This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer File: ErFnS78NEY8lVPgMr9PvGznYrj8.cer (raw, json) Hash identifier: zM+4+bf+aUTtu4pGw3EDcDV+v92gKeuJu3/mK88vuPc= Subject key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C86CD48B1146A6475FBF38E70B9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203694 AS: 210695 IP: 185.132.124.0/24 IP: 195.137.167.0/24 IP: 2a14:5380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c8:6c:d4:8b:11:46:a6:47:5f:bf:38:e7:0b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:65:eb:e8:0f:13:e8:6c:6a:10:50:8a:55: eb:34:54:02:68:2a:83:8c:d3:60:0d:e0:b7:e9:1e: 7c:c0:3a:dd:cc:e9:09:a8:bb:cd:ac:53:68:b7:41: bc:5f:22:da:16:3d:94:e2:19:87:78:84:14:21:52: e6:2c:91:91:b4:47:93:c5:dc:2b:4a:77:41:78:f1: 8e:51:56:7e:48:13:fd:af:64:76:ae:6a:91:9e:1a: 9e:38:d4:ce:27:dd:db:d5:e8:61:2e:29:31:18:37: b0:6d:f0:5c:f4:7c:04:f2:72:d0:a2:4c:bc:72:26: a2:de:99:77:40:c4:6c:12:2e:fc:b7:16:19:54:cc: 3d:c9:f4:2f:f2:9d:04:ca:98:ad:e8:c4:6b:72:35: 3e:9e:0a:6b:7d:27:cd:ad:6b:ba:84:f8:83:e5:30: 10:2a:06:65:bd:25:6b:c1:6e:a6:ad:11:ff:7c:11: 24:41:3e:d1:b9:b7:d3:c4:4e:df:1c:ad:57:b9:9c: 76:0a:82:fc:34:b8:dc:e1:36:3b:98:f3:0f:1b:1b: 29:f3:34:74:b0:bb:c9:48:dc:5e:ef:a4:3c:d8:7b: a2:93:00:90:ac:0c:f2:aa:96:33:ef:ef:d9:2a:d0: 09:f2:83:4a:d3:4c:22:ec:65:c1:ca:49:07:dc:e2: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.124.0/24 195.137.167.0/24 IPv6: 2a14:5380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203694 210695 Signature Algorithm: sha256WithRSAEncryption 78:1d:94:78:e5:54:e7:32:19:2a:6f:59:3e:c7:b5:f8:0b:62: 3b:79:60:0f:f4:fb:de:81:3b:af:0c:15:1b:31:f0:6d:f9:f3: 6e:4c:31:e3:9b:f3:d3:cf:1d:33:14:ce:1f:ea:b1:ff:fc:d4: 0e:83:4f:08:0d:74:e2:51:ff:23:82:72:27:8a:00:84:a9:30: 18:86:fe:fb:8c:94:e5:4a:05:22:4f:5c:ec:27:5e:45:ee:06: 85:ca:fb:d1:91:6d:9e:d7:78:ef:1a:da:70:03:12:6a:8f:f5: 40:7e:ba:2e:4e:ba:30:8b:97:53:93:35:5e:5d:20:ff:2a:a2: 82:7f:97:3c:c6:54:c7:ee:8b:46:85:aa:7f:02:20:5b:ca:7d: 5f:7c:be:b0:7e:1c:dd:b9:58:f7:0b:03:ff:6f:b1:a9:62:fe: ff:d5:70:8e:66:39:50:5e:b9:bf:1f:eb:54:27:ec:48:67:5f: 3a:67:37:bd:ee:f3:e9:43:78:0c:55:f9:e1:6b:44:6d:a0:d3: 4a:64:95:b9:07:86:98:7a:9d:1a:9d:87:54:ff:73:c5:30:97: 1c:88:c1:0e:cd:94:af:e5:cf:62:70:88:d3:82:5c:60:ab:44: b1:ea:cc:56:64:58:3e:d2:ed:67:cb:fc:77:66:d3:e4:38:9b: 3d:e0:6a:5f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5EMhs1IsRRqZHX7845wucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmIxNjc0YmJmMGQxMThmMjU1NGY4MGNhZmQzZWYxYjM5ZDhhZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMll6+gPE+hsahBQilXrNFQCaCqD jNNgDeC36R58wDrdzOkJqLvNrFNot0G8XyLaFj2U4hmHeIQUIVLmLJGRtEeTxdwr SndBePGOUVZ+SBP9r2R2rmqRnhqeONTOJ93b1ehhLikxGDewbfBc9HwE8nLQoky8 ciai3pl3QMRsEi78txYZVMw9yfQv8p0Eypit6MRrcjU+ngprfSfNrWu6hPiD5TAQ KgZlvSVrwW6mrRH/fBEkQT7RubfTxE7fHK1XuZx2CoL8NLjc4TY7mPMPGxsp8zR0 sLvJSNxe76Q82HuikwCQrAzyqpYz7+/ZKtAJ8oNK00wi7GXBykkH3OJg/wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFBKxZ0u/DRGPJVT4DK/T7xs52K4/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzIzOTlk Mi04ZTI0LTQ4ZjItYmU4OC1mMzcxZjk4YTc1M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMjM5OWQy LThlMjQtNDhmMi1iZTg4LWYzNzFmOThhNzUzYi8xL0VyRm5TNzhORVk4bFZQZ01y OVB2R3puWXJqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuYR8AwQAw4mnMA0EAgACMAcDBQMqFFOAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMbrgIDAzcHMA0GCSqGSIb3DQEBCwUAA4IB AQB4HZR45VTnMhkqb1k+x7X4C2I7eWAP9PvegTuvDBUbMfBt+fNuTDHjm/PTzx0z FM4f6rH//NQOg08IDXTiUf8jgnInigCEqTAYhv77jJTlSgUiT1zsJ15F7gaFyvvR kW2e13jvGtpwAxJqj/VAfrouTrowi5dTkzVeXSD/KqKCf5c8xlTH7otGhap/AiBb yn1ffL6wfhzduVj3CwP/b7GpYv7/1XCOZjlQXrm/H+tUJ+xIZ186Zze97vPpQ3gM Vfnha0RtoNNKZJW5B4aYep0anYdU/3PFMJcciMEOzZSv5c9icIjTglxgq0Sx6sxW ZFg+0u1ny/x3ZtPkOJs94Gpf -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:14 2026 by rpki-client