This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer File: e-ykASv3tQVuLgoWHrRhiHbJESo.cer (raw, json) Hash identifier: GPQ1VDoP0i8FiHvoGVzP4UdYCXKKpUH+866fgifUPbg= Subject key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3ECE02010DD903C17822A2C961524 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 82.192.96.0/23 IP: 82.192.100.0 -- 82.192.111.255 IP: 2a03:9e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ec:e0:20:10:dd:90:3c:17:82:2a:2c:96:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:84:a1:f0:bf:59:c8:be:f3:cb:25:ef:7a:db: 54:19:b4:4e:a1:d2:1c:9a:94:2d:d3:97:d8:ed:27: 76:16:0f:27:d3:23:54:51:70:04:f7:e0:d8:b0:db: b6:d4:b9:d3:3c:27:52:09:a6:2a:df:88:31:a0:40: d1:94:9c:0c:7a:89:d7:f9:08:08:33:ac:d5:db:3c: 89:0d:82:31:ed:e2:1f:ad:22:40:17:52:df:a1:44: b2:cd:5c:89:05:57:33:82:25:1f:f0:33:fb:ca:2f: aa:4c:4c:09:42:54:62:75:bf:5b:c1:f0:25:89:e9: 49:bb:58:09:7b:8e:12:a3:f3:3c:04:09:05:91:f2: 7c:45:23:92:f8:05:09:77:6d:50:d0:47:44:62:25: 03:f6:8f:51:42:fb:ef:e9:25:3f:be:e2:fb:88:75: b8:aa:51:8f:4b:77:e1:de:ab:27:4e:54:d1:25:ea: 85:a9:ce:bf:b7:55:e6:12:b5:5e:70:94:e5:f3:28: 0b:4d:54:79:99:c7:cf:b4:25:ba:16:0d:6e:20:c8: 09:97:b7:be:59:3e:8d:b7:be:77:f1:90:bb:bc:a0: 2a:c2:d4:33:7b:cb:ff:7a:5e:37:52:7b:4c:94:ac: 74:b3:c2:aa:83:da:1e:b8:b0:4d:9a:f7:71:b4:11: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.192.96.0/23 82.192.100.0-82.192.111.255 IPv6: 2a03:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 92:5e:d2:3a:f9:7b:88:f1:b5:8e:42:f3:60:ae:4e:0c:85:9b: 9c:aa:3f:e8:cc:a1:96:5f:4a:c0:6c:11:44:f0:fb:fe:f9:30: 2e:cf:2d:b2:1c:3d:14:5e:ed:23:94:0b:90:31:1b:fa:5a:62: 16:c0:cf:b0:d7:c0:75:93:04:42:eb:21:19:4b:9a:8b:38:28: a8:f9:5e:55:43:13:ad:92:d7:4f:14:bb:33:aa:88:b7:71:20: 25:c9:ae:87:d4:42:01:88:4c:19:b0:09:0b:50:3a:a0:f3:67: 67:62:65:9e:19:67:bb:84:db:1f:8b:7f:7c:a5:31:b5:e6:f7: f6:24:94:fe:e8:9d:25:6b:fb:7c:5a:c2:c9:16:cb:ad:31:18: 3a:de:d7:d5:b3:5d:a8:a2:95:27:44:89:83:89:67:d8:3c:b8: da:30:da:5a:77:4a:3f:02:7e:28:e0:ed:2b:f1:ae:56:24:07: c2:4c:3f:b8:7a:71:eb:43:c3:ca:7f:e8:48:17:75:75:cf:72: 1e:9a:d7:44:48:fb:ff:20:79:84:24:bc:40:3b:fa:dd:76:f6: 6f:2b:27:4d:f0:f9:f3:02:45:25:6a:52:fb:9f:6d:c8:bf:64: 1b:1c:d4:8b:69:6a:37:64:13:7a:23:6f:d9:b5:9c:d5:8e:e9: 54:45:a0:73 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt7o+zgIBDdkDwXgioslhUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmVjYTQwMTJiZjdiNTA1NmUyZTBhMTYxZWI0NjE4ODc2YzkxMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YSh8L9ZyL7zyyXvettUGbROodIc mpQt05fY7Sd2Fg8n0yNUUXAE9+DYsNu21LnTPCdSCaYq34gxoEDRlJwMeonX+QgI M6zV2zyJDYIx7eIfrSJAF1LfoUSyzVyJBVczgiUf8DP7yi+qTEwJQlRidb9bwfAl ielJu1gJe44So/M8BAkFkfJ8RSOS+AUJd21Q0EdEYiUD9o9RQvvv6SU/vuL7iHW4 qlGPS3fh3qsnTlTRJeqFqc6/t1XmErVecJTl8ygLTVR5mcfPtCW6Fg1uIMgJl7e+ WT6Nt7538ZC7vKAqwtQze8v/el43UntMlKx0s8Kqg9oeuLBNmvdxtBGcGQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFHvspAEr97UFbi4KFh60YYh2yREqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1Lzk0ODhk NS1hOGQzLTQ0YjUtOTJkZi01OGNhZjQ3MDFiZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvOTQ4OGQ1 LWE4ZDMtNDRiNS05MmRmLTU4Y2FmNDcwMWJlMy8xL2UteWtBU3YzdFFWdUxnb1dI clJoaUhiSkVTby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQBUsBgMAwDBAJSwGQDBARSwGAwDQQCAAIwBwMF ACoDnoAwDQYJKoZIhvcNAQELBQADggEBAJJe0jr5e4jxtY5C82CuTgyFm5yqP+jM oZZfSsBsEUTw+/75MC7PLbIcPRRe7SOUC5AxG/paYhbAz7DXwHWTBELrIRlLmos4 KKj5XlVDE62S108UuzOqiLdxICXJrofUQgGITBmwCQtQOqDzZ2diZZ4ZZ7uE2x+L f3ylMbXm9/YklP7onSVr+3xawskWy60xGDre19WzXaiilSdEiYOJZ9g8uNow2lp3 Sj8Cfijg7SvxrlYkB8JMP7h6cetDw8p/6EgXdXXPch6a10RI+/8geYQkvEA7+t12 9m8rJ03w+fMCRSVqUvufbci/ZBsc1ItpajdkE3ojb9m1nNWO6VRFoHM= -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:16 2026 by rpki-client