This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer File: eN7biYi8i7Gl-eVfQXJrZURsJew.cer (raw, json) Hash identifier: pzXPi+HPJmm8QK7ZByBXZZio1+a9ESUrjOz+qVefZvg= Subject key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F811D2BB40328504E0198D4C603C3B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58338 AS: 201690 IP: 193.242.208.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1d:2b:b4:03:28:50:4e:01:98:d4:c6:03:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:ab:06:68:5f:e7:da:78:d0:55:1b:54:de: cc:14:8e:e0:d4:a4:f6:89:8b:d2:6e:09:1e:90:fd: e6:72:5a:22:6e:4b:ca:9d:78:fa:bc:18:34:9c:e9: 5a:93:4c:79:07:58:07:9c:19:21:29:61:10:66:6b: 93:6f:87:1c:ae:81:40:91:81:ae:d6:a1:30:82:da: 06:77:9d:0e:82:49:0a:1f:a1:94:ab:e2:67:1d:88: c4:ed:c4:f3:3b:ca:63:55:43:15:74:01:60:ad:0b: bb:e3:99:56:a2:ab:af:c5:a2:39:4d:8a:b9:d4:b4: a9:8e:f1:09:fa:d7:b1:d7:98:69:12:d1:78:ea:a1: 0d:f5:89:1e:40:6b:fb:75:b1:c5:5f:ba:11:ad:a9: ec:69:4e:15:1d:45:c6:ec:ba:e9:7c:c3:56:22:af: c7:1e:c4:be:7f:28:67:b0:64:8f:7e:65:4e:9a:55: 9d:dc:77:bd:5d:b3:08:e5:82:d8:86:5e:4b:d7:22: 5e:e8:33:ab:c3:23:a5:9e:84:35:3d:92:ac:c5:8d: 98:72:c3:38:19:f0:fc:77:79:42:d7:78:d1:3e:53: d2:31:51:f6:18:b1:b5:4d:c0:89:f4:2b:b3:d0:c5: b5:04:cd:09:23:2b:f3:19:a5:37:3f:14:5d:f6:66: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.208.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58338 201690 Signature Algorithm: sha256WithRSAEncryption 4c:84:f8:da:bf:b2:20:e3:95:55:94:5e:1d:7b:eb:52:6e:62: fd:94:8f:16:dc:b5:4f:d2:dd:4f:07:2a:ba:94:41:88:31:c9: a9:13:d2:89:5f:cb:15:62:19:b0:1a:43:5d:54:45:6f:83:ae: c2:03:f4:d8:c8:5f:08:d5:29:e4:e2:70:1c:55:5c:e9:c1:6a: cd:ee:7f:db:c4:39:80:5b:58:ad:b6:1e:2d:18:a8:5d:e5:59: 1c:6d:09:83:ec:e9:cd:bc:7d:82:d0:c2:84:54:92:d7:4e:42: 7b:e9:75:ec:9e:69:aa:ca:8d:c3:03:3e:a5:c2:ad:97:9c:5c: 8c:4d:3c:5f:0c:e3:67:44:69:ce:e4:d4:4e:61:f1:12:39:8f: b6:2a:9c:93:e6:44:93:b3:3c:2a:1b:1e:de:b8:41:be:43:4f: c9:44:a7:1e:42:8b:25:7b:e6:33:de:31:4c:31:e5:46:8e:5a: 28:d3:c2:e3:1a:87:0e:1b:64:f6:51:f7:a5:b2:34:f6:71:b2: 80:c2:e2:bf:72:48:79:f5:be:c6:52:40:72:7b:f0:5f:12:f1: 8f:38:cc:32:79:1d:27:74:1e:ae:e9:58:cd:dc:a4:16:2f:fa: 83:10:66:c5:19:17:d3:3c:c6:e3:a2:79:c0:b7:c5:ca:cb:2d: 54:6d:5a:55 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/gR0rtAMoUE4BmNTGA8O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGRlZGI4OTg4YmM4YmIxYTVmOWU1NWY0MTcyNmI2NTQ0NmMyNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRerBmhf59p40FUbVN7MFI7g1KT2 iYvSbgkekP3mcloibkvKnXj6vBg0nOlak0x5B1gHnBkhKWEQZmuTb4ccroFAkYGu 1qEwgtoGd50OgkkKH6GUq+JnHYjE7cTzO8pjVUMVdAFgrQu745lWoquvxaI5TYq5 1LSpjvEJ+tex15hpEtF46qEN9YkeQGv7dbHFX7oRransaU4VHUXG7LrpfMNWIq/H HsS+fyhnsGSPfmVOmlWd3He9XbMI5YLYhl5L1yJe6DOrwyOlnoQ1PZKsxY2YcsM4 GfD8d3lC13jRPlPSMVH2GLG1TcCJ9Cuz0MW1BM0JIyvzGaU3PxRd9mZkAwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHje24mIvIuxpfnlX0Fya2VEbCXsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzA4MWE0 Yy1kNjMxLTQzMTEtOWJkNS1hNjI1NGRmNTI2YzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMDgxYTRj LWQ2MzEtNDMxMS05YmQ1LWE2MjU0ZGY1MjZjMS8xL2VON2JpWWk4aTdHbC1lVmZR WEpyWlVSc0pldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwfLQMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwDj4gIDAxPaMA0GCSqGSIb3DQEBCwUAA4IBAQBMhPjav7Ig45VVlF4de+tSbmL9 lI8W3LVP0t1PByq6lEGIMcmpE9KJX8sVYhmwGkNdVEVvg67CA/TYyF8I1Snk4nAc VVzpwWrN7n/bxDmAW1itth4tGKhd5VkcbQmD7OnNvH2C0MKEVJLXTkJ76XXsnmmq yo3DAz6lwq2XnFyMTTxfDONnRGnO5NROYfESOY+2KpyT5kSTszwqGx7euEG+Q0/J RKceQosle+Yz3jFMMeVGjloo08LjGocOG2T2UfelsjT2cbKAwuK/ckh59b7GUkBy e/BfEvGPOMwyeR0ndB6u6VjN3KQWL/qDEGbFGRfTPMbjonnAt8XKyy1UbVpV -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:39 2026 by rpki-client