This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer File: eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer (raw, json) Hash identifier: L1I0y9OIfx2fElNbjKXMBlly1lWSjF+nDEcqWWZSXkg= Subject key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3BFE4C8C777FAAC58BFD699F38A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34868 AS: 59716 IP: 80.83.176.0/20 IP: 185.69.2.0/24 IP: 185.190.228.0/22 IP: 2001:4ce8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:fe:4c:8c:77:7f:aa:c5:8b:fd:69:9f:38:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78d65d4a22df705beed7b3432fbe48a356597724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:a8:29:72:43:fe:42:1e:d2:42:18:a5:93: 41:0c:d0:69:40:0d:2c:08:a5:84:50:9a:2e:59:a6: fa:c9:c5:0d:97:5c:8c:a1:e0:08:fe:0a:1d:0d:06: 7c:ad:ef:f5:27:35:1a:5e:93:3b:27:fb:6a:6e:90: 99:29:b3:1d:1a:55:d0:53:e3:bd:42:c5:eb:5f:c7: db:48:09:10:2d:93:ee:6d:ed:07:0d:b2:ca:9b:4d: 2e:9d:4d:b4:1e:97:7d:21:c3:05:47:57:0c:9c:5b: d3:88:4a:74:ad:e1:cb:a4:79:b7:5b:31:ed:e5:21: 1c:f1:c6:dd:ac:9f:79:b1:0f:a0:05:1a:fc:b0:6b: e8:4d:75:9f:b8:b5:f3:5c:99:b9:7d:32:4c:a3:9c: 9c:c9:44:31:43:ec:cb:64:57:14:22:fe:fd:dd:95: 02:e1:fc:61:c3:ca:76:65:4c:67:a3:ba:79:7d:5f: 76:76:18:03:d4:21:b1:66:7c:63:a5:64:11:a4:9e: 05:e0:30:24:b2:b7:69:36:de:5c:94:96:c1:de:48: ef:2e:f1:9c:81:2b:4a:d8:8f:61:54:58:33:69:9b: de:fc:09:52:50:e0:42:ff:48:ee:3c:e2:05:d3:b2: b5:84:da:68:48:ad:9f:8d:33:8c:13:7f:6d:5c:b5: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.176.0/20 185.69.2.0/24 185.190.228.0/22 IPv6: 2001:4ce8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34868 59716 Signature Algorithm: sha256WithRSAEncryption 11:91:8a:60:6f:60:e6:48:9a:54:da:f2:e1:0c:b9:0a:9a:74: b9:4d:2e:25:ed:8d:94:08:ed:82:f1:96:e3:ad:9e:2e:64:84: 1e:3d:3a:49:c0:c7:e8:c0:61:65:31:39:9d:f7:80:89:e3:d2: 12:df:ce:01:13:d3:dc:85:c7:9f:ab:01:cd:92:5d:8a:ee:7c: dc:ef:3d:cb:dc:26:91:b2:b8:74:38:bc:89:91:48:06:33:ca: 60:a2:86:75:ec:87:32:2c:f3:59:bc:ed:5d:6d:fd:31:19:ec: ab:20:71:24:ca:df:2a:a1:91:e7:55:f5:d3:cd:90:ba:eb:ac: dc:51:a4:8c:76:ef:13:de:e2:11:8a:78:36:43:fb:fe:d0:52: 6c:58:d1:7f:8c:cc:3e:a8:6e:92:1f:1d:88:fb:4d:7e:e7:12: d4:37:81:47:65:50:2f:6d:af:d2:fe:1a:7d:e1:3d:c4:d2:80: 19:12:4a:3f:78:b8:04:4d:19:ae:9d:af:fe:99:3f:7c:0f:39: b1:ce:b3:ad:89:b3:9f:fd:c1:c8:3c:6b:38:b6:42:0f:4e:51: 59:1d:ba:d9:94:84:29:80:d0:9e:df:1e:7e:71:95:86:11:07: ef:11:36:f9:ed:bb:ed:a8:6a:4a:ae:c9:77:84:03:9e:f7:ef: 9f:4e:a0:c0 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt26zv+TIx3f6rFi/1pnzimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGQ2NWQ0YTIyZGY3MDViZWVkN2IzNDMyZmJlNDhhMzU2NTk3NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1baoKXJD/kIe0kIYpZNBDNBpQA0s CKWEUJouWab6ycUNl1yMoeAI/godDQZ8re/1JzUaXpM7J/tqbpCZKbMdGlXQU+O9 QsXrX8fbSAkQLZPube0HDbLKm00unU20Hpd9IcMFR1cMnFvTiEp0reHLpHm3WzHt 5SEc8cbdrJ95sQ+gBRr8sGvoTXWfuLXzXJm5fTJMo5ycyUQxQ+zLZFcUIv793ZUC 4fxhw8p2ZUxno7p5fV92dhgD1CGxZnxjpWQRpJ4F4DAksrdpNt5clJbB3kjvLvGc gStK2I9hVFgzaZve/AlSUOBC/0juPOIF07K1hNpoSK2fjTOME39tXLXDUwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFHjWXUoi33Bb7tezQy++SKNWWXckMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjVh ZDE1LWFmMGItNDVjZC1iODgzLTFhMDU4ZmEwZWJhMS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODky NWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvNzhENjVENEEyMkRG NzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgME BFBTsAMEALlFAgMEArm+5DANBAIAAjAHAwUDIAFM6DAfBggrBgEFBQcBCAEB/wQQ MA6gDDAKAgMAiDQCAwDpRDANBgkqhkiG9w0BAQsFAAOCAQEAEZGKYG9g5kiaVNry 4Qy5Cpp0uU0uJe2NlAjtgvGW462eLmSEHj06ScDH6MBhZTE5nfeAiePSEt/OARPT 3IXHn6sBzZJdiu583O89y9wmkbK4dDi8iZFIBjPKYKKGdeyHMizzWbztXW39MRns qyBxJMrfKqGR51X1082Quuus3FGkjHbvE97iEYp4NkP7/tBSbFjRf4zMPqhukh8d iPtNfucS1DeBR2VQL22v0v4afeE9xNKAGRJKP3i4BE0Zrp2v/pk/fA85sc6zrYmz n/3ByDxrOLZCD05RWR262ZSEKYDQnt8efnGVhhEH7xE2+e277ahqSq7Jd4QDnvfv n06gwA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:23 2026 by rpki-client