This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer File: eC-fO7vgtR6p6bLpbGhodI-gePc.cer (raw, json) Hash identifier: pNhRza+3YR4tjvlRtJLeFuUppkFGXYsUyqoApEacqsc= Subject key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C805A83BD45EAFFE9C0018578D3D5D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.44.0/24 IP: 193.29.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5a:83:bd:45:ea:ff:e9:c0:01:85:78:d3:d5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:48:28:ab:1e:a4:29:ed:64:07:c6:76:2b: 72:e0:7b:8d:32:70:4f:8b:e3:40:71:73:c6:b8:20: 1c:80:9b:e9:b7:ac:92:3d:fd:4b:24:2a:f9:18:26: 1c:63:cc:93:29:b8:36:53:4a:be:fa:a3:53:1e:e1: f9:79:a0:89:ac:89:2f:68:58:a4:d8:a1:dd:ed:d6: 1d:05:6a:ed:44:da:02:8c:00:5d:23:e2:f4:59:8d: ee:4c:b3:31:82:0e:a6:bf:3a:f7:d9:7f:08:c2:ca: 1d:98:6b:c9:19:30:56:0e:78:46:7b:ce:dd:26:30: e3:f9:af:51:c8:8d:ae:80:13:12:c4:1f:53:42:d5: 8b:7a:47:b4:7f:a5:b1:8f:d1:6b:ee:2f:79:fb:25: 86:ce:d3:00:e1:5e:fd:2a:ce:2d:b0:9b:4a:2f:bf: f7:02:09:74:74:cc:c0:20:fe:f8:13:b6:cf:93:57: e6:8b:96:11:22:17:b1:a1:6b:95:5a:a4:3c:c7:68: 24:53:2e:42:f8:61:be:ca:f8:22:e6:4d:13:98:ee: 52:0d:16:da:20:08:45:01:48:37:f6:09:25:f4:69: 14:64:f3:18:b7:28:a0:4c:cf:2f:71:d2:72:b3:ea: 49:1c:ea:c6:ec:4b:05:5a:06:a1:94:7d:9c:46:56: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.44.0/24 193.29.52.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a8:08:bd:c3:cc:d2:f1:61:2a:d3:96:97:14:ca:ad:2b:f6: 4e:77:97:bb:13:b1:91:d8:bb:f2:25:f8:33:ec:b8:bd:c4:01: cb:43:4c:62:86:a5:d8:f5:31:f7:e1:b4:1a:51:72:57:8f:26: df:ca:dc:02:c6:7f:08:82:82:d5:85:15:43:d0:35:c5:d1:0c: 6e:a2:d4:ce:d1:3e:6f:0d:1d:1d:3f:37:8f:01:15:4c:26:30: 59:33:c4:5d:12:ec:c3:e3:8e:b8:a2:52:c2:28:47:bf:a5:e1: dc:de:89:5c:6f:7d:96:d5:67:b9:31:56:df:d9:36:46:75:f3: 24:88:86:73:b1:c2:39:ce:60:d5:07:78:5a:cb:11:e0:b7:fa: 55:37:09:fa:a9:86:7a:1c:be:43:39:fa:91:af:85:30:12:3c: 6a:df:ef:42:01:7f:1d:a0:53:bd:1c:9e:42:3a:0b:69:07:22: ab:89:72:ab:4f:a4:fb:1d:82:5b:35:33:00:c6:d4:e0:1d:87: 68:d0:77:5a:65:21:f7:e5:7e:45:dd:52:35:3b:d2:3b:6a:0f: 92:15:8e:5f:5a:8f:bd:61:67:ed:e4:5f:12:12:0b:d2:6d:87: 60:10:bd:48:b9:26:a8:b2:4e:42:a7:97:ed:df:90:95:50:f1: 49:77:c7:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8gFqDvUXq/+nAAYV409XYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODJmOWYzYmJiZTBiNTFlYTllOWIyZTk2YzY4Njg3NDhmYTA3OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNhIKKsepCntZAfGdity4HuNMnBP i+NAcXPGuCAcgJvpt6ySPf1LJCr5GCYcY8yTKbg2U0q++qNTHuH5eaCJrIkvaFik 2KHd7dYdBWrtRNoCjABdI+L0WY3uTLMxgg6mvzr32X8IwsodmGvJGTBWDnhGe87d JjDj+a9RyI2ugBMSxB9TQtWLeke0f6Wxj9Fr7i95+yWGztMA4V79Ks4tsJtKL7/3 Agl0dMzAIP74E7bPk1fmi5YRIhexoWuVWqQ8x2gkUy5C+GG+yvgi5k0TmO5SDRba IAhFAUg39gkl9GkUZPMYtyigTM8vcdJys+pJHOrG7EsFWgahlH2cRlZKXQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHgvnzu74LUeqemy6WxoaHSPoHj3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2U3ZjMy Mi0zOWI1LTQzN2EtOTlmZC03NDNjMzA4MDFmZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZTdmMzIy LTM5YjUtNDM3YS05OWZkLTc0M2MzMDgwMWZmMS8xL2VDLWZPN3ZndFI2cDZiTHBi R2hvZEktZ2VQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9EsAwQAwR00MA0GCSqGSIb3DQEBCwUAA4IB AQCHqAi9w8zS8WEq05aXFMqtK/ZOd5e7E7GR2LvyJfgz7Li9xAHLQ0xihqXY9TH3 4bQaUXJXjybfytwCxn8IgoLVhRVD0DXF0QxuotTO0T5vDR0dPzePARVMJjBZM8Rd EuzD4464olLCKEe/peHc3olcb32W1We5MVbf2TZGdfMkiIZzscI5zmDVB3hayxHg t/pVNwn6qYZ6HL5DOfqRr4UwEjxq3+9CAX8doFO9HJ5COgtpByKriXKrT6T7HYJb NTMAxtTgHYdo0HdaZSH35X5F3VI1O9I7ag+SFY5fWo+9YWft5F8SEgvSbYdgEL1I uSaosk5Cp5ft35CVUPFJd8d8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:45 2026 by rpki-client