This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer File: eaMEujS2GhXjeX_9TRrowhjBx78.cer (raw, json) Hash identifier: IvwyVJuH3dAJ5HVql/eh8YqYIfNyuU+BYWb65qdTD0A= Subject key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEB93EE802D8F6FDB133C121839D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49768 IP: 185.23.111.0/24 IP: 2a12:c040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:eb:93:ee:80:2d:8f:6f:db:13:3c:12:18:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:bf:e3:bf:9c:94:48:de:94:59:71:97:9e: 83:c4:2f:53:0a:ca:96:90:cc:2f:23:1f:94:55:8c: 0d:85:ff:e9:f1:b1:3a:72:b0:5b:65:37:44:34:42: 4d:3b:53:15:20:ce:30:8c:a7:e2:0b:a3:76:1b:f2: 55:fe:04:23:60:21:a0:ca:88:ac:f9:5d:cc:3e:61: a7:c2:2b:12:de:16:fc:a5:94:92:ef:c0:d7:70:96: 70:a9:65:8a:a9:1e:19:c9:74:8a:05:eb:cd:74:36: b2:77:7d:f9:7e:a6:0e:5b:28:e7:a8:ce:f1:df:5b: a8:59:ae:de:21:35:e5:00:7a:2a:ed:c9:ae:a1:83: f8:57:9a:d0:12:7a:57:37:95:f2:5f:a4:df:37:d1: 7b:79:f8:8e:c5:9c:ec:3a:c9:60:98:50:52:a4:8d: cb:a6:e3:85:b8:85:4b:90:9d:12:ae:2a:df:20:06: ad:d2:78:48:04:25:9c:48:e8:0a:fc:15:3e:e4:b5: 93:5c:88:05:b5:01:0a:32:d2:86:74:a5:41:55:49: 9d:b4:4c:54:59:e4:d4:61:b5:b3:95:e4:b6:56:e2: e4:fd:1d:27:c4:53:ed:1b:92:74:4f:01:06:9c:25: 76:26:06:0d:7c:b0:81:fc:41:a1:f6:3a:84:61:57: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.111.0/24 IPv6: 2a12:c040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49768 Signature Algorithm: sha256WithRSAEncryption 6d:6a:59:38:80:d5:a1:db:e0:4b:8a:e3:92:ea:c0:06:72:53: dd:7b:2f:56:43:5a:21:69:cf:da:81:54:2f:5e:3f:2e:5d:1f: dc:1a:c6:17:97:bc:ee:f9:a1:30:79:81:7c:b0:16:30:6a:20: 4d:f0:9d:41:e9:e3:36:94:98:0d:30:70:42:a7:f7:c5:cb:d2: bc:2d:77:98:b8:2f:6d:f0:58:dc:fd:7c:da:4d:02:de:af:90: 31:05:2a:34:0c:54:0b:f4:77:99:7a:80:38:7f:80:6c:6f:c3: b7:82:c3:e8:d5:4f:02:97:bb:46:29:a2:bb:03:30:9a:df:a6: 0b:d7:e2:05:75:af:07:85:ad:e6:52:a1:20:af:ab:57:b8:c1: a6:1f:50:fe:b7:f3:4f:5e:a0:d8:4b:0c:a8:be:40:3c:7e:63: 98:bf:fe:50:21:c7:14:94:e2:cf:30:6e:17:2f:ac:64:9e:da: 40:84:d0:50:b3:a4:fb:5b:c6:b9:d0:6c:98:10:a6:23:db:57: 4b:29:4b:9a:26:0e:71:ba:34:26:e3:d6:ca:88:07:5a:27:09: 14:6b:dd:23:0a:83:78:a5:68:60:2c:1f:d5:d4:26:54:fd:e6: 2f:46:f0:06:87:0f:02:9a:b5:75:a4:6e:8e:aa:7e:40:cc:68: a8:8c:a6:13 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WuuT7oAtj2/bEzwSGDnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWEzMDRiYTM0YjYxYTE1ZTM3OTdmZmQ0ZDFhZThjMjE4YzFjN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqK/47+clEjelFlxl56DxC9TCsqW kMwvIx+UVYwNhf/p8bE6crBbZTdENEJNO1MVIM4wjKfiC6N2G/JV/gQjYCGgyois +V3MPmGnwisS3hb8pZSS78DXcJZwqWWKqR4ZyXSKBevNdDayd335fqYOWyjnqM7x 31uoWa7eITXlAHoq7cmuoYP4V5rQEnpXN5XyX6TfN9F7efiOxZzsOslgmFBSpI3L puOFuIVLkJ0SrirfIAat0nhIBCWcSOgK/BU+5LWTXIgFtQEKMtKGdKVBVUmdtExU WeTUYbWzleS2VuLk/R0nxFPtG5J0TwEGnCV2JgYNfLCB/EGh9jqEYVc/lwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHmjBLo0thoV43l//U0a6MIYwce/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2U2MDEw Ny0xOWYzLTQxOTQtYmMyZi05OWEwZDI5YmE1NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZTYwMTA3 LTE5ZjMtNDE5NC1iYzJmLTk5YTBkMjliYTU2My8xL2VhTUV1alMyR2hYamVYXzlU UnJvd2hqQng3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuRdvMA0EAgACMAcDBQMqEsBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCaDANBgkqhkiG9w0BAQsFAAOCAQEAbWpZOIDVodvg S4rjkurABnJT3XsvVkNaIWnP2oFUL14/Ll0f3BrGF5e87vmhMHmBfLAWMGogTfCd QenjNpSYDTBwQqf3xcvSvC13mLgvbfBY3P182k0C3q+QMQUqNAxUC/R3mXqAOH+A bG/Dt4LD6NVPApe7RimiuwMwmt+mC9fiBXWvB4Wt5lKhIK+rV7jBph9Q/rfzT16g 2EsMqL5APH5jmL/+UCHHFJTizzBuFy+sZJ7aQITQULOk+1vGudBsmBCmI9tXSylL miYOcbo0JuPWyogHWicJFGvdIwqDeKVoYCwf1dQmVP3mL0bwBocPApq1daRujqp+ QMxoqIymEw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:03 2026 by rpki-client