This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer File: ErethYfzKycmXpxnphMr-bPwIPw.cer (raw, json) Hash identifier: 3xksZMNQ2x+PK/ejE3R6ouftB0y4HbfZDELl7VySIDk= Subject key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1582D01D88278A3E721C4F5962822B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52194 IP: 46.173.176.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:82:d0:1d:88:27:8a:3e:72:1c:4f:59:62:82:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:b0:18:1d:9b:77:e9:a3:99:2b:59:5d:be: b6:c1:63:d6:07:9a:b0:0e:f2:82:52:bb:1a:5e:e0: a4:08:5f:cd:3c:5b:27:b1:8c:c7:b2:f3:ab:83:1a: b2:ba:99:f6:07:35:7d:7a:a2:87:87:67:ed:8e:37: bf:ec:24:25:76:88:3a:38:c0:10:29:49:20:ff:91: 58:21:18:94:ce:ee:1e:f0:49:0f:e3:48:9c:b1:63: 85:c0:8d:09:d8:45:56:5e:f2:63:75:23:9a:88:e9: 17:35:01:da:50:3e:ad:c1:47:7d:b1:14:a3:94:4c: b4:a0:bc:2f:e5:6a:43:65:94:5c:04:f5:03:d9:7b: 8a:5b:22:f4:00:3d:dc:f4:f5:f3:da:2f:03:c2:09: eb:ff:ee:e9:75:ae:d9:f1:8f:73:3f:e9:97:4b:ac: 19:9b:68:9a:e8:83:bd:32:c1:33:10:69:65:ce:33: 0b:1b:76:5e:3a:52:9b:4f:88:54:38:6f:43:fa:e0: 7a:bf:88:85:d0:05:f3:37:05:5e:18:8d:d1:b4:ce: 73:f6:02:30:fb:0e:a6:50:f7:45:63:fc:d4:99:81: a6:1d:67:4d:2c:da:44:c6:0c:2d:a6:e3:5f:6b:4f: 47:53:50:18:c8:6a:03:83:6e:b9:b1:f3:be:56:34: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.176.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52194 Signature Algorithm: sha256WithRSAEncryption 65:ba:18:66:1e:58:60:3e:f7:7c:60:a7:04:26:13:2a:bb:49: e4:2d:b5:48:99:b4:c1:00:4a:a0:55:2f:86:90:0f:33:5b:b6: f6:e1:56:56:85:ac:a3:bc:b8:43:a7:ce:84:df:f3:72:6f:90: cc:bf:6d:4b:08:8b:25:b7:42:1e:49:d8:da:56:42:5f:12:de: 61:e3:81:36:92:9f:94:39:0c:e6:1a:bf:a5:2f:45:a4:5f:f0: 73:16:fe:1f:73:ce:12:3f:ca:38:a9:48:90:48:dd:69:4c:24: 8d:7f:36:2e:ff:37:80:3e:26:96:a1:8a:a9:7b:b5:a7:0a:1a: cd:50:13:c5:fa:4f:ac:ee:20:9b:82:31:0f:d8:f4:0d:64:8c: 40:92:47:70:c7:11:fa:a0:c4:df:09:83:6a:40:4c:c1:74:64: 3a:e7:a9:1e:18:a3:78:41:09:ac:47:84:00:3d:f1:85:e5:7e: f4:1a:50:08:9f:6e:5f:7c:76:60:6b:ce:9d:96:f4:d6:5b:d1: 50:a1:16:64:65:76:4f:6a:5b:17:57:b0:57:09:50:e2:bc:a8: 98:65:4c:b3:5e:9d:c1:17:e5:09:a1:22:58:8a:8a:66:f6:58: ae:c6:28:b6:d2:d9:80:b3:3b:92:eb:90:e5:2b:91:4d:be:94: a4:e3:75:7b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FYLQHYgnij5yHE9ZYoIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmI3YWQ4NTg3ZjMyYjI3MjY1ZTljNjdhNjEzMmJmOWIzZjAyMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppewGB2bd+mjmStZXb62wWPWB5qw DvKCUrsaXuCkCF/NPFsnsYzHsvOrgxqyupn2BzV9eqKHh2ftjje/7CQldog6OMAQ KUkg/5FYIRiUzu4e8EkP40icsWOFwI0J2EVWXvJjdSOaiOkXNQHaUD6twUd9sRSj lEy0oLwv5WpDZZRcBPUD2XuKWyL0AD3c9PXz2i8Dwgnr/+7pda7Z8Y9zP+mXS6wZ m2ia6IO9MsEzEGllzjMLG3ZeOlKbT4hUOG9D+uB6v4iF0AXzNwVeGI3RtM5z9gIw +w6mUPdFY/zUmYGmHWdNLNpExgwtpuNfa09HU1AYyGoDg265sfO+VjRgLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2Lzg5MjIw Zi05MWVjLTRjZTEtOTljNS0xMDkxMjI3OWExMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvODkyMjBm LTkxZWMtNGNlMS05OWM1LTEwOTEyMjc5YTEyNS8xL0VyZXRoWWZ6S3ljbVhweG5w aE1yLWJQd0lQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQELq2wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDL4jANBgkqhkiG9w0BAQsFAAOCAQEAZboYZh5YYD73fGCnBCYTKrtJ5C21SJm0 wQBKoFUvhpAPM1u29uFWVoWso7y4Q6fOhN/zcm+QzL9tSwiLJbdCHknY2lZCXxLe YeOBNpKflDkM5hq/pS9FpF/wcxb+H3POEj/KOKlIkEjdaUwkjX82Lv83gD4mlqGK qXu1pwoazVATxfpPrO4gm4IxD9j0DWSMQJJHcMcR+qDE3wmDakBMwXRkOuepHhij eEEJrEeEAD3xheV+9BpQCJ9uX3x2YGvOnZb01lvRUKEWZGV2T2pbF1ewVwlQ4ryo mGVMs16dwRflCaEiWIqKZvZYrsYottLZgLM7kuuQ5SuRTb6UpON1ew== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:08 2026 by rpki-client