This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer (raw, json) Hash identifier: W0a37CFATnTavSxognBKIAm2MMyOfGOruNav3s+7vOg= Subject key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0B9960C35B0054065869199D3E85 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.233.14.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0b:99:60:c3:5b:00:54:06:58:69:19:9d:3e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:76:f6:f7:78:6c:0a:62:c7:b8:fb:99:57: 45:e2:ee:de:cb:35:d2:b5:06:b6:4b:52:fe:54:e3: 96:f5:ae:11:60:d1:f0:f5:0e:d4:7f:9b:17:ed:0f: b7:bb:bc:be:d9:be:33:93:30:c2:ec:be:73:3f:53: 87:8f:d5:cd:ae:8b:c0:4e:12:30:59:b3:6b:18:6f: 08:3e:52:cd:2d:a5:89:09:9e:d2:10:82:27:ac:94: 8a:52:dd:f7:88:53:6f:80:0b:79:f0:20:ab:65:50: 05:a3:a1:40:ec:df:d1:c6:ee:91:73:45:b5:96:b5: 77:ee:21:0c:54:b9:8e:37:bd:1a:e6:73:b5:0d:d3: 54:f4:e8:c5:3e:ca:5a:27:97:8b:5a:9a:6b:72:cb: 9a:02:e8:90:c3:82:42:bb:2a:d6:aa:4f:2c:5b:87: aa:bf:8d:16:ba:ea:76:08:11:e2:a2:d4:24:23:f0: db:6c:56:b8:3f:52:17:32:79:a1:e5:d6:11:d0:55: 9b:3d:ec:2c:20:dc:72:b6:ab:aa:6d:10:d1:cf:fe: 18:33:47:a6:90:d7:7d:b9:38:0a:34:e4:8c:97:46: 12:d2:2d:8b:b6:b4:41:97:c6:85:2c:6e:15:3c:72: 85:60:d1:7e:fc:ae:95:bd:fc:b5:84:09:c6:73:91: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.14.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:dd:c3:1f:0d:e1:86:6f:a3:71:31:9a:e6:b0:c6:2d:64:98: 4c:97:54:49:77:bd:47:ba:d5:d4:83:36:ee:ec:76:7b:c7:c9: 2d:ae:00:fb:17:d2:94:ac:e0:9f:43:0d:73:25:e6:34:92:c7: 70:4b:0b:60:31:50:0d:8d:ff:52:d7:be:6c:26:25:15:eb:ec: 7e:93:bf:cc:b7:09:cd:b3:b2:66:62:6b:78:40:76:b1:dd:06: 55:55:b1:ab:1b:7b:41:34:6c:93:b1:9f:b1:99:32:f3:88:f3: dd:a3:36:ad:2a:b1:e1:6e:b5:4c:84:4d:03:6e:60:db:3b:a3: cb:4a:3f:8e:d1:68:6f:34:19:2a:19:51:b2:aa:d0:c8:58:78: 31:60:8c:03:da:0d:83:bd:88:46:a9:62:d8:a2:f1:a2:84:62: 46:be:56:00:d5:4b:c5:97:ae:ab:98:bd:bf:fe:88:b1:ae:ab: 7d:ef:9d:05:ea:e6:d2:b9:a8:74:42:5f:67:a1:a8:8a:4e:e0: fe:8a:f9:ed:d3:2e:dd:18:7a:be:12:c3:dd:8f:d6:6e:28:53: 72:22:46:44:c7:fe:37:ed:9e:aa:e9:3d:23:d8:b3:7c:9f:9b: 58:7c:f9:88:ab:07:a2:b9:ce:28:06:e9:f5:94:67:93:83:be: 03:cb:8e:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WwuZYMNbAFQGWGkZnT6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWJmMDg2ZTIxMjUwNjhkOTlmNWRjMWZjYTRjNjAxNzE3NTlkMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/529vd4bApix7j7mVdF4u7eyzXS tQa2S1L+VOOW9a4RYNHw9Q7Uf5sX7Q+3u7y+2b4zkzDC7L5zP1OHj9XNrovAThIw WbNrGG8IPlLNLaWJCZ7SEIInrJSKUt33iFNvgAt58CCrZVAFo6FA7N/Rxu6Rc0W1 lrV37iEMVLmON70a5nO1DdNU9OjFPspaJ5eLWpprcsuaAuiQw4JCuyrWqk8sW4eq v40Wuup2CBHiotQkI/DbbFa4P1IXMnmh5dYR0FWbPewsINxytquqbRDRz/4YM0em kNd9uTgKNOSMl0YS0i2LtrRBl8aFLG4VPHKFYNF+/K6Vvfy1hAnGc5HxowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHm/CG4hJQaNmfXcH8pMYBcXWdG6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzAyMzZk Mi1iMDBiLTQ2NDAtOTNiZS02YmFlM2U5ZWE3NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMDIzNmQy LWIwMGItNDY0MC05M2JlLTZiYWUzZTllYTc0Yi8xL2ViOEliaUVsQm8yWjlkd2Z5 a3hnRnhkWjBiby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+kOMA0GCSqGSIb3DQEBCwUAA4IBAQCL3cMf DeGGb6NxMZrmsMYtZJhMl1RJd71HutXUgzbu7HZ7x8ktrgD7F9KUrOCfQw1zJeY0 ksdwSwtgMVANjf9S175sJiUV6+x+k7/MtwnNs7JmYmt4QHax3QZVVbGrG3tBNGyT sZ+xmTLziPPdozatKrHhbrVMhE0DbmDbO6PLSj+O0WhvNBkqGVGyqtDIWHgxYIwD 2g2DvYhGqWLYovGihGJGvlYA1UvFl66rmL2//oixrqt9750F6ubSuah0Ql9noaiK TuD+ivnt0y7dGHq+EsPdj9ZuKFNyIkZEx/437Z6q6T0j2LN8n5tYfPmIqweiuc4o Bun1lGeTg74Dy466 -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:03 2026 by rpki-client