This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer File: EVFSIzgprv1GebUUcXmN68mCN-8.cer (raw, json) Hash identifier: HqsEzLv2YhWbMUInOob0Chs8C3LYbg1NXhA+HD90MMA= Subject key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C661525649BFBBD9228C004C9D2F27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212337 IP: 2001:678:92c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:52:56:49:bf:bb:d9:22:8c:00:4c:9d:2f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=115152233829aefd4679b51471798debc98237ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:cf:31:e2:49:e2:d9:8d:79:4e:c9:24:d2: 52:9c:e8:39:98:c5:6b:a7:dc:51:f5:33:46:6e:28: fa:f4:b5:ba:e6:0d:1e:f5:d0:3c:54:95:f7:7e:a8: 73:df:99:5a:6a:98:22:ae:d7:65:6f:95:45:9f:73: 82:40:1e:b7:33:63:46:51:3c:9c:41:c5:5b:68:01: f3:8c:61:95:ac:43:85:05:a6:be:02:6d:0b:91:fa: e5:c0:7c:2e:6d:70:64:89:13:4e:86:31:b6:1b:9a: 39:15:d4:a8:b5:be:c9:50:1e:9a:ca:8c:88:fa:d6: f0:d6:eb:69:dc:72:cb:c9:6f:98:40:31:ef:ec:0f: 2b:a4:8c:74:5f:ad:71:a2:fd:20:41:fb:3a:7d:7e: 43:f0:8a:3a:fa:14:61:49:8b:b4:85:86:79:fd:65: 29:3f:af:40:8b:a0:b4:ed:6f:27:84:07:70:bd:46: 26:6e:12:51:5a:70:11:80:3d:3d:6b:e1:3f:af:fe: b8:c4:e5:84:b8:6a:95:d8:e8:18:de:97:39:18:09: 6e:6f:ae:04:50:70:2d:3d:99:7b:82:e3:86:2d:b9: 53:7a:d6:7d:fb:13:c7:bb:79:51:82:29:8b:2c:31: bf:80:0a:4c:2d:7b:11:c1:d7:00:c2:d4:17:c9:c2: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:92c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212337 Signature Algorithm: sha256WithRSAEncryption 9c:13:e4:53:2f:47:a9:29:99:79:b0:88:19:6b:87:93:71:41: 8f:f0:19:0b:f4:57:69:a6:fe:37:e1:ac:55:47:40:64:02:a3: eb:cd:df:74:56:60:07:9b:dc:a5:83:11:34:0d:6e:7a:c0:aa: ec:65:93:e5:7c:cd:c0:51:49:d7:74:d2:a3:48:13:9e:e0:2b: ae:0b:0e:22:7a:2f:57:b1:7b:90:20:2b:f6:d2:d4:26:91:e3: 7e:17:0d:f9:bc:91:22:6d:c1:d1:59:03:a5:b9:31:b3:32:de: 1c:85:47:0e:e0:00:20:d0:df:48:af:f1:c4:35:c3:23:31:9e: 88:7c:a9:08:8d:49:bd:74:b4:1e:65:70:7c:b0:31:42:13:c2: cf:36:83:d9:34:9a:2e:bf:d4:e5:17:fd:81:ea:1e:6a:5a:92: f8:67:64:f8:e8:fc:fa:f0:59:ab:b4:3c:45:37:5c:c9:8d:ed: 7e:5d:0f:07:c4:7b:76:3a:a7:92:b2:38:12:16:87:f2:b5:6b: 67:33:82:66:fe:37:30:72:cb:f4:9f:03:cf:4e:dc:32:4c:23: eb:5c:71:90:0f:25:9d:3c:eb:c5:60:79:b4:f1:8e:08:b1:7f: 81:4b:33:9f:f7:0d:d2:33:e8:9d:41:65:b2:2d:60:dc:31:d5: 60:03:c1:bf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3xmFSVkm/u9kijABMnS8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTUxNTIyMzM4MjlhZWZkNDY3OWI1MTQ3MTc5OGRlYmM5ODIzN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DDPMeJJ4tmNeU7JJNJSnOg5mMVr p9xR9TNGbij69LW65g0e9dA8VJX3fqhz35laapgirtdlb5VFn3OCQB63M2NGUTyc QcVbaAHzjGGVrEOFBaa+Am0LkfrlwHwubXBkiRNOhjG2G5o5FdSotb7JUB6ayoyI +tbw1utp3HLLyW+YQDHv7A8rpIx0X61xov0gQfs6fX5D8Io6+hRhSYu0hYZ5/WUp P69Ai6C07W8nhAdwvUYmbhJRWnARgD09a+E/r/64xOWEuGqV2OgY3pc5GAlub64E UHAtPZl7guOGLblTetZ9+xPHu3lRgimLLDG/gApMLXsRwdcAwtQXycLggQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFBFRUiM4Ka79Rnm1FHF5jevJgjfvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2RiZWE1 ZC0yNzdiLTQ2NzUtOGQwNS1lZDE3ZDZjNDJiMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGJlYTVk LTI3N2ItNDY3NS04ZDA1LWVkMTdkNmM0MmIyZi8xL0VWRlNJemdwcnYxR2ViVVVj WG1ONjhtQ04tOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAksMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM9cTANBgkqhkiG9w0BAQsFAAOCAQEAnBPkUy9HqSmZebCIGWuHk3FBj/AZ C/RXaab+N+GsVUdAZAKj683fdFZgB5vcpYMRNA1uesCq7GWT5XzNwFFJ13TSo0gT nuArrgsOInovV7F7kCAr9tLUJpHjfhcN+byRIm3B0VkDpbkxszLeHIVHDuAAINDf SK/xxDXDIzGeiHypCI1JvXS0HmVwfLAxQhPCzzaD2TSaLr/U5Rf9geoealqS+Gdk +Oj8+vBZq7Q8RTdcyY3tfl0PB8R7djqnkrI4EhaH8rVrZzOCZv43MHLL9J8Dz07c Mkwj61xxkA8lnTzrxWB5tPGOCLF/gUszn/cN0jPonUFlsi1g3DHVYAPBvw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:51:15 2026 by rpki-client