Algorithm: sha256WithRSAEncryption 08:98:44:c0:db:dd:f6:76:a7:fd:e4:e0:ca:32:cb:0e:6b:d2: 7e:89:3d:ce:89:ca:95:d7:4b:bf:fd:02:e6:2c:e9:10:61:5a: be:a1:73:42:8e:88:dc:45:64:8a:73:00:cf:1a:f1:b6:8a:b2: a4:d4:6f:de:38:e5:41:14:34:09:e3:9d:ce:d4:05:7a:d2:49: 30:e3:f4:4c:5d:a9:5d:eb:8a:27:cb:1f:da:c7:f0:55:c6:0b: 06:28:cb:0d:d5:e2:45:77:04:4b:a6:d7:49:69:a3:83:91:16: ff:76:52:9b:48:14:16:44:c4:9b:08:cd:6a:8c:d8:5a:5e:4b: af:96:b2:00:bd:d8:82:62:a9:e9:26:32:a0:d1:bb:b4:63:38: 12:5c:e7:7c:2d:26:2a:e8:fd:ea:8d:e0:c1:81:e4:1c:e2:be: 02:ef:3c:fd:c2:f6:9d:47:62:b2:7a:6d:09:39:ca:91:cd:03: 87:28:2b:9e:ca:40:9d:03:45:69:72:93:94:37:cb:da:8f:a2: d9:8a:73:f2:ca:a8:ac:4c:2b:26:2e:2a:28:be:c3:18:a1:69: 35:dd:0e:ab:b0:3a:e9:06:7c:2b:64:d4:22:78:4e:76:cd:16: 20:8a:4b:1b:9d:66:6b:8c:2f:3c:fb:5b:29:75:ff:5a:22:65: bb:dc:a3:ca -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISAZt/FbvJptjs0aGU7QzTsUCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODQ5NzU3ZTNlMzVhYWFiNWQ1N2M1MTg2MjQzYTQzNzE3M2U0ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHVjMcA2m95Kc1TJ0xT5loxjBvf HsE1/4YhjbGDbPSUkFXDNMNm4RSmy7UAj0Xgv2ATdnYAY/ZlfEdLN2dlQFBDxJNh CYzg3A6iY49aN4zc9ByYUiJRoYH/vjHN64lwUlAzAInLzJTbg2KshZf+bU8TNnpa zzMqvYJOwwh7T+IdvQwU+5JfhsQdpVE7uCON+tmjk7OwW2dprVXw+iP+OUcPAlq1 btOzQjm0LPdWh5IN+coyQW4Fr/2emUsRD22os6d+efpWNUfY5/lbRVYKPbG8yTzV PPvNMyjqG4jDwciVAexVJHwc0WCVUjNJHMFBl8vIYTD8VO9XgHw+8N5dOwIDAQAB o4IC8jCCAu4wHQYDVR0OBBYEFAhJdX4+NaqrXVfFGGJDpDcXPk02MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2ZiMjQw MS1lNDcwLTRjMDUtOTliOC1mOGVlY2I0MjUwODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZmIyNDAx LWU0NzAtNGMwNS05OWI4LWY4ZWVjYjQyNTA4Ny8xL0NFbDFmajQxcXF0ZFY4VVlZ a09rTnhjLVRUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzBDBAIAATA9AwQDBf6oAwQFBf7AMAsDBAMu5qgDAwAu5gMEBFuV IAMEA1zx0AMEBV2zIAMEBLJIAAMEA7JIGAMEArmZnDAUBAIAAjAOAwUDKgXHQAMF AyoLRQAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMJpAgMDQMswDQYJKoZIhvcN AQELBQADggEBAAiYRMDb3fZ2p/3k4Moyyw5r0n6JPc6JypXXS7/9AuYs6RBhWr6h c0KOiNxFZIpzAM8a8baKsqTUb9445UEUNAnjnc7UBXrSSTDj9ExdqV3riifLH9rH 8FXGCwYoyw3V4kV3BEum10lpo4ORFv92UptIFBZExJsIzWqM2FpeS6+WsgC92IJi qekmMqDRu7RjOBJc53wtJiro/eqN4MGB5BzivgLvPP3C9p1HYrJ6bQk5ypHNA4co K57KQJ0DRWlyk5Q3y9qPotmKc/LKqKxMKyYuKii+wxihaTXdDquwOukGfCtk1CJ4 TnbNFiCKSxudZmuMLzz7Wyl1/1oiZbvco8o= -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:40 2026 by rpki-client