This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer File: EiDdK5LaKExjzsRvb2pBwBOpyIE.cer (raw, json) Hash identifier: 6t09xM2GbQ9PdSghNzYUV9hidy1FlRIu2Q0JURm2cvY= Subject key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F158A306D3961B13D1EE5CA49D18F03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47561 AS: 61414 IP: 185.243.40.0/22 IP: 193.3.191.0/24 IP: 2a0d:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8a:30:6d:39:61:b1:3d:1e:e5:ca:49:d1:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:47:64:ec:65:f1:90:98:1f:7a:d9:4a:6d: 21:a0:6c:c4:a4:cb:f0:28:ac:58:34:22:c4:1e:4b: 82:69:e6:77:a5:4a:e3:8c:5c:ff:f0:68:cf:ac:bb: 64:8e:6a:c5:df:ae:ed:fb:54:79:c2:07:0c:94:75: e4:0c:17:14:7d:f0:6a:c2:ef:d0:b1:e5:ac:11:d5: d4:f4:29:f0:a8:51:e9:6c:e6:11:e8:67:d1:18:6b: 41:ee:e2:d5:3d:a4:b5:72:9f:c9:b5:d3:8d:16:b3: 13:55:ad:f4:b6:ec:9e:1a:00:6b:a8:3d:8b:fe:59: e3:4d:4e:e0:07:5d:42:9e:81:47:ef:c5:f1:b2:69: f2:96:50:a3:6b:31:50:e6:c4:76:c7:79:49:37:ac: 8b:7e:10:9c:bd:33:91:81:d6:6e:d2:10:de:9e:01: da:e2:1c:f8:ed:42:32:34:f7:69:71:cd:ea:99:73: b2:94:7e:2e:74:74:56:f0:d9:f3:ba:db:fc:92:07: 5e:4a:b2:24:26:14:52:1a:b6:40:a1:1f:ec:8d:7a: 6f:53:56:51:f9:39:24:84:78:e5:0c:99:1a:1c:e5: 4d:29:ce:a9:db:97:50:36:11:02:5f:89:f6:6e:86: 6a:cc:dc:73:fa:9f:92:ee:ea:1e:99:60:62:2c:a4: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.40.0/22 193.3.191.0/24 IPv6: 2a0d:280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47561 61414 Signature Algorithm: sha256WithRSAEncryption 98:e3:ab:b9:04:6b:d8:1b:be:a0:94:39:cf:c8:e6:62:86:d8: c4:b4:0d:4c:47:75:43:2f:3d:4c:3e:5b:e5:e8:52:c9:eb:5f: 23:df:40:1c:83:b4:b5:b3:2f:07:58:77:b0:d2:2a:67:b6:76: 0b:ed:74:ce:f4:fd:5d:c0:17:c2:4d:ef:39:c8:f9:32:7c:2f: da:25:8c:99:9b:e8:ba:b1:5b:96:0f:42:11:3b:f6:ce:f8:9a: 67:3d:8f:fe:88:5c:10:95:fc:f3:d6:14:ce:cb:22:82:8a:00: d4:a9:11:86:b4:7f:9f:d7:b9:c3:f9:21:8b:61:e1:55:78:1c: 67:5b:77:82:5a:b8:cb:29:1f:71:02:e2:1c:89:4c:a8:fb:ff: 2f:a9:28:61:a5:df:b0:65:41:42:9b:51:31:0f:af:28:c1:58: cc:5a:43:8a:5d:dc:3a:a6:a7:5f:78:e5:92:04:05:e9:df:9b: e5:86:84:fd:d4:47:41:b6:7e:cb:41:f8:95:56:bc:44:1f:7a: c9:c2:9a:06:0d:73:bc:b7:db:0f:59:9b:1d:20:e7:53:18:fb: db:6b:56:18:c0:52:27:5c:9b:1b:f2:47:f9:ac:4c:fb:68:33: ba:6e:ed:dd:c6:60:4c:43:66:e3:0a:4c:c7:29:1c:0b:9c:2e: 26:06:50:d7 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/FYowbTlhsT0e5cpJ0Y8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjIwZGQyYjkyZGEyODRjNjNjZWM0NmY2ZjZhNDFjMDEzYTljODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspFHZOxl8ZCYH3rZSm0hoGzEpMvw KKxYNCLEHkuCaeZ3pUrjjFz/8GjPrLtkjmrF367t+1R5wgcMlHXkDBcUffBqwu/Q seWsEdXU9CnwqFHpbOYR6GfRGGtB7uLVPaS1cp/JtdONFrMTVa30tuyeGgBrqD2L /lnjTU7gB11CnoFH78XxsmnyllCjazFQ5sR2x3lJN6yLfhCcvTORgdZu0hDengHa 4hz47UIyNPdpcc3qmXOylH4udHRW8Nnzutv8kgdeSrIkJhRSGrZAoR/sjXpvU1ZR +TkkhHjlDJkaHOVNKc6p25dQNhECX4n2boZqzNxz+p+S7uoemWBiLKRTyQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFBIg3SuS2ihMY87Eb29qQcATqciBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzNiOGYz Yi1lYmYwLTRjYjctYTQ5Yi1hODU4NTg0OWJlMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvM2I4ZjNi LWViZjAtNGNiNy1hNDliLWE4NTg1ODQ5YmUxNC8xL0VpRGRLNUxhS0V4anpzUnZi MnBCd0JPcHlJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCufMoAwQAwQO/MA0EAgACMAcDBQMqDQKAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC5yQIDAO/mMA0GCSqGSIb3DQEBCwUAA4IB AQCY46u5BGvYG76glDnPyOZihtjEtA1MR3VDLz1MPlvl6FLJ618j30Acg7S1sy8H WHew0ipntnYL7XTO9P1dwBfCTe85yPkyfC/aJYyZm+i6sVuWD0IRO/bO+JpnPY/+ iFwQlfzz1hTOyyKCigDUqRGGtH+f17nD+SGLYeFVeBxnW3eCWrjLKR9xAuIciUyo +/8vqShhpd+wZUFCm1ExD68owVjMWkOKXdw6pqdfeOWSBAXp35vlhoT91EdBtn7L QfiVVrxEH3rJwpoGDXO8t9sPWZsdIOdTGPvba1YYwFInXJsb8kf5rEz7aDO6bu3d xmBMQ2bjCkzHKRwLnC4mBlDX -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:21 2026 by rpki-client