This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer File: E2acDAhcyXijcqDk8FZIOY4ef-g.cer (raw, json) Hash identifier: 8gX+6CT85WKB5k3TG0ez8v4IbWirD3/N7XuIyHPIgfw= Subject key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36C19E6515BEF85A1C084C7B78498 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.178.227.0/24 IP: 2a01:f340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:19:e6:51:5b:ef:85:a1:c0:84:c7:b7:84:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ec:4e:46:a4:9a:b9:7c:79:ff:1a:1a:09:4e: 8c:49:42:47:0b:31:b8:d2:a4:9d:fb:72:da:e6:d2: 6c:6d:69:33:eb:bb:aa:94:3a:8d:8b:51:ab:d5:74: b9:2c:f0:3b:ec:55:ab:44:02:bc:18:8d:a3:04:0d: dc:96:6b:70:44:0c:25:9c:27:e0:88:67:13:7b:4c: 98:81:fe:b5:58:84:08:da:78:57:41:26:53:4b:dd: ca:2b:d6:de:92:a1:f5:9b:bf:91:26:28:06:4d:b9: 70:45:38:4b:7d:c6:e8:22:bb:4a:ba:2d:62:86:d2: 4e:72:21:ff:40:98:f1:48:2f:02:83:5e:c9:1a:3f: 52:16:9c:02:df:ca:63:03:0a:8a:b6:ee:e1:6f:3c: 9b:03:47:af:5c:8b:d5:ed:19:ce:52:4d:07:96:bc: 0c:34:c5:e4:ab:2f:10:f3:0c:1d:b6:f9:3e:07:ac: 3e:71:2b:71:03:80:9c:4a:be:fd:4f:12:63:92:13: a3:0d:3a:ed:5c:b5:75:13:95:1a:81:a8:5a:a2:fd: 2c:a8:f6:08:f1:e3:73:07:e1:73:9d:52:6b:ee:79: 59:9b:7c:8a:96:9a:4d:ed:30:18:48:e0:6e:77:a2: 7e:26:2a:4e:15:19:9f:2a:ef:35:51:f6:13:80:2f: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.227.0/24 IPv6: 2a01:f340::/29 Signature Algorithm: sha256WithRSAEncryption 42:62:d5:c1:d1:e8:bf:96:d5:d4:55:95:c6:85:5a:f4:48:77: f0:0f:23:0d:65:e3:92:76:b5:da:95:11:ad:0c:b5:e1:2a:ac: ab:a6:94:de:e1:dd:3e:50:e7:6c:bc:9e:b9:53:c0:66:1d:4c: 1e:43:63:52:25:1e:1b:f0:e0:f1:03:56:80:58:ca:b8:d0:ff: 73:12:f0:73:7b:fe:60:88:1e:03:0b:ee:31:5c:5b:0d:72:00: 50:8a:c8:1a:58:22:0d:ff:89:7b:2f:ab:e6:84:13:bd:3c:f7: 8c:e6:52:d9:3e:0a:13:bf:22:af:1d:89:c0:f0:2d:41:b3:bf: 21:4b:44:d6:ab:ed:e7:43:0b:ea:1d:9f:08:dd:af:28:a3:f0: b6:c6:e0:cd:1b:2b:b4:be:31:b6:ed:01:f9:1c:5b:a4:29:14: f6:fc:ba:f2:52:c3:ed:b2:44:a9:8d:1f:7a:b7:9a:11:4f:cc: 08:27:57:52:b1:e3:2e:48:cb:6a:81:51:46:c3:d2:4c:a6:c3: 2b:75:52:bc:83:39:a1:55:67:01:f4:19:e5:09:92:d0:d1:ac: e0:02:47:10:14:a5:f8:c0:7a:43:9c:ef:c0:6c:d6:4d:79:51: 6f:b6:29:fe:00:4b:ad:2a:6e:98:3b:56:2c:d1:21:dd:f5:62: 9c:f5:e3:94 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4o2wZ5lFb74WhwITHt4SYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzY2OWMwYzA4NWNjOTc4YTM3MmEwZTRmMDU2NDgzOThlMWU3ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+xORqSauXx5/xoaCU6MSUJHCzG4 0qSd+3La5tJsbWkz67uqlDqNi1Gr1XS5LPA77FWrRAK8GI2jBA3clmtwRAwlnCfg iGcTe0yYgf61WIQI2nhXQSZTS93KK9bekqH1m7+RJigGTblwRThLfcboIrtKui1i htJOciH/QJjxSC8Cg17JGj9SFpwC38pjAwqKtu7hbzybA0evXIvV7RnOUk0HlrwM NMXkqy8Q8wwdtvk+B6w+cStxA4CcSr79TxJjkhOjDTrtXLV1E5Uagahaov0sqPYI 8eNzB+FznVJr7nlZm3yKlppN7TAYSOBud6J+JipOFRmfKu81UfYTgC9S6wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2UzOTNk OC0xMjUyLTRjMjctYmFhYS01M2IwNDM0Mjc4M2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZTM5M2Q4 LTEyNTItNGMyNy1iYWFhLTUzYjA0MzQyNzgzZC8xL0UyYWNEQWhjeVhpamNxRGs4 RlpJT1k0ZWYtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwbLjMA0EAgACMAcDBQMqAfNAMA0GCSqGSIb3 DQEBCwUAA4IBAQBCYtXB0ei/ltXUVZXGhVr0SHfwDyMNZeOSdrXalRGtDLXhKqyr ppTe4d0+UOdsvJ65U8BmHUweQ2NSJR4b8ODxA1aAWMq40P9zEvBze/5giB4DC+4x XFsNcgBQisgaWCIN/4l7L6vmhBO9PPeM5lLZPgoTvyKvHYnA8C1Bs78hS0TWq+3n QwvqHZ8I3a8oo/C2xuDNGyu0vjG27QH5HFukKRT2/LryUsPtskSpjR96t5oRT8wI J1dSseMuSMtqgVFGw9JMpsMrdVK8gzmhVWcB9BnlCZLQ0azgAkcQFKX4wHpDnO/A bNZNeVFvtin+AEutKm6YO1Ys0SHd9WKc9eOU -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:20 2026 by rpki-client