This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer File: eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer (raw, json) Hash identifier: svDxE0nffTImGxeSvFEF0Ai4RV4sGA4VP8mDa01F3F0= Subject key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38729C2CC396696F5499A909288356 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197709 IP: 37.140.217.0/24 IP: 45.86.32.0/22 IP: 91.242.231.0/24 IP: 185.238.60.0/22 IP: 192.162.144.0/22 IP: 193.227.112.0/24 IP: 2a0c:2c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:72:9c:2c:c3:96:69:6f:54:99:a9:09:28:83:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:a8:05:0a:ba:ea:37:c4:e1:15:85:10:3c: 16:67:29:32:cb:c1:33:f0:19:f1:6d:56:38:99:46: 33:a8:65:ca:1f:94:4f:0c:c3:e2:32:31:31:96:06: 51:80:ff:51:e4:42:8c:27:c1:b3:55:d1:70:23:75: 03:d9:97:d8:82:69:4a:33:9e:d4:0a:b3:20:4d:87: 19:e3:6f:08:0e:69:ee:25:60:6e:0f:00:a9:52:38: d1:08:08:9d:da:a5:f3:8b:02:99:05:cf:b1:e9:dd: 27:4d:c2:2b:a1:ee:3c:33:2f:98:79:a4:8c:ad:27: c1:52:a9:e6:b7:6f:7e:bb:69:eb:65:02:94:c1:56: f9:98:bd:4f:ea:d6:33:48:52:9c:fa:3a:42:a6:49: 2a:87:0f:aa:a2:a2:58:c8:2d:d9:56:53:8d:75:b8: 2b:fc:12:94:2f:f7:e8:f0:f4:0f:84:9b:7d:1d:ad: 7c:ed:b4:47:fc:5f:31:7f:8a:42:57:03:b5:8e:47: ea:b6:c2:8c:64:d0:ca:aa:16:e3:77:61:5f:1a:38: 57:5e:77:57:b3:56:cb:2c:88:66:2a:58:62:74:2c: 88:48:42:83:ff:ff:08:6d:47:2f:fe:ad:00:da:e4: 92:57:b2:c6:33:be:1d:57:2f:1d:da:f3:73:42:8d: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.217.0/24 45.86.32.0/22 91.242.231.0/24 185.238.60.0/22 192.162.144.0/22 193.227.112.0/24 IPv6: 2a0c:2c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197709 Signature Algorithm: sha256WithRSAEncryption 3e:82:44:a1:b3:48:9e:e5:55:a5:bd:29:35:91:01:15:82:87: cc:09:d0:d8:6e:82:38:cb:7e:e9:93:c3:ed:2b:cc:0e:f6:46: 0a:e8:74:b1:ee:08:49:78:a2:bb:21:ff:de:02:59:d8:42:fa: 6d:8d:93:c1:a2:5a:37:0a:b2:04:08:d3:9e:21:e5:48:2d:eb: 7a:85:db:6e:50:f2:d9:ed:94:77:da:f0:63:0b:08:28:61:ba: 27:0a:05:b3:00:b3:c6:e1:2b:0b:60:ca:bd:0d:2c:cb:d4:41: 75:e6:1f:06:73:78:61:e4:82:1b:34:92:5a:bb:40:a6:83:fc: f0:6a:ff:20:4e:0e:d0:a1:cd:9a:53:28:30:04:c1:da:60:0b: 99:77:b0:bc:3e:e6:0a:f0:21:2d:24:97:1e:f5:53:78:c3:51: d6:39:16:e6:ab:af:e6:9f:02:5c:67:ad:15:82:5d:98:e9:f5: 49:bd:06:39:cc:00:0b:6b:27:0f:ca:f1:a9:d7:04:0d:25:46: ee:9a:7e:76:a9:64:e4:b3:09:19:d8:98:b8:a1:a8:df:23:c6: 25:a6:d0:0d:17:5c:4d:54:64:76:48:9d:f5:2c:8d:c4:40:ea: 36:d7:a8:d7:19:56:bb:2a:f2:7f:3c:0e:fd:e4:b2:88:64:23: ac:69:db:24 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt+OHKcLMOWaW9UmakJKINWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhmNWIyMTBmM2MzZWI0MjA2NTk2MGU4NWQwNjFlOWQ5ZDYzYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63CoBQq66jfE4RWFEDwWZykyy8Ez 8BnxbVY4mUYzqGXKH5RPDMPiMjExlgZRgP9R5EKMJ8GzVdFwI3UD2ZfYgmlKM57U CrMgTYcZ428IDmnuJWBuDwCpUjjRCAid2qXziwKZBc+x6d0nTcIroe48My+YeaSM rSfBUqnmt29+u2nrZQKUwVb5mL1P6tYzSFKc+jpCpkkqhw+qoqJYyC3ZVlONdbgr /BKUL/fo8PQPhJt9Ha187bRH/F8xf4pCVwO1jkfqtsKMZNDKqhbjd2FfGjhXXndX s1bLLIhmKlhidCyISEKD//8IbUcv/q0A2uSSV7LGM74dVy8d2vNzQo3HgQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFHiPWyEPPD60IGWWDoXQYenZ1jq4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2UxMDBi NS02ZjBhLTRmZTktYmVmYi1jNGFjYjg5NjljNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZTEwMGI1 LTZmMGEtNGZlOS1iZWZiLWM0YWNiODk2OWM0OS8xL2VJOWJJUTg4UHJRZ1paWU9o ZEJoNmRuV09yZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAJYzZAwQCLVYgAwQAW/LnAwQCue48AwQCwKKQ AwQAweNwMA0EAgACMAcDBQMqDCyAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwME TTANBgkqhkiG9w0BAQsFAAOCAQEAPoJEobNInuVVpb0pNZEBFYKHzAnQ2G6COMt+ 6ZPD7SvMDvZGCuh0se4ISXiiuyH/3gJZ2EL6bY2TwaJaNwqyBAjTniHlSC3reoXb blDy2e2Ud9rwYwsIKGG6JwoFswCzxuErC2DKvQ0sy9RBdeYfBnN4YeSCGzSSWrtA poP88Gr/IE4O0KHNmlMoMATB2mALmXewvD7mCvAhLSSXHvVTeMNR1jkW5quv5p8C XGetFYJdmOn1Sb0GOcwAC2snD8rxqdcEDSVG7pp+dqlk5LMJGdiYuKGo3yPGJabQ DRdcTVRkdkid9SyNxEDqNteo1xlWuyryfzwO/eSyiGQjrGnbJA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:05 2026 by rpki-client