This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer File: EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer (raw, json) Hash identifier: w2aoqo6troYUIcV5gG7/pILs5Ove1nPgzfqWqpHGrLE= Subject key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36079B4E60C28A9DEDE6D8CFAEE058 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9907 AS: 35137 AS: 47688 AS: 48408 AS: 201366 AS: 209725 IP: 88.218.124.0/22 IP: 91.209.133.0/24 IP: 109.233.104.0/22 IP: 185.1.127.0/24 IP: 185.77.12.0/22 IP: 185.142.224.0/22 IP: 2001:7f8:d2::/48 IP: 2a05:5f40::/29 IP: 2a07:3140::/29 IP: 2a09:a680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:07:9b:4e:60:c2:8a:9d:ed:e6:d8:cf:ae:e0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:b0:6b:d9:d4:08:f0:06:cf:58:e2:2d:ac: 33:63:3d:eb:fa:df:a5:85:58:9e:d2:e6:5e:ad:37: e6:df:ba:bb:6c:88:01:9d:95:3b:08:a0:06:7a:d1: cc:b2:49:e9:62:5e:70:f9:d7:41:72:07:cf:d5:89: 4f:20:22:24:88:d5:c8:d9:9c:93:b2:4a:9e:2f:15: 70:2a:a9:24:dd:2a:52:22:c8:68:91:9c:e3:46:01: e7:d3:42:98:1e:6e:ef:6a:c0:21:3c:7e:5a:99:4d: 6c:1a:97:cf:62:69:20:29:ce:11:8d:5b:54:17:51: 7f:54:1b:85:24:71:40:ea:86:39:5c:3c:3c:a4:8e: e3:e7:77:73:17:bb:f8:1b:21:96:48:71:ed:fd:e7: 0c:6f:ae:3b:a2:a1:3b:5f:c1:2a:52:d7:a4:9f:16: 79:e1:e7:85:23:9b:a3:35:cc:2a:d2:fb:0e:57:97: 4d:ec:a2:1f:06:e2:96:2e:4e:78:9c:3b:c4:22:29: e1:b7:66:31:c3:ac:54:e3:bd:9d:14:78:38:66:01: 51:e7:5e:73:bf:17:5e:02:db:fc:06:a6:99:8c:73: 18:f5:5f:91:31:0d:a0:dc:66:ee:22:c1:0c:d6:2d: ef:0a:77:af:2b:b9:1b:62:b4:8d:9c:ca:d9:3b:0a: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.124.0/22 91.209.133.0/24 109.233.104.0/22 185.1.127.0/24 185.77.12.0/22 185.142.224.0/22 IPv6: 2001:7f8:d2::/48 2a05:5f40::/29 2a07:3140::/29 2a09:a680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9907 35137 47688 48408 201366 209725 Signature Algorithm: sha256WithRSAEncryption 13:dc:f6:a7:25:fd:1a:4f:24:8f:52:6b:c8:ee:7d:07:6d:0c: 25:1d:1d:ac:4c:ab:d1:cd:78:01:44:41:10:47:39:a7:76:93: 0a:8c:d3:8f:6c:af:8c:4e:81:db:0b:0d:3d:82:b2:af:cd:18: c1:c2:95:72:09:50:0a:fb:84:0a:65:42:0c:d9:19:a6:f4:ce: fe:9c:9b:f4:14:11:bc:58:1a:a9:95:ed:23:c0:dc:99:81:b5: 72:a2:38:11:9c:3d:01:ee:62:6a:72:85:97:5e:82:74:96:b2: 25:c3:f3:7c:76:32:ae:2b:f4:41:f5:2d:c3:13:cb:40:dc:ec: 1d:c4:7b:e6:1d:f1:f9:3e:5b:8d:8d:5d:af:22:3c:4c:44:96: aa:cb:2f:ef:e7:25:c3:11:68:62:65:cb:03:e4:8a:0b:f9:1d: d2:4d:48:db:0d:7c:9e:32:1c:f6:b2:ff:3e:88:e3:5e:81:e8: 81:9c:ee:d8:76:3b:5b:86:22:03:8f:8a:67:46:84:86:df:13: 61:2b:ea:07:9c:b6:f7:fa:77:e2:a4:cb:15:95:f5:58:cc:24: 56:ac:4e:41:be:87:93:4a:84:13:c9:21:be:aa:97:91:b0:de: 10:32:14:e9:90:77:3f:fe:55:57:60:32:79:23:be:dc:a7:bb: 6f:1a:1f:fd -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISAZt7NgebTmDCip3t5tjPruBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA4YmE1NDI5YTcwOWJjNThlY2RiYWUzZjE3ZTFiYzlkM2E0ZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoOwa9nUCPAGz1jiLawzYz3r+t+l hVie0uZerTfm37q7bIgBnZU7CKAGetHMsknpYl5w+ddBcgfP1YlPICIkiNXI2ZyT skqeLxVwKqkk3SpSIshokZzjRgHn00KYHm7vasAhPH5amU1sGpfPYmkgKc4RjVtU F1F/VBuFJHFA6oY5XDw8pI7j53dzF7v4GyGWSHHt/ecMb647oqE7X8EqUteknxZ5 4eeFI5ujNcwq0vsOV5dN7KIfBuKWLk54nDvEIinht2Yxw6xU472dFHg4ZgFR515z vxdeAtv8BqaZjHMY9V+RMQ2g3GbuIsEM1i3vCnevK7kbYrSNnMrZOwp2PwIDAQAB o4IC/DCCAvgwHQYDVR0OBBYEFBAIulQppwm8WOzbrj8X4bydOk1cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzYxMjNj NC0yYmM1LTRkZjktYWQxMy1lMWQ5OWI4NzA2ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNjEyM2M0 LTJiYzUtNGRmOS1hZDEzLWUxZDk5Yjg3MDZlNC8xL0VBaTZWQ21uQ2J4WTdOdXVQ eGZodkowNlRWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjAqBAIAATAkAwQCWNp8AwQAW9GFAwQCbeloAwQAuQF/AwQCuU0M AwQCuY7gMCQEAgACMB4DBwAgAQf4ANIDBQMqBV9AAwUDKgcxQAMFAyoJpoAwMgYI KwYBBQUHAQgBAf8EIzAhoB8wHQICJrMCAwCJQQIDALpIAgMAvRgCAwMSlgIDAzM9 MA0GCSqGSIb3DQEBCwUAA4IBAQAT3PanJf0aTySPUmvI7n0HbQwlHR2sTKvRzXgB REEQRzmndpMKjNOPbK+MToHbCw09grKvzRjBwpVyCVAK+4QKZUIM2Rmm9M7+nJv0 FBG8WBqple0jwNyZgbVyojgRnD0B7mJqcoWXXoJ0lrIlw/N8djKuK/RB9S3DE8tA 3OwdxHvmHfH5PluNjV2vIjxMRJaqyy/v5yXDEWhiZcsD5IoL+R3STUjbDXyeMhz2 sv8+iONegeiBnO7YdjtbhiIDj4pnRoSG3xNhK+oHnLb3+nfipMsVlfVYzCRWrE5B voeTSoQTySG+qpeRsN4QMhTpkHc//lVXYDJ5I77cp7tvGh/9 -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:29 2026 by rpki-client