This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer File: ES1lq7x-8AUScohER5KrhvsVwu4.cer (raw, json) Hash identifier: A55BW0v3iT05grV4JKMNvIlAzfcAiJD8H4fDialiWaM= Subject key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB718901598589039FD9F2198F7357 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207127 IP: 185.116.168.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:89:01:59:85:89:03:9f:d9:f2:19:8f:73:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=112d65abbc7ef005127288444792ab86fb15c2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:7b:ee:b0:f6:87:80:90:15:5c:b7:f6:df: 42:59:39:b7:6e:75:2a:22:3a:50:50:85:50:06:0d: a3:87:4a:fb:d0:49:17:c3:78:0a:ac:0c:72:93:4e: dc:24:d5:82:47:8b:b6:e3:ad:b5:b7:55:b6:00:36: a7:75:d3:d0:cf:95:eb:eb:0a:5a:32:5d:45:ea:83: c7:fb:6e:3b:ab:c9:1a:6d:49:7b:8e:8f:66:47:8c: 0f:cd:d7:e5:4d:a3:65:d5:1e:73:82:f7:2b:81:31: fe:88:f3:2e:42:72:ff:d6:d7:fc:47:59:0f:c2:c5: f1:7c:42:30:7c:2a:02:56:fa:fa:c6:ae:d2:4e:16: a5:66:d2:4a:bb:24:d9:ee:66:ec:a1:2e:f4:a7:4a: 94:8c:c7:78:ab:3d:7c:a8:ca:3a:d4:96:e8:59:2a: e6:22:a4:25:3b:81:cb:dc:31:5b:31:07:35:53:9d: 7e:2b:bf:65:37:7c:86:db:d8:15:a7:40:18:e6:39: 69:6c:31:c8:f9:9a:58:8b:d6:95:42:50:7b:ba:de: 90:df:ba:f9:50:50:45:a0:4d:0a:a8:f8:0c:3f:88: d4:ca:eb:44:04:0c:f8:e4:44:9b:c6:26:3c:43:57: 59:ec:c4:0f:9c:a1:f9:4e:70:5f:3a:34:db:21:f5: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207127 Signature Algorithm: sha256WithRSAEncryption 11:b7:80:44:c4:c8:77:f7:aa:20:75:d0:00:ed:13:60:9c:6a: 1f:9c:17:ad:6b:19:32:76:aa:9d:4e:eb:23:cb:3b:23:1d:6f: d5:3e:41:9c:b5:cb:60:f0:51:29:07:fc:53:ec:04:36:b9:c6: 21:4b:53:cf:da:e8:25:94:fe:a5:9f:eb:78:c3:24:5a:d9:b5: 54:8d:b0:da:ed:23:e5:87:ca:ed:c3:b7:e5:dd:f3:4c:a1:e6: 19:5a:15:e6:f4:e5:d7:1c:db:d8:c1:f6:b0:12:dd:bd:73:eb: e7:0d:82:cc:e3:6a:b0:45:65:ac:08:ab:8f:ac:57:0b:6b:a6: da:9e:43:45:5e:86:e4:cc:a3:38:4e:f9:c1:38:8a:64:96:0d: b5:ed:9f:02:97:0c:18:c3:ce:e0:55:68:c9:08:b3:8f:76:de: 23:cc:1c:78:c0:90:42:87:27:37:55:1d:8a:c2:ae:b8:f3:6d: 72:e8:36:f9:3e:e5:74:35:bb:7f:8c:7e:0b:41:fd:1a:a0:90: 2a:33:26:33:ed:7e:ad:a8:35:04:ab:69:b1:7b:f0:15:39:4b: 3c:cb:0e:52:dc:3d:10:96:98:c6:0a:12:53:0f:d4:1f:37:df: 0f:1d:1a:b9:e6:c6:65:8a:22:ae:24:c4:bb:e1:5b:03:d5:ab: 64:e7:bf:7c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt263GJAVmFiQOf2fIZj3NXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTJkNjVhYmJjN2VmMDA1MTI3Mjg4NDQ0NzkyYWI4NmZiMTVjMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wB77rD2h4CQFVy39t9CWTm3bnUq IjpQUIVQBg2jh0r70EkXw3gKrAxyk07cJNWCR4u24621t1W2ADanddPQz5Xr6wpa Ml1F6oPH+247q8kabUl7jo9mR4wPzdflTaNl1R5zgvcrgTH+iPMuQnL/1tf8R1kP wsXxfEIwfCoCVvr6xq7SThalZtJKuyTZ7mbsoS70p0qUjMd4qz18qMo61JboWSrm IqQlO4HL3DFbMQc1U51+K79lN3yG29gVp0AY5jlpbDHI+ZpYi9aVQlB7ut6Q37r5 UFBFoE0KqPgMP4jUyutEBAz45ESbxiY8Q1dZ7MQPnKH5TnBfOjTbIfXsyQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBEtZau8fvAFEnKIREeSq4b7FcLuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2EwMzdi MS0xMzNhLTQ2MzktOGM3Zi02MzY4NTdlZTE3OTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTAzN2Ix LTEzM2EtNDYzOS04YzdmLTYzNjg1N2VlMTc5Mi8xL0VTMWxxN3gtOEFVU2NvaEVS NUtyaHZzVnd1NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXSoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpFzANBgkqhkiG9w0BAQsFAAOCAQEAEbeARMTId/eqIHXQAO0TYJxqH5wXrWsZ MnaqnU7rI8s7Ix1v1T5BnLXLYPBRKQf8U+wENrnGIUtTz9roJZT+pZ/reMMkWtm1 VI2w2u0j5YfK7cO35d3zTKHmGVoV5vTl1xzb2MH2sBLdvXPr5w2CzONqsEVlrAir j6xXC2um2p5DRV6G5MyjOE75wTiKZJYNte2fApcMGMPO4FVoyQizj3beI8wceMCQ QocnN1UdisKuuPNtcug2+T7ldDW7f4x+C0H9GqCQKjMmM+1+rag1BKtpsXvwFTlL PMsOUtw9EJaYxgoSUw/UHzffDx0auebGZYoiriTEu+FbA9WrZOe/fA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:24 2026 by rpki-client