This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer File: EiTl7_GrwObYvwKeT3MuCrcbwWo.cer (raw, json) Hash identifier: SUB3C+x/ILa6y8TEO6nSbyLjZ7oXIUZZ1KKQYcKr6fU= Subject key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE1EB7131CDDD788943D1A07CDBB5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25031 AS: 41555 AS: 47444 AS: 49043 AS: 200471 IP: 86.116.0.0/15 IP: 147.167.0.0/16 IP: 160.61.0.0 -- 160.62.255.255 IP: 162.86.0.0/16 IP: 170.60.0.0/16 IP: 170.236.0.0/16 IP: 170.237.16.0 -- 170.237.255.255 IP: 192.37.0.0/16 IP: 2a01:5d8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e1:eb:71:31:cd:dd:78:89:43:d1:a0:7c:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:03:93:52:b8:d3:a5:04:b3:0a:78:1f:66: fc:d6:7c:4b:ac:d3:a0:f3:8d:b2:a4:7e:52:c2:e0: a9:a1:5d:d3:e5:39:1d:10:b7:54:a3:3b:35:1e:97: 9f:88:14:db:66:3d:46:f4:c7:33:f9:cf:40:a1:13: e0:91:32:70:a0:ec:90:eb:de:30:1a:3f:7e:dd:7c: 41:db:f7:8d:31:12:67:8c:57:28:28:7e:b5:7d:8b: 8f:b0:62:29:11:5b:84:93:df:4d:2f:d3:92:25:23: 00:4f:fe:44:06:e6:29:8b:97:ac:22:89:2f:17:bc: 43:59:e4:cf:98:7d:79:61:f3:b7:8e:c0:52:52:a0: ff:18:8f:34:d6:45:89:91:13:f6:5d:0e:e3:0e:ff: 09:b4:0a:36:b5:4b:29:de:59:08:59:e6:98:3a:bb: 96:83:66:1f:2a:98:ec:2f:14:c5:5e:57:91:fe:15: 00:15:05:d1:b0:fd:5b:a0:94:95:94:13:94:61:0e: 2f:44:8e:94:1d:4d:fc:dd:3c:6c:73:35:c5:7a:a1: 66:ee:5e:94:45:06:c1:d2:48:e0:09:67:22:05:bc: 8f:36:ea:37:8a:c9:6f:60:c1:5e:03:11:ac:1e:bd: 60:60:41:a5:4a:cb:df:a4:71:b3:d4:34:80:a9:78: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.116.0.0/15 147.167.0.0/16 160.61.0.0-160.62.255.255 162.86.0.0/16 170.60.0.0/16 170.236.0.0/16 170.237.16.0-170.237.255.255 192.37.0.0/16 IPv6: 2a01:5d8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25031 41555 47444 49043 200471 Signature Algorithm: sha256WithRSAEncryption 03:79:45:ca:e1:89:bd:6b:0a:30:99:b8:a9:48:d9:b1:19:e0: 77:7f:64:b7:ce:a8:8f:1a:68:53:cd:53:42:8d:64:e8:f5:f8: 4f:9c:27:8c:1e:ee:95:9a:88:2b:de:cc:3d:ec:e6:23:d0:55: 0a:be:2d:42:f1:6d:4a:a6:71:73:29:fe:40:af:5d:c4:2e:69: cb:e8:4f:8f:92:c2:8a:ba:40:c7:90:38:2f:18:ff:d5:66:9c: 0e:c8:68:fa:75:6b:54:1b:8a:a6:f1:15:70:f3:d5:74:59:33: ff:f2:b9:6f:b7:85:66:61:1a:1f:91:59:0d:7c:6b:f8:12:bb: 74:57:02:66:4e:96:13:40:57:81:73:80:3b:97:92:2c:cf:47: e5:c1:83:ad:b2:f2:a1:e4:f9:80:7d:80:3a:77:d5:71:60:25: 4c:65:53:15:5d:59:48:c7:b2:54:16:22:cd:6c:87:bd:4f:29: 20:df:b1:02:81:14:cb:01:4f:6f:8e:76:66:17:25:d9:be:b7: 10:bf:c5:0d:5d:81:b1:c2:15:f3:49:87:6a:05:35:5e:1d:19: a5:9a:15:e7:9c:88:3e:5d:a4:1c:76:9e:53:b3:63:72:96:bc: 28:52:ca:b1:62:a7:b4:69:4c:da:d3:58:f8:20:ce:0f:1e:05: d4:5a:9a:65 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt26uHrcTHN3XiJQ9GgfNu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjI0ZTVlZmYxYWJjMGU2ZDhiZjAyOWU0ZjczMmUwYWI3MWJjMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5oDk1K406UEswp4H2b81nxLrNOg 842ypH5SwuCpoV3T5TkdELdUozs1HpefiBTbZj1G9Mcz+c9AoRPgkTJwoOyQ694w Gj9+3XxB2/eNMRJnjFcoKH61fYuPsGIpEVuEk99NL9OSJSMAT/5EBuYpi5esIokv F7xDWeTPmH15YfO3jsBSUqD/GI801kWJkRP2XQ7jDv8JtAo2tUsp3lkIWeaYOruW g2YfKpjsLxTFXleR/hUAFQXRsP1boJSVlBOUYQ4vRI6UHU383TxsczXFeqFm7l6U RQbB0kjgCWciBbyPNuo3islvYMFeAxGsHr1gYEGlSsvfpHGz1DSAqXiitQIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzExYmUy My0zYmU2LTQ4ODEtYTNkMS01Mzg2YjFkOTYzYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMTFiZTIz LTNiZTYtNDg4MS1hM2QxLTUzODZiMWQ5NjNiYy8xL0VpVGw3X0dyd09iWXZ3S2VU M011Q3JjYndXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA9BAIAATA3AwMBVnQDAwCTpzAKAwMAoD0DAwCgPgMDAKJWAwMA qjwDAwCq7DALAwQEqu0QAwMBquwDAwDAJTANBAIAAjAHAwUDKgEF2DAtBggrBgEF BQcBCAEB/wQeMBygGjAYAgJhxwIDAKJTAgMAuVQCAwC/kwIDAw8XMA0GCSqGSIb3 DQEBCwUAA4IBAQADeUXK4Ym9awowmbipSNmxGeB3f2S3zqiPGmhTzVNCjWTo9fhP nCeMHu6Vmogr3sw97OYj0FUKvi1C8W1KpnFzKf5Ar13ELmnL6E+PksKKukDHkDgv GP/VZpwOyGj6dWtUG4qm8RVw89V0WTP/8rlvt4VmYRofkVkNfGv4Ert0VwJmTpYT QFeBc4A7l5Isz0flwYOtsvKh5PmAfYA6d9VxYCVMZVMVXVlIx7JUFiLNbIe9Tykg 37ECgRTLAU9vjnZmFyXZvrcQv8UNXYGxwhXzSYdqBTVeHRmlmhXnnIg+XaQcdp5T s2NylrwoUsqxYqe0aUza01j4IM4PHgXUWppl -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:12 2026 by rpki-client