This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer File: E0nM7_Skij2rAkBn4XYNv1hlD9o.cer (raw, json) Hash identifier: jYOLj6D01J5tzjMN/b5D+C+Eq5JHqK1NEFQug86WLV0= Subject key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7DCFD252F916327D4FDC73A726CDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209196 IP: 45.87.204.0/22 IP: 45.91.104.0/22 IP: 45.94.192.0/22 IP: 45.131.72.0/22 IP: 45.137.108.0/22 IP: 45.141.160.0/22 IP: 45.158.152.0/22 IP: 92.118.176.0/22 IP: 212.102.99.0/24 IP: 2a09:af40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dc:fd:25:2f:91:63:27:d4:fd:c7:3a:72:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1349cceff4a48a3dab024067e1760dbf58650fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:a5:76:70:08:2b:04:94:d9:63:db:43:93: 0d:db:7c:29:a2:a6:ce:12:13:25:39:e1:11:b3:02: 48:c9:72:8e:f3:c6:50:a0:cc:50:b1:a6:24:89:8d: 63:5d:6b:43:01:d2:68:63:0c:3a:5c:dc:25:77:ea: a3:d5:f9:5b:5c:eb:08:d6:0c:80:39:70:3e:85:4e: 4e:37:4b:17:bc:4b:3e:ff:dc:ee:b0:fc:58:97:4a: 20:f0:56:1a:3f:0f:43:af:53:f1:c8:eb:6a:1f:71: 2a:e5:fb:b3:af:02:51:8e:28:ba:70:bf:58:22:59: 1e:69:bd:b3:55:95:5d:c1:fc:00:87:77:31:54:29: 3a:1c:41:c3:31:d7:77:9c:1d:87:86:7b:58:b7:36: 32:42:a2:b8:22:ec:fe:e0:46:0d:44:48:65:10:ad: a8:85:91:48:9c:f0:a3:2d:73:4f:28:38:9d:09:50: ca:a0:b2:4f:b3:b8:c0:a2:e2:a4:2a:cc:ac:d5:e1: e9:f7:53:6c:49:5a:dc:3c:23:16:0e:51:bc:a1:18: 8d:6c:6c:fa:18:21:e6:2f:68:69:c1:77:b8:e6:c5: 49:43:6d:07:b3:c4:ad:4d:5c:27:b4:0b:77:50:93: ac:3d:71:3e:e5:0c:27:4e:56:28:03:b0:bc:4d:7e: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.204.0/22 45.91.104.0/22 45.94.192.0/22 45.131.72.0/22 45.137.108.0/22 45.141.160.0/22 45.158.152.0/22 92.118.176.0/22 212.102.99.0/24 IPv6: 2a09:af40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209196 Signature Algorithm: sha256WithRSAEncryption 7f:91:40:49:ce:9c:0e:63:04:7d:18:95:1d:3f:25:a9:6d:35: 30:40:b9:f6:66:0d:71:db:ff:03:4c:d1:31:8f:37:5c:0f:b0: 3e:b2:52:6e:2d:f9:0f:b0:47:4a:dd:ea:ff:03:28:32:f2:3a: 2f:f7:14:20:1d:d8:11:30:75:0b:52:56:2a:0d:30:7b:86:13: 75:2e:97:ae:90:c2:52:ff:06:7a:b5:4c:64:ae:e5:a5:37:f1: 8a:e1:15:95:e9:e8:64:12:ec:75:a5:b2:17:38:22:46:f6:28: b7:e8:d7:cc:0e:15:bf:d5:0c:f3:7e:1e:96:4e:fd:41:fe:f7: 87:b1:c8:2b:fa:06:b5:35:41:29:f5:35:ce:6a:ba:25:d8:00: 94:4b:4d:bf:c5:d1:26:a8:8b:4c:0d:a2:3a:e7:37:93:f6:22: 40:ee:e8:2d:2e:5b:b0:0e:b8:40:72:74:07:90:31:5d:aa:16: 5d:0b:23:f2:c8:3f:fc:f5:da:1d:b2:ff:12:d7:98:e6:3a:bd: 0d:dc:24:e1:5c:31:28:f8:da:6b:f4:93:45:59:0f:57:a9:53: 06:85:f2:cc:25:f3:a7:69:c0:4f:e8:9a:56:cd:a5:de:18:ec: 37:b5:94:f1:8f:35:78:a3:c5:09:1f:5e:4f:57:11:a8:21:d9: 7a:e4:da:bb -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt6x9z9JS+RYyfU/cc6cmzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQ5Y2NlZmY0YTQ4YTNkYWIwMjQwNjdlMTc2MGRiZjU4NjUwZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLyldnAIKwSU2WPbQ5MN23wpoqbO EhMlOeERswJIyXKO88ZQoMxQsaYkiY1jXWtDAdJoYww6XNwld+qj1flbXOsI1gyA OXA+hU5ON0sXvEs+/9zusPxYl0og8FYaPw9Dr1PxyOtqH3Eq5fuzrwJRjii6cL9Y Ilkeab2zVZVdwfwAh3cxVCk6HEHDMdd3nB2HhntYtzYyQqK4Iuz+4EYNREhlEK2o hZFInPCjLXNPKDidCVDKoLJPs7jAouKkKsys1eHp91NsSVrcPCMWDlG8oRiNbGz6 GCHmL2hpwXe45sVJQ20Hs8StTVwntAt3UJOsPXE+5QwnTlYoA7C8TX5qpwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2EzMDZk MC00YTIwLTRiY2YtODQ4ZS1kMmFlMmMzMzYzMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvYTMwNmQw LTRhMjAtNGJjZi04NDhlLWQyYWUyYzMzNjMyOC8xL0Uwbk03X1NraWoyckFrQm40 WFlOdjFobEQ5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCLVfMAwQCLVtoAwQCLV7AAwQCLYNIAwQCLYls AwQCLY2gAwQCLZ6YAwQCXHawAwQA1GZjMA0EAgACMAcDBQMqCa9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxLDANBgkqhkiG9w0BAQsFAAOCAQEAf5FASc6cDmME fRiVHT8lqW01MEC59mYNcdv/A0zRMY83XA+wPrJSbi35D7BHSt3q/wMoMvI6L/cU IB3YETB1C1JWKg0we4YTdS6XrpDCUv8GerVMZK7lpTfxiuEVlenoZBLsdaWyFzgi RvYot+jXzA4Vv9UM834elk79Qf73h7HIK/oGtTVBKfU1zmq6JdgAlEtNv8XRJqiL TA2iOuc3k/YiQO7oLS5bsA64QHJ0B5AxXaoWXQsj8sg//PXaHbL/EteY5jq9Ddwk 4VwxKPjaa/STRVkPV6lTBoXyzCXzp2nAT+iaVs2l3hjsN7WU8Y81eKPFCR9eT1cR qCHZeuTauw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:30:34 2026 by rpki-client