This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer File: edVl-Z_14P-1vfmZXteoCNQUBuU.cer (raw, json) Hash identifier: bk+swEPEhss5k0jxQxNb3B66XN2uH8KHYZsrFkZzUe4= Subject key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9BC196D5508239300914FC42963E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57568 AS: 208006 AS: 210296 IP: 130.185.120.0/22 IP: 185.204.168.0/22 IP: 185.215.232.0/22 IP: 185.235.40.0/22 IP: 193.24.119.0/24 IP: 194.5.192.0/23 IP: 194.5.206.0/23 IP: 2a0a:77c0::/29 IP: 2a0d:4ac0::/29 IP: 2a0f:94c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:c1:96:d5:50:82:39:30:09:14:fc:42:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:31:8a:63:47:88:80:db:ca:87:8f:de:12:33: 70:0a:48:ba:9b:98:3e:74:82:cd:de:7e:2d:5e:cb: 0a:01:cc:fc:43:6a:f8:bc:be:5d:7a:20:dc:25:a4: 8c:c1:9a:ea:a1:13:c5:56:ba:70:3b:d2:50:54:1a: 75:01:63:5a:96:da:d4:d9:24:2a:8a:09:b0:3a:7f: f2:89:86:e2:d2:fc:96:8e:78:df:e5:81:7d:a1:37: 9a:cd:ad:b9:79:fc:f3:0c:e2:fd:d4:99:65:b0:b2: 08:99:b9:31:bd:2d:83:ee:6b:89:d7:f5:31:89:0c: 50:a3:93:cb:8f:29:ee:c9:77:3c:48:5d:df:9a:af: 8f:58:01:52:63:5c:08:c1:22:e3:b4:28:25:16:85: 8a:2a:a9:4e:6d:d4:76:21:83:e2:46:a1:57:82:0b: f2:3e:4f:02:0a:fc:c4:13:a6:ea:d4:3a:47:e8:e7: c9:3b:ea:3e:c0:ab:22:36:c5:2f:af:08:5a:bd:51: eb:3b:c0:00:45:33:a2:16:77:32:a5:8d:5e:18:45: 93:56:e5:33:5b:1a:af:91:aa:50:bf:97:a7:25:78: 1f:3c:e6:7b:58:7d:23:c8:06:3c:1e:aa:00:07:ee: 1c:6d:02:8b:96:7f:d3:b0:c9:ac:cd:32:3d:15:6d: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.120.0/22 185.204.168.0/22 185.215.232.0/22 185.235.40.0/22 193.24.119.0/24 194.5.192.0/23 194.5.206.0/23 IPv6: 2a0a:77c0::/29 2a0d:4ac0::/29 2a0f:94c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57568 208006 210296 Signature Algorithm: sha256WithRSAEncryption 1f:7e:07:c4:c5:84:73:d6:b5:94:b0:d8:16:12:74:f1:ed:4f: ea:09:d8:f2:56:a9:26:7c:de:7b:5c:a9:50:cd:86:e2:9e:85: f5:24:08:ea:a1:d6:89:ed:b8:69:0d:c2:bc:b1:64:2b:e4:cf: db:be:83:6a:79:08:73:a9:f5:ff:59:51:05:9e:d3:cf:e8:df: 5d:f2:f0:f9:ca:8d:ad:7d:e2:fb:e5:e8:85:e0:36:0c:b7:04: 73:0f:b8:a2:f7:a3:30:d9:d6:bc:e0:b2:8f:02:42:b9:e6:f9: 1f:f1:40:2f:ca:5a:36:ba:92:ec:d5:4f:ff:c6:c0:6f:a1:1e: 59:e4:c6:36:1d:02:87:3c:c5:ae:2a:30:40:d9:e7:69:85:27: f7:0f:03:54:b4:64:eb:c8:65:40:6e:b6:0a:be:0f:1c:a9:a5: 17:c8:5f:53:c6:d6:8d:10:87:95:b7:f5:5a:46:13:e2:db:75: 9f:e0:81:05:10:da:ca:f5:b0:c4:fd:52:de:be:66:b9:3f:6e: 2f:6e:ef:7e:7e:4e:cd:0e:8f:90:ee:38:28:37:e1:80:2b:c0: 0b:ea:b2:d7:b1:91:cc:b8:09:74:88:7b:52:07:20:fc:c0:9b: 8c:a6:c0:29:11:91:2e:b7:82:ed:04:ce:78:b2:91:67:16:94: 07:b3:c2:2c -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt6W5vBltVQgjkwCRT8QpY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWQ1NjVmOTlmZjVlMGZmYjViZGY5OTk1ZWQ3YTgwOGQ0MTQwNmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DGKY0eIgNvKh4/eEjNwCki6m5g+ dILN3n4tXssKAcz8Q2r4vL5deiDcJaSMwZrqoRPFVrpwO9JQVBp1AWNaltrU2SQq igmwOn/yiYbi0vyWjnjf5YF9oTeaza25efzzDOL91JllsLIImbkxvS2D7muJ1/Ux iQxQo5PLjynuyXc8SF3fmq+PWAFSY1wIwSLjtCglFoWKKqlObdR2IYPiRqFXggvy Pk8CCvzEE6bq1DpH6OfJO+o+wKsiNsUvrwhavVHrO8AARTOiFncypY1eGEWTVuUz WxqvkapQv5enJXgfPOZ7WH0jyAY8HqoAB+4cbQKLln/TsMmszTI9FW2a9QIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFHnVZfmf9eD/tb35mV7XqAjUFAblMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2VlNWNk Ny1iMzBlLTQ2NmItYWFhZC02YzNiODc0NDNlMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZWU1Y2Q3 LWIzMGUtNDY2Yi1hYWFkLTZjM2I4NzQ0M2UwNi8xL2VkVmwtWl8xNFAtMXZmbVpY dGVvQ05RVUJ1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQCgrl4AwQCucyoAwQCudfoAwQCuesoAwQAwRh3 AwQBwgXAAwQBwgXOMBsEAgACMBUDBQMqCnfAAwUDKg1KwAMFAyoPlMAwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDAODgAgMDLIYCAwM1eDANBgkqhkiG9w0BAQsFAAOC AQEAH34HxMWEc9a1lLDYFhJ08e1P6gnY8lapJnzee1ypUM2G4p6F9SQI6qHWie24 aQ3CvLFkK+TP276DankIc6n1/1lRBZ7Tz+jfXfLw+cqNrX3i++XoheA2DLcEcw+4 ovejMNnWvOCyjwJCueb5H/FAL8paNrqS7NVP/8bAb6EeWeTGNh0ChzzFriowQNnn aYUn9w8DVLRk68hlQG62Cr4PHKmlF8hfU8bWjRCHlbf1WkYT4tt1n+CBBRDayvWw xP1S3r5muT9uL27vfn5OzQ6PkO44KDfhgCvAC+qy17GRzLgJdIh7Ugcg/MCbjKbA KRGRLreC7QTOeLKRZxaUB7PCLA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:50 2026 by rpki-client