This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer (raw, json) Hash identifier: Fry1IKGmJJLWcZ0be0j6fZzvnRHIMBUmKbsvCTHNy+s= Subject key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38507577BE3D017BBFD8165D858052 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.84.248.0/23 IP: 193.105.244.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:50:75:77:be:3d:01:7b:bf:d8:16:5d:85:80:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:67:e8:f5:bc:d6:a2:81:28:66:98:1f:3b: f0:82:0b:81:0b:43:0a:2c:22:16:05:10:1b:76:31: 73:9a:04:11:f0:a8:27:5a:e4:58:88:5f:11:5a:ae: 86:24:ee:bd:ff:fc:91:c6:59:4e:fb:0c:91:79:41: 94:93:ff:b3:33:de:87:a1:dc:f7:32:f1:b6:9b:45: ed:7b:0d:47:53:bf:91:89:e7:25:7c:fb:99:78:e9: 39:55:7a:03:09:ba:18:19:de:f7:95:92:86:7e:0d: 7d:62:1a:73:cb:8c:65:5e:7b:1c:ca:35:cf:04:26: ec:19:37:a6:c8:12:ce:70:f3:4b:7b:6d:26:77:55: 7f:68:ee:b3:e8:96:96:3e:07:84:02:f5:0b:e4:30: d0:fb:3d:26:ff:00:f2:60:27:dd:49:93:55:08:aa: 8f:5a:12:95:f2:59:80:3e:a9:34:5f:35:f4:6a:7f: 9c:b9:ea:ef:5c:dc:61:e2:7c:3e:54:db:77:a0:54: 37:42:99:a8:e2:9c:d7:ad:28:03:70:a1:d5:44:9b: 48:37:46:f0:7d:e3:b6:aa:f4:19:51:ea:78:38:54: 7b:9f:6e:31:30:f6:02:d3:ac:81:d6:3c:8e:9c:73: 57:be:c7:64:39:f5:65:df:28:36:b5:a0:fb:42:2f: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.248.0/23 193.105.244.0/23 Signature Algorithm: sha256WithRSAEncryption 13:65:f1:7a:a4:66:13:7a:73:3b:2c:b8:c5:76:6d:6d:bf:7d: c4:a0:73:16:6a:a9:70:22:2f:8c:fd:a7:7a:82:39:d8:78:53: 84:03:d1:10:56:66:09:a1:3b:26:67:ce:f2:bd:91:5a:0d:d0: 0d:55:21:ec:b4:2d:b5:54:5c:fa:3f:e5:ab:39:38:c0:29:5b: fc:a1:20:ba:6b:57:af:8f:18:4b:cb:7c:d0:c8:92:0a:b2:cc: 53:92:e6:a2:f2:f4:87:ed:48:3e:20:5f:f6:10:8c:3f:df:05: 4b:20:bf:c0:b8:97:81:1f:ba:5b:00:01:99:7b:9d:d3:6a:c8: bb:a5:36:20:38:cb:c4:93:1e:6f:90:6e:ed:62:bc:86:fe:0a: d8:a6:bc:ca:85:21:2a:95:79:29:1a:58:20:b2:3b:59:10:30: a9:3a:5e:c2:b7:96:b2:28:ab:11:5c:79:05:f1:aa:7f:70:f3: 79:ad:f3:e4:4b:aa:47:e3:c6:9a:46:3c:75:fb:ee:47:b8:90: 56:86:b8:84:43:05:fa:2c:d6:94:43:58:9e:f0:45:7b:a0:89: 2d:4e:95:02:01:07:34:27:6a:c1:3a:6a:31:a5:f2:af:eb:4a: 19:04:01:48:e8:21:da:02:cb:ce:6a:02:9d:96:fe:bd:6b:f8: 78:90:c9:4e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+OFB1d749AXu/2BZdhYBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjhmZGUyYmZjNjNlZmUzZDEzMmRkYWM3ODM3ZTE1YzdmNGI0OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVn6PW81qKBKGaYHzvwgguBC0MK LCIWBRAbdjFzmgQR8KgnWuRYiF8RWq6GJO69//yRxllO+wyReUGUk/+zM96Hodz3 MvG2m0Xtew1HU7+RieclfPuZeOk5VXoDCboYGd73lZKGfg19Yhpzy4xlXnscyjXP BCbsGTemyBLOcPNLe20md1V/aO6z6JaWPgeEAvUL5DDQ+z0m/wDyYCfdSZNVCKqP WhKV8lmAPqk0XzX0an+cuervXNxh4nw+VNt3oFQ3Qpmo4pzXrSgDcKHVRJtIN0bw feO2qvQZUep4OFR7n24xMPYC06yB1jyOnHNXvsdkOfVl3yg2taD7Qi+lawIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2E5Zjgx ZS03OWIyLTRjMmUtOWYzZS03YzI0ZWYwMjU5ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvYTlmODFl LTc5YjItNGMyZS05ZjNlLTdjMjRlZjAyNTlkYi8xL0VvX2VLX3hqNy1QUk10MnNl RGZoWEg5TFNmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwVT4AwQBwWn0MA0GCSqGSIb3DQEBCwUAA4IB AQATZfF6pGYTenM7LLjFdm1tv33EoHMWaqlwIi+M/ad6gjnYeFOEA9EQVmYJoTsm Z87yvZFaDdANVSHstC21VFz6P+WrOTjAKVv8oSC6a1evjxhLy3zQyJIKssxTkuai 8vSH7Ug+IF/2EIw/3wVLIL/AuJeBH7pbAAGZe53Tasi7pTYgOMvEkx5vkG7tYryG /grYprzKhSEqlXkpGlggsjtZEDCpOl7Ct5ayKKsRXHkF8ap/cPN5rfPkS6pH48aa Rjx1++5HuJBWhriEQwX6LNaUQ1ie8EV7oIktTpUCAQc0J2rBOmoxpfKv60oZBAFI 6CHaAsvOagKdlv69a/h4kMlO -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:54 2026 by rpki-client