This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer File: eodGp2zag2kAnSiUHvFWI5xqY6E.cer (raw, json) Hash identifier: wE7qm5cZ9VVO2oGcci3Uu08Ti2weYygJfOLDsNp0cyQ= Subject key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5657768BFC079F8BECBE14662DA19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5378 AS: 8576 IP: 62.136.0.0/15 IP: 81.76.0.0/14 IP: 84.64.0.0/13 IP: 90.240.0.0/12 IP: 193.32.24.0/22 IP: 193.32.45.0/24 IP: 193.193.32.0/19 IP: 193.194.22.0 -- 193.194.31.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:65:77:68:bf:c0:79:f8:be:cb:e1:46:62:da:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a8746a76cda8369009d28941ef156239c6a63a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:bc:b0:f8:f8:e8:e6:10:6e:88:a7:1d:2f: 30:f9:9d:53:e1:ae:57:f0:a5:33:89:5f:51:de:04: 62:9d:73:57:42:75:c7:89:69:b4:f7:2b:9f:77:88: 1c:ef:c5:bd:3c:0e:1b:9c:a9:93:02:e1:17:4f:40: 48:1c:5f:8a:4d:fd:09:79:2b:2b:29:5b:e3:d0:93: 2d:cf:20:eb:3d:a9:84:65:de:6f:8a:45:88:06:50: 3b:02:ab:d6:56:83:76:7f:27:1f:ab:06:c7:11:ff: 56:1e:b3:cf:19:2e:97:74:63:26:11:0c:09:a2:25: 58:74:1d:d8:b4:39:13:51:8b:dd:5f:bf:18:55:4c: 2c:a6:9f:14:39:5e:7c:42:7f:f0:c4:bf:1a:9f:0c: 18:11:94:fa:30:78:2c:3a:b5:ed:90:00:f9:66:58: 28:42:85:b9:1b:7a:db:a4:e8:40:68:81:94:26:ed: 68:af:e0:de:1a:6c:bf:bc:f7:47:77:66:f0:ba:7a: 98:7c:60:92:38:47:48:cd:63:97:f2:ec:21:11:13: 96:7d:ae:ce:47:8a:b6:62:6d:c3:f7:48:7c:0d:52: 63:68:25:81:9a:e7:55:e1:65:05:29:c8:3b:f4:40: c9:31:1b:9a:3f:d4:a4:8a:c3:51:6e:c4:18:c5:d0: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.136.0.0/15 81.76.0.0/14 84.64.0.0/13 90.240.0.0/12 193.32.24.0/22 193.32.45.0/24 193.193.32.0/19 193.194.22.0-193.194.31.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5378 8576 Signature Algorithm: sha256WithRSAEncryption 36:d2:dc:da:78:71:73:e6:a5:56:12:8b:ca:31:e1:05:14:83: e5:f8:11:3c:ed:c8:9e:ce:4c:5b:79:b7:00:e2:11:9f:0f:9e: f0:9b:aa:ca:d5:af:5d:e5:e4:85:6f:bc:e7:da:41:e6:f8:f5: 38:f9:6c:71:65:bc:73:bf:2b:ea:3b:cf:26:9d:17:6e:a4:95: 7f:b0:4b:3e:56:7e:e5:47:d3:3f:3f:fd:3b:56:f9:ca:4a:62: 32:1c:33:47:82:92:17:9c:04:b1:7d:6f:5c:54:ba:fc:a7:34: ba:11:91:c0:82:e2:d1:0a:8e:e8:1f:13:61:f5:16:38:d1:ca: 0a:97:c6:f7:51:ec:0f:92:a4:6c:1e:ce:79:0d:ff:d3:49:c0: 70:cb:11:af:46:59:48:8b:6c:5e:94:96:c8:7a:dd:88:ea:d2: 88:6b:b7:ec:70:56:b8:a9:0a:12:dd:74:cd:0a:98:48:88:f9: 73:dd:5b:ab:39:cf:19:6b:44:e9:c7:80:46:49:6e:76:09:47: e3:17:5d:dd:fa:2b:a0:58:03:83:39:8a:83:35:2c:f4:73:df: ab:4a:d0:b1:1c:e1:3c:4a:85:1c:61:95:ac:f6:70:6a:f5:f8: e1:68:a9:16:54:f0:e2:17:97:10:b7:85:87:55:55:91:fc:5e: 06:cb:88:10 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt+pWV3aL/Aefi+y+FGYtoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTg3NDZhNzZjZGE4MzY5MDA5ZDI4OTQxZWYxNTYyMzljNmE2M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP68sPj46OYQboinHS8w+Z1T4a5X 8KUziV9R3gRinXNXQnXHiWm09yufd4gc78W9PA4bnKmTAuEXT0BIHF+KTf0JeSsr KVvj0JMtzyDrPamEZd5vikWIBlA7AqvWVoN2fycfqwbHEf9WHrPPGS6XdGMmEQwJ oiVYdB3YtDkTUYvdX78YVUwspp8UOV58Qn/wxL8anwwYEZT6MHgsOrXtkAD5Zlgo QoW5G3rbpOhAaIGUJu1or+DeGmy/vPdHd2bwunqYfGCSOEdIzWOX8uwhEROWfa7O R4q2Ym3D90h8DVJjaCWBmudV4WUFKcg79EDJMRuaP9SkisNRbsQYxdDrQQIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFHqHRqds2oNpAJ0olB7xViOcamOhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzkxM2Ux Mi1mNWVkLTQ2ZjQtOTgyYy01MmRlZGRkZWUzOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvOTEzZTEy LWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8xL2VvZEdwMnphZzJrQW5TaVVI dkZXSTV4cVk2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDA6BAIAATA0AwMBPogDAwJRTAMDA1RAAwMEWvADBALBIBgDBADB IC0DBAXBwSAwDAMEAcHCFgMEBcHCADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIV AgICIYAwDQYJKoZIhvcNAQELBQADggEBADbS3Np4cXPmpVYSi8ox4QUUg+X4ETzt yJ7OTFt5twDiEZ8PnvCbqsrVr13l5IVvvOfaQeb49Tj5bHFlvHO/K+o7zyadF26k lX+wSz5WfuVH0z8//TtW+cpKYjIcM0eCkhecBLF9b1xUuvynNLoRkcCC4tEKjugf E2H1FjjRygqXxvdR7A+SpGweznkN/9NJwHDLEa9GWUiLbF6Ulsh63Yjq0ohrt+xw VripChLddM0KmEiI+XPdW6s5zxlrROnHgEZJbnYJR+MXXd36K6BYA4M5ioM1LPRz 36tK0LEc4TxKhRxhlaz2cGr1+OFoqRZU8OIXlxC3hYdVVZH8XgbLiBA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:28:35 2026 by rpki-client