This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer File: E0QDZgB-tW8Q6fmelSBNMwUIubA.cer (raw, json) Hash identifier: ql2N8YzoqIF2ugIel4uuxYcyr31b8DUE0Q7st9FCf2E= Subject key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3714A9B4F62F6237B5CDA4125C25D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48109 IP: 89.31.192.0/21 IP: 2a01:e9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:71:4a:9b:4f:62:f6:23:7b:5c:da:41:25:c2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13440366007eb56f10e9f99e95204d330508b9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:4b:31:fd:ff:fd:90:da:fc:1a:1f:5b:1e: cc:0a:6a:86:16:e3:39:f6:79:de:10:d2:d0:ac:3c: 38:d5:26:76:8a:06:30:6b:0a:ef:f7:b6:2d:26:bd: 15:b0:c0:39:c6:71:59:61:e5:1c:9e:11:de:43:fb: 80:9e:08:00:e6:8f:90:35:a6:c6:a3:1b:20:34:ba: c5:9e:6f:26:84:09:aa:bf:ce:54:56:e3:92:25:cd: 33:9b:3b:a6:c3:a4:bb:ac:e6:20:45:43:f0:9e:80: 3c:43:0b:fb:96:cf:2b:8a:e7:08:29:07:fa:13:b9: 36:43:d2:85:e6:dc:81:0d:a7:f3:8a:54:20:36:89: 32:3d:6d:98:b1:0a:67:b1:28:06:85:cf:9b:5c:6c: fd:45:11:6c:56:61:69:77:5a:e7:4b:b9:6f:e5:4f: 3f:9f:f4:89:09:a6:ae:d1:e2:b1:61:92:f3:fd:e1: 51:61:5d:f4:50:2c:66:9b:7e:52:09:b4:0b:cd:7b: de:5c:49:80:6d:0c:4b:d3:54:94:35:cc:6d:9d:1c: fb:a1:4e:2e:54:82:35:07:44:96:50:40:9e:9d:7c: 4c:67:84:2b:a1:91:e5:78:d7:07:64:1e:2d:fa:0e: 5a:eb:f5:d0:38:fd:a4:1a:7a:47:ff:32:0f:fc:94: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.192.0/21 IPv6: 2a01:e9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48109 Signature Algorithm: sha256WithRSAEncryption 3c:a4:74:89:f3:43:d6:fd:73:60:a9:1f:04:b0:00:a9:4d:d9: 5f:91:9b:d7:0f:1a:6c:06:11:bc:f8:f3:6d:92:b9:17:74:c0: c8:14:9a:e6:94:a7:7d:7a:84:eb:16:20:f9:77:1d:25:d9:57: fe:be:0e:93:f3:fc:55:5f:bd:f6:89:c1:82:13:de:5f:0b:f2: 7b:e1:c1:a1:c4:46:8c:15:93:27:19:9a:0c:6e:b6:66:03:7e: 3f:6e:a9:97:dd:db:8c:50:36:0e:28:91:0c:0a:50:fc:6b:03: 84:f3:c5:f9:a2:10:54:92:0f:ce:0d:b5:d8:2b:7b:dd:0d:45: f3:72:9d:34:66:af:c0:7d:c9:b8:f1:79:1c:66:8b:a1:e4:2b: 37:05:87:6f:dd:a5:07:ab:34:63:29:f0:94:fd:8e:11:e5:ca: 5e:f1:81:47:69:68:3a:94:79:5b:2d:e5:6a:1c:0b:c3:26:7e: 8b:72:95:62:72:d2:91:bf:7e:e7:8c:ab:60:4b:34:7f:99:76: 0e:42:bc:00:a6:79:8f:78:1a:54:16:74:f5:88:ea:e9:a5:c7: be:a9:b7:f4:25:b5:40:5f:d6:84:da:d8:34:97:13:9d:0f:8a: 59:91:f2:f5:d3:bb:f2:47:48:d8:3c:f4:35:dc:e0:cd:f2:32: 5e:77:97:17 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4o3FKm09i9iN7XNpBJcJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQ0MDM2NjAwN2ViNTZmMTBlOWY5OWU5NTIwNGQzMzA1MDhiOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElLMf3//ZDa/BofWx7MCmqGFuM5 9nneENLQrDw41SZ2igYwawrv97YtJr0VsMA5xnFZYeUcnhHeQ/uAnggA5o+QNabG oxsgNLrFnm8mhAmqv85UVuOSJc0zmzumw6S7rOYgRUPwnoA8Qwv7ls8riucIKQf6 E7k2Q9KF5tyBDafzilQgNokyPW2YsQpnsSgGhc+bXGz9RRFsVmFpd1rnS7lv5U8/ n/SJCaau0eKxYZLz/eFRYV30UCxmm35SCbQLzXveXEmAbQxL01SUNcxtnRz7oU4u VII1B0SWUECenXxMZ4QroZHleNcHZB4t+g5a6/XQOP2kGnpH/zIP/JSffQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBNEA2YAfrVvEOn5npUgTTMFCLmwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzBiMDI4 MC05NjIzLTQ0YmEtOGRkZi00NGMxYTRlYjk2OWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMGIwMjgw LTk2MjMtNDRiYS04ZGRmLTQ0YzFhNGViOTY5Yy8xL0UwUURaZ0ItdFc4UTZmbWVs U0JOTXdVSXViQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDWR/AMA0EAgACMAcDBQMqAenAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC77TANBgkqhkiG9w0BAQsFAAOCAQEAPKR0ifND1v1z YKkfBLAAqU3ZX5Gb1w8abAYRvPjzbZK5F3TAyBSa5pSnfXqE6xYg+XcdJdlX/r4O k/P8VV+99onBghPeXwvye+HBocRGjBWTJxmaDG62ZgN+P26pl93bjFA2DiiRDApQ /GsDhPPF+aIQVJIPzg212Ct73Q1F83KdNGavwH3JuPF5HGaLoeQrNwWHb92lB6s0 YynwlP2OEeXKXvGBR2loOpR5Wy3lahwLwyZ+i3KVYnLSkb9+54yrYEs0f5l2DkK8 AKZ5j3gaVBZ09Yjq6aXHvqm39CW1QF/WhNrYNJcTnQ+KWZHy9dO78kdI2Dz0Ndzg zfIyXneXFw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:48 2026 by rpki-client