This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer (raw, json) Hash identifier: lq+ZeyPS/CgAq1Bzl46zGwQexB+1VK6OVE51GTXAGis= Subject key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECDADFF8325BA288F4F145D647BC40 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.141.192.0/22 IP: 91.193.52.0/24 IP: 2a06:b4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:da:df:f8:32:5b:a2:88:f4:f1:45:d6:47:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78688182b8f253c5cf946294786b7901435fc8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:1a:c0:97:b5:74:40:c2:d0:42:f7:7e:1b: 92:7c:f8:ca:83:42:b7:a5:6a:d7:0c:14:9b:39:5a: 90:a6:08:ef:0c:b4:ac:2e:4f:ec:44:ae:28:e1:5d: ac:d2:26:b2:30:57:89:a6:49:cc:a7:7b:20:a6:1c: be:d5:f0:58:0b:df:61:ce:75:47:67:30:d6:e7:21: 09:93:a2:13:c0:20:f5:6f:fa:66:8b:66:51:b8:4d: c3:24:95:b3:12:d1:51:45:9d:c7:97:59:da:03:aa: 98:d6:61:3d:d4:fe:98:1e:4d:e8:ba:46:cb:81:65: 31:5d:06:72:12:46:62:fd:37:7a:5f:ca:77:4c:fc: 23:74:a9:3a:c6:03:bd:ec:ef:0a:1c:51:36:90:fd: 25:71:0d:1a:f1:24:79:39:35:90:54:c9:4e:92:ca: bb:e9:f6:2d:f8:26:56:1d:ee:22:fc:51:22:b1:09: 96:aa:c8:76:91:97:6a:ff:85:d3:1f:e9:de:b4:50: 78:8f:74:19:51:95:da:a9:47:35:41:d4:a4:91:d1: 8b:bf:8c:fe:d7:29:69:30:e9:77:02:52:3e:a8:a5: ed:8e:7f:2c:b4:e0:81:51:20:87:3c:90:9d:61:fb: 7f:1d:17:06:56:d6:cb:cf:f3:7c:32:eb:a9:dd:29: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.192.0/22 91.193.52.0/24 IPv6: 2a06:b4c0::/29 Signature Algorithm: sha256WithRSAEncryption 6a:1e:dd:43:66:a2:cd:27:e5:52:89:a4:06:f3:49:e6:d6:b7: 01:79:17:72:3b:7b:0b:04:1b:0c:d7:fb:03:c1:a5:9e:78:31: f8:b4:1e:5b:76:0f:82:f2:48:75:68:78:bc:12:d3:a8:94:41: f9:c2:cd:a8:f6:00:fd:c0:bf:54:d8:0c:a5:22:7d:a2:d9:e2: 65:c9:bf:cc:54:7f:13:6a:d9:8d:7b:62:ea:78:ce:10:1b:79: 39:3c:3a:dd:02:01:3c:92:b3:4b:8d:09:fd:51:45:7c:40:b6: 2b:1b:65:25:c5:bf:16:d3:14:3a:25:13:8f:e7:2c:7c:02:e2: 63:e9:6b:79:ab:8b:71:88:70:22:f0:05:48:e5:38:c7:bb:47: df:64:89:00:c2:38:bc:97:a7:d3:98:85:f8:e3:22:d9:2c:a5: 33:09:ac:9f:80:d7:d8:75:5e:04:f2:7f:b9:dd:bc:8d:5e:79: 97:bd:9d:a7:b8:ad:0f:13:52:b9:c1:89:20:cb:92:3f:ef:b7: c1:11:05:cd:96:6a:50:f8:55:44:d5:e0:02:36:fc:9e:fb:b8: e6:42:26:72:c3:83:42:ae:6c:49:cb:70:8c:85:cf:e1:a8:27: f2:27:a8:19:42:76:eb:77:c5:c9:94:d4:63:04:13:83:27:ff: 8a:4e:73:78 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt87Nrf+DJbooj08UXWR7xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODY4ODE4MmI4ZjI1M2M1Y2Y5NDYyOTQ3ODZiNzkwMTQzNWZjOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziEawJe1dEDC0EL3fhuSfPjKg0K3 pWrXDBSbOVqQpgjvDLSsLk/sRK4o4V2s0iayMFeJpknMp3sgphy+1fBYC99hznVH ZzDW5yEJk6ITwCD1b/pmi2ZRuE3DJJWzEtFRRZ3Hl1naA6qY1mE91P6YHk3oukbL gWUxXQZyEkZi/Td6X8p3TPwjdKk6xgO97O8KHFE2kP0lcQ0a8SR5OTWQVMlOksq7 6fYt+CZWHe4i/FEisQmWqsh2kZdq/4XTH+netFB4j3QZUZXaqUc1QdSkkdGLv4z+ 1ylpMOl3AlI+qKXtjn8stOCBUSCHPJCdYft/HRcGVtbLz/N8Muup3SkZHQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFHhogYK48lPFz5RilHhreQFDX8jDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzJkZmRi Ni03YTRkLTQzYzMtODcwZi1jODZjMmZjNmM2MWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMmRmZGI2 LTdhNGQtNDNjMy04NzBmLWM4NmMyZmM2YzYxYi8xL2VHaUJncmp5VThYUGxHS1Vl R3Q1QVVOZnlNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLY3AAwQAW8E0MA0EAgACMAcDBQMqBrTAMA0G CSqGSIb3DQEBCwUAA4IBAQBqHt1DZqLNJ+VSiaQG80nm1rcBeRdyO3sLBBsM1/sD waWeeDH4tB5bdg+C8kh1aHi8EtOolEH5ws2o9gD9wL9U2AylIn2i2eJlyb/MVH8T atmNe2LqeM4QG3k5PDrdAgE8krNLjQn9UUV8QLYrG2Ulxb8W0xQ6JROP5yx8AuJj 6Wt5q4txiHAi8AVI5TjHu0ffZIkAwji8l6fTmIX44yLZLKUzCayfgNfYdV4E8n+5 3byNXnmXvZ2nuK0PE1K5wYkgy5I/77fBEQXNlmpQ+FVE1eACNvye+7jmQiZyw4NC rmxJy3CMhc/hqCfyJ6gZQnbrd8XJlNRjBBODJ/+KTnN4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:30 2026 by rpki-client