This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer File: EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer (raw, json) Hash identifier: nFJzoUBsHv/fXJnHD5rsHw23vIM9RdxNxHxtRPVz+fs= Subject key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1278CEF525CA371118EBA8DDE2D165 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197297 IP: 46.253.144.0/20 IP: 195.245.86.0/23 IP: 2a02:26f8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:78:ce:f5:25:ca:37:11:18:eb:a8:dd:e2:d1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:14:c7:7f:8d:3b:f3:9f:c9:1f:ce:2a:3b:6b: 85:ee:09:de:da:1b:dc:7e:47:ba:60:8f:e8:8d:9d: ed:b9:14:1d:de:ee:7a:32:44:1d:56:b6:2f:86:c5: 51:45:d3:7c:e9:49:df:f3:dc:6d:1d:8f:68:c5:a0: 48:b0:20:0f:a8:92:66:e3:d4:7e:dd:a9:e4:6c:fa: 60:f1:a0:8a:cc:18:36:eb:c8:8c:41:03:ca:44:4c: 2f:f1:26:dc:c3:48:46:e1:15:f1:00:dd:fe:d4:6c: 83:89:fd:fc:13:b1:21:55:b8:f6:48:39:32:2e:bb: df:1a:e8:64:e1:da:a0:db:bc:66:3a:a1:14:cc:b4: 2b:a5:0d:7d:e1:5d:6c:cd:f1:58:72:e6:45:4e:38: ff:1c:4f:a8:2a:dd:fd:33:0f:bd:e5:57:8e:d8:d4: a6:23:f2:39:6f:59:7f:20:0b:2b:39:3c:da:4c:57: 9d:c2:50:56:90:6c:37:7a:b3:ac:fc:85:66:97:77: c0:27:4b:1a:89:13:f5:86:5c:54:b4:d7:75:42:c2: 28:22:9a:41:1b:d9:6e:db:85:3f:0b:53:30:45:41: 80:20:81:92:ce:ec:ed:eb:ff:e2:8a:a4:02:9e:fe: e7:1c:ed:d5:75:60:69:43:41:05:90:1b:d6:88:8d: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.144.0/20 195.245.86.0/23 IPv6: 2a02:26f8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197297 Signature Algorithm: sha256WithRSAEncryption 39:31:ed:a9:9b:2a:d3:59:0c:e5:6b:71:2f:7c:e4:96:cf:67: a8:a9:41:10:4c:2a:e9:c4:26:70:10:cf:d1:dd:af:97:48:e2: 77:5f:0b:b5:de:c4:9d:ce:7d:a2:b9:c2:21:b1:29:49:01:c3: 46:2c:18:95:35:ef:e5:1d:f4:98:02:d6:d8:5c:58:2e:4d:1a: 9a:2f:a9:33:8b:aa:1a:23:56:0f:74:73:12:51:72:60:36:50: 64:c0:64:2d:db:d9:1e:f3:86:45:89:34:b1:a6:04:84:0b:62: 4c:27:6c:68:df:74:6e:7b:26:58:fc:43:90:81:68:0f:aa:c4: 2e:7b:6e:66:30:31:ce:8f:0d:22:89:6c:96:8d:52:06:f4:64: 04:10:d6:fe:9c:78:03:b9:46:40:aa:11:4a:1c:7f:c8:99:f2: c7:4c:f8:34:a8:9d:26:4c:97:d9:1f:84:fd:36:28:ac:92:bf: 32:ed:84:3f:cd:60:d9:e9:76:1c:22:14:75:64:ac:6b:1b:6d: 8e:18:65:ff:ea:62:77:ae:44:d6:14:44:72:7e:d4:d8:68:9f: e3:95:d2:0e:89:e3:e7:e1:2e:f4:9d:79:00:28:b9:c1:a5:10: 51:e8:6f:7f:e7:7d:da:e1:b2:d4:aa:67:5c:76:8e:be:b6:b4: ab:ee:96:b0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EnjO9SXKNxEY66jd4tFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDYyYmMzNjUxMjY1OGEwZjdkM2Y5NmJjMWQ4ZTY3ZDlmZDQ5MThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xTHf40785/JH84qO2uF7gne2hvc fke6YI/ojZ3tuRQd3u56MkQdVrYvhsVRRdN86Unf89xtHY9oxaBIsCAPqJJm49R+ 3ankbPpg8aCKzBg268iMQQPKREwv8Sbcw0hG4RXxAN3+1GyDif38E7EhVbj2SDky LrvfGuhk4dqg27xmOqEUzLQrpQ194V1szfFYcuZFTjj/HE+oKt39Mw+95VeO2NSm I/I5b1l/IAsrOTzaTFedwlBWkGw3erOs/IVml3fAJ0saiRP1hlxUtNd1QsIoIppB G9lu24U/C1MwRUGAIIGSzuzt6//iiqQCnv7nHO3VdWBpQ0EFkBvWiI1dDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBBivDZRJlig99P5a8HY5n2f1JGLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzY2OWVi Zi1lZTdmLTRlYjctODQ4Ni05NWFkOTJhYzg2OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNjY5ZWJm LWVlN2YtNGViNy04NDg2LTk1YWQ5MmFjODY5OC8xL0VHSzhObEVtV0tEMzBfbHJ3 ZGptZlpfVWtZcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQELv2QAwQBw/VWMA0EAgACMAcDBQMqAib4MBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCsTANBgkqhkiG9w0BAQsFAAOCAQEAOTHt qZsq01kM5WtxL3zkls9nqKlBEEwq6cQmcBDP0d2vl0jid18Ltd7Enc59ornCIbEp SQHDRiwYlTXv5R30mALW2FxYLk0ami+pM4uqGiNWD3RzElFyYDZQZMBkLdvZHvOG RYk0saYEhAtiTCdsaN90bnsmWPxDkIFoD6rELntuZjAxzo8NIolslo1SBvRkBBDW /px4A7lGQKoRShx/yJnyx0z4NKidJkyX2R+E/TYorJK/Mu2EP81g2el2HCIUdWSs axttjhhl/+pid65E1hREcn7U2Gif45XSDonj5+Eu9J15ACi5waUQUehvf+d92uGy 1KpnXHaOvra0q+6WsA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:36 2026 by rpki-client