This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer File: eA3hbu6UewqMdXFPxdpqAlnKG5A.cer (raw, json) Hash identifier: 3gP6np0OnPj5iMtDWCrClQwgl7CXceggloiJ/jUuDNE= Subject key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3680634BCA80C103313B935B742FF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.208.49.0/24 IP: 2001:67c:2854::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:80:63:4b:ca:80:c1:03:31:3b:93:5b:74:2f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:d1:90:00:e5:d0:8c:3a:9e:ad:04:8f:23: 03:d3:95:e4:99:93:53:cd:66:b9:ea:65:6b:4c:3a: 8b:a7:33:eb:2c:6d:e5:1c:09:a6:dd:88:92:f2:7d: 41:fe:31:10:cc:b9:49:6c:99:8c:a7:91:0d:f5:3a: 61:ea:88:5a:3b:83:95:a7:8a:e5:b7:97:6d:77:df: c0:58:25:5d:82:28:b2:fd:93:d9:e5:7b:b5:f3:c0: ca:0f:a0:b4:12:6b:94:0e:f9:e6:ec:b8:b5:5c:34: 8c:9a:ab:32:c0:95:25:b1:10:9d:8d:72:0b:e0:1a: 6d:91:ec:f2:9b:28:a3:f8:15:f6:09:1d:41:d4:ea: b7:3b:e6:d1:19:b1:75:74:12:78:6e:a3:8a:d6:8a: c2:b1:29:cd:df:3c:df:ce:1a:55:b3:e5:7c:f3:bc: eb:2e:c5:4a:3e:8f:b6:b2:d1:5b:26:a1:fa:43:58: 92:bf:b4:19:5b:d7:f1:af:32:bb:d7:56:ce:99:f4: 6a:7a:3f:93:2c:61:f5:5f:fb:44:ea:62:8a:3c:5c: 64:95:f2:c8:c6:f7:e9:de:57:fa:16:dc:07:88:9e: 7b:0c:40:be:d8:49:97:b8:17:cd:ba:32:b4:50:84: 39:5e:58:14:0a:da:2b:43:ff:0d:34:3b:a4:9b:f4: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.49.0/24 IPv6: 2001:67c:2854::/48 Signature Algorithm: sha256WithRSAEncryption 92:98:c4:4d:0f:97:71:86:0c:9d:7b:8b:ba:83:a7:01:17:4e: d7:19:a8:b5:c6:88:eb:e9:d9:6a:43:ab:f1:1e:21:29:e7:c1: 29:91:87:a2:9b:ba:ba:fd:15:10:f7:b1:e6:18:9d:48:7f:4a: 42:db:2c:4f:42:eb:91:25:6e:f6:ce:4b:60:b6:c1:c6:8a:f8: d3:8c:4b:53:b0:6a:b9:1f:b9:ea:1e:53:99:09:56:ab:14:86: 69:fc:bf:7f:3c:75:41:8b:c4:96:29:4d:8f:ce:f2:41:07:52: af:a9:44:de:0c:5a:e1:20:d2:60:8b:0b:e3:83:b1:d1:e8:08: 2d:4e:ce:46:91:b2:47:7b:7e:f6:da:1c:70:1e:81:c9:7b:9d: e5:c0:99:0e:e9:81:21:82:71:25:98:01:32:24:29:41:18:41: f1:6b:28:b3:58:1a:7f:99:40:1a:ac:8e:4c:4d:2f:b8:b2:7f: 4e:e5:35:24:13:40:c1:3a:8f:d4:69:bd:2e:9c:51:b4:8d:3d: b5:05:ad:bb:01:68:9f:8c:bf:2a:9b:8b:ea:3f:45:ec:47:31: ba:3e:77:c4:28:19:42:9c:f9:43:e4:ed:4e:9f:b3:ea:f2:84: 4d:05:fe:0b:11:99:50:cf:f8:48:62:40:c2:4f:ef:e7:75:84: 90:fa:a0:9d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7NoBjS8qAwQMxO5NbdC/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODBkZTE2ZWVlOTQ3YjBhOGM3NTcxNGZjNWRhNmEwMjU5Y2ExYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lvRkADl0Iw6nq0EjyMD05XkmZNT zWa56mVrTDqLpzPrLG3lHAmm3YiS8n1B/jEQzLlJbJmMp5EN9Tph6ohaO4OVp4rl t5dtd9/AWCVdgiiy/ZPZ5Xu188DKD6C0EmuUDvnm7Li1XDSMmqsywJUlsRCdjXIL 4Bptkezymyij+BX2CR1B1Oq3O+bRGbF1dBJ4bqOK1orCsSnN3zzfzhpVs+V887zr LsVKPo+2stFbJqH6Q1iSv7QZW9fxrzK711bOmfRqej+TLGH1X/tE6mKKPFxklfLI xvfp3lf6FtwHiJ57DEC+2EmXuBfNujK0UIQ5XlgUCtorQ/8NNDukm/QpcwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFHgN4W7ulHsKjHVxT8XaagJZyhuQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzEwNzE5 NS1jYzUxLTQ3MWItOGRhMi1lMDA1NTQzZjAzNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvMTA3MTk1 LWNjNTEtNDcxYi04ZGEyLWUwMDU1NDNmMDM3NC8xL2VBM2hidTZVZXdxTWRYRlB4 ZHBxQWxuS0c1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9AxMA8EAgACMAkDBwAgAQZ8KFQwDQYJKoZI hvcNAQELBQADggEBAJKYxE0Pl3GGDJ17i7qDpwEXTtcZqLXGiOvp2WpDq/EeISnn wSmRh6Kburr9FRD3seYYnUh/SkLbLE9C65ElbvbOS2C2wcaK+NOMS1Owarkfueoe U5kJVqsUhmn8v388dUGLxJYpTY/O8kEHUq+pRN4MWuEg0mCLC+ODsdHoCC1OzkaR skd7fvbaHHAegcl7neXAmQ7pgSGCcSWYATIkKUEYQfFrKLNYGn+ZQBqsjkxNL7iy f07lNSQTQME6j9RpvS6cUbSNPbUFrbsBaJ+Mvyqbi+o/RexHMbo+d8QoGUKc+UPk 7U6fs+ryhE0F/gsRmVDP+EhiQMJP7+d1hJD6oJ0= -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:48 2026 by rpki-client