This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer (raw, json) Hash identifier: v4jFy8sa/sIbqZbf6M2VyEUKnoiBWE5WoxT/K2rkBy4= Subject key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9DC073D69C5B2FDA5B30738C44F25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8528 IP: 138.21.0.0/16 IP: 193.8.143.0/24 IP: 193.53.38.0/24 IP: 193.56.119.0/24 IP: 193.57.10.0/23 IP: 193.57.24.0 -- 193.57.26.255 IP: 193.194.132.0/22 IP: 194.41.4.0/22 IP: 194.146.27.0/24 IP: 194.146.54.0/24 IP: 2a00:7ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:dc:07:3d:69:c5:b2:fd:a5:b3:07:38:c4:4f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:d5:1e:94:cb:23:87:eb:d5:ac:c9:39:fe: 13:5d:96:d6:15:15:ea:19:ce:14:eb:82:67:0a:6b: 23:6e:54:76:74:96:7c:99:c3:70:8b:ec:17:f5:5a: ff:09:43:bf:d7:7e:f0:44:04:46:46:0d:04:d7:02: 76:2e:95:0c:7d:89:9c:05:f0:12:bf:61:df:66:58: 90:16:ad:b4:e8:a6:62:be:83:45:bb:46:99:b5:ec: 5b:e5:a8:8d:9e:c0:0d:0a:48:01:d1:cd:86:44:2e: 15:05:6d:d2:11:c6:74:2c:c4:ff:e4:bf:ae:e4:54: 86:93:b9:da:ad:fe:86:d3:65:49:9c:71:24:1a:85: 6f:ec:29:d1:29:1d:64:24:25:8f:1c:45:bb:b0:93: 90:9a:b3:57:93:fa:f1:37:fc:f8:ea:d2:b7:eb:c1: 6f:d0:e2:eb:6d:ee:ec:e6:ff:5d:81:2b:9c:3d:eb: 4d:5e:be:72:eb:49:56:28:cf:5d:ff:01:c0:fa:5a: aa:ff:f7:b3:a1:d3:92:73:5a:88:61:65:e8:cf:c5: 70:3f:5d:94:bc:54:9d:15:1a:db:c8:eb:c9:5a:9d: 91:f1:07:78:80:cd:56:c1:3d:a1:bc:b4:f3:bb:a1: 0f:8c:62:2a:0e:91:94:de:fa:70:85:ba:45:c2:45: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.21.0.0/16 193.8.143.0/24 193.53.38.0/24 193.56.119.0/24 193.57.10.0/23 193.57.24.0-193.57.26.255 193.194.132.0/22 194.41.4.0/22 194.146.27.0/24 194.146.54.0/24 IPv6: 2a00:7ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8528 Signature Algorithm: sha256WithRSAEncryption 0e:e9:d0:01:2f:38:7d:4e:b6:5b:ce:12:b9:17:30:ea:23:99: 36:dc:8f:13:57:9c:64:90:79:68:b5:a1:a0:86:c2:c2:9a:24: a5:50:f4:79:e9:96:eb:8f:e5:3c:be:6d:14:2a:d8:18:a5:02: 73:93:4d:94:84:a2:fb:bc:90:f6:44:f9:12:76:20:88:17:af: 10:df:4f:f6:ee:e4:8f:2f:31:3b:35:20:ba:cb:64:94:7e:db: b4:6e:6b:30:ec:4c:1a:ea:fe:3f:17:fa:28:ab:c0:55:99:45: 26:7e:cf:80:2f:a3:f6:b8:61:58:79:de:33:0b:97:b6:9c:cb: 55:d2:0c:61:9c:ce:ff:67:60:06:b3:2d:a1:72:fa:ae:f3:08: 84:c6:27:99:66:b1:07:c2:87:b2:70:98:36:99:ed:d6:ff:ba: f5:96:9c:b8:60:bd:35:95:7d:ee:30:06:49:c7:5f:a3:d3:b8: a0:dc:de:95:6c:ff:0a:01:6c:d6:cb:bf:44:da:06:50:bb:57: af:dc:f2:10:73:1c:2e:51:ce:69:8a:4a:9a:6c:17:54:72:46: f3:14:d1:8d:32:e2:c8:ed:e2:ec:e0:96:71:79:60:eb:b7:79: b7:fd:80:a1:8e:e5:f1:5f:89:4f:34:04:1b:2d:63:13:6e:2c: 2c:af:94:0a -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt9ydwHPWnFsv2lswc4xE8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGU5OGRlZTlhYWRjODZiNGRmYTllMTY4ZDkyMWJkODBiYTNmM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi7VHpTLI4fr1azJOf4TXZbWFRXq Gc4U64JnCmsjblR2dJZ8mcNwi+wX9Vr/CUO/137wRARGRg0E1wJ2LpUMfYmcBfAS v2HfZliQFq206KZivoNFu0aZtexb5aiNnsANCkgB0c2GRC4VBW3SEcZ0LMT/5L+u 5FSGk7narf6G02VJnHEkGoVv7CnRKR1kJCWPHEW7sJOQmrNXk/rxN/z46tK368Fv 0OLrbe7s5v9dgSucPetNXr5y60lWKM9d/wHA+lqq//ezodOSc1qIYWXoz8VwP12U vFSdFRrbyOvJWp2R8Qd4gM1WwT2hvLTzu6EPjGIqDpGU3vpwhbpFwkX8wwIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFHjpje6archrTfqeFo2SG9gLo/OmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2MxY2M5 NS03NTI5LTQyNzAtYTZlYy01YzcxOTU2YTUzNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvYzFjYzk1 LTc1MjktNDI3MC1hNmVjLTVjNzE5NTZhNTM3Ny8xL2VPbU43cHF0eUd0Ti1wNFdq WkliMkF1ajg2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBJBAIAATBDAwMAihUDBADBCI8DBADBNSYDBADBOHcDBAHBOQow DAMEA8E5GAMEAME5GgMEAsHChAMEAsIpBAMEAMKSGwMEAMKSNjANBAIAAjAHAwUD KgB+wDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIhUDANBgkqhkiG9w0BAQsFAAOC AQEADunQAS84fU62W84SuRcw6iOZNtyPE1ecZJB5aLWhoIbCwpokpVD0eemW64/l PL5tFCrYGKUCc5NNlISi+7yQ9kT5EnYgiBevEN9P9u7kjy8xOzUgustklH7btG5r MOxMGur+Pxf6KKvAVZlFJn7PgC+j9rhhWHneMwuXtpzLVdIMYZzO/2dgBrMtoXL6 rvMIhMYnmWaxB8KHsnCYNpnt1v+69ZacuGC9NZV97jAGScdfo9O4oNzelWz/CgFs 1su/RNoGULtXr9zyEHMcLlHOaYpKmmwXVHJG8xTRjTLiyO3i7OCWcXlg67d5t/2A oY7l8V+JTzQEGy1jE24sLK+UCg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:50:40 2026 by rpki-client