This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer File: eqhsgVbwgG3MzcItzE1hdbj6mJM.cer (raw, json) Hash identifier: Pl4pmEnAvpZtsFposkWQlC/WAq7kdesSAQ0jsI01OnY= Subject key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1241A18D4226F958CF4F7926EB7398 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.76.116.0/22 IP: 2a0d:7900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:41:a1:8d:42:26:f9:58:cf:4f:79:26:eb:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:4d:7d:13:4f:97:b6:a8:60:0c:f6:7e:a4: 8e:22:d2:c1:95:f8:08:69:8f:c6:cf:f3:8c:80:95: 23:c7:c7:74:98:de:44:e8:9e:8f:9c:32:1a:60:50: 37:d2:dd:24:cf:f2:81:d4:10:21:ca:a4:e2:f5:7d: 6d:6c:00:93:2f:b1:bd:f6:bb:1f:e9:b0:4e:a2:a7: e8:4d:f3:79:94:4a:80:1a:a1:b3:54:54:75:30:45: 46:c0:11:2c:e0:14:2c:ab:6b:8a:dc:f0:1e:d4:0a: 45:36:c9:dd:e1:65:43:f8:61:a7:a6:e4:b9:cf:34: ae:4d:ff:74:0a:87:06:a0:ad:cc:71:c4:f2:01:e8: 7b:e4:eb:91:d9:fe:97:0a:b8:57:50:e5:81:3a:0d: a5:27:ea:93:30:ad:ff:cd:ac:75:3d:4e:4c:01:da: 90:a8:cd:c4:33:a5:73:45:97:27:ec:63:95:02:1d: 18:a8:5e:67:87:70:6e:d5:1f:ac:e0:64:4f:96:4b: 96:41:3d:d4:70:14:72:1e:ee:6d:ae:bb:f6:2d:4b: 7a:f2:4a:67:4b:6d:b3:43:92:d1:5d:78:02:54:51: da:c7:7e:fb:44:8e:60:4a:81:c2:b3:23:47:d7:67: ac:5c:3a:36:91:f1:8d:d5:62:5f:27:7d:9b:77:df: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.116.0/22 IPv6: 2a0d:7900::/29 Signature Algorithm: sha256WithRSAEncryption a8:c1:18:d8:56:26:e5:b3:d8:d3:c4:49:b9:7d:1e:7c:d1:b3: 27:32:ff:ed:ab:90:42:55:04:c2:34:6b:b8:9b:25:15:24:8e: 3b:2b:c2:71:bd:b1:10:ca:15:1b:ad:37:eb:68:ea:24:a7:8e: 08:36:90:07:6e:37:15:10:75:cb:13:36:e6:5b:9a:0d:45:39: 29:5d:a5:84:ae:f5:f4:44:61:3c:3b:be:cf:4f:1c:3c:d9:a6: 46:23:13:c1:da:8d:99:e2:bf:f6:d5:93:20:39:18:85:0a:38: 5a:55:52:b7:34:6c:01:52:b4:a1:4a:8c:fc:3d:8e:2d:1b:6f: ae:5f:40:f3:ac:dc:27:8d:36:1f:50:18:27:cf:74:9a:3c:10: 48:1e:ae:ee:28:97:08:59:2a:7a:a5:45:d1:a2:b0:3a:63:6e: 02:77:f3:b2:25:4e:87:44:41:ef:22:a5:8a:dc:e0:cc:db:20: b1:40:9a:51:d8:31:d0:4f:66:cf:18:3f:23:57:48:d2:f9:d3: 33:a9:a1:fb:97:d0:d3:9d:38:6d:dc:76:7d:4c:15:f8:97:2e: 12:46:db:4f:1f:ba:41:05:8b:f5:0d:ed:37:48:78:df:08:1f: 24:6a:5d:19:36:39:1f:51:d8:e7:07:d0:41:0c:43:b0:45:7d: 94:0f:88:f8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EkGhjUIm+VjPT3km63OYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWE4NmM4MTU2ZjA4MDZkY2NjZGMyMmRjYzRkNjE3NWI4ZmE5ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMBNfRNPl7aoYAz2fqSOItLBlfgI aY/Gz/OMgJUjx8d0mN5E6J6PnDIaYFA30t0kz/KB1BAhyqTi9X1tbACTL7G99rsf 6bBOoqfoTfN5lEqAGqGzVFR1MEVGwBEs4BQsq2uK3PAe1ApFNsnd4WVD+GGnpuS5 zzSuTf90CocGoK3MccTyAeh75OuR2f6XCrhXUOWBOg2lJ+qTMK3/zax1PU5MAdqQ qM3EM6VzRZcn7GOVAh0YqF5nh3Bu1R+s4GRPlkuWQT3UcBRyHu5trrv2LUt68kpn S22zQ5LRXXgCVFHax377RI5gSoHCsyNH12esXDo2kfGN1WJfJ32bd9/pVwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHqobIFW8IBtzM3CLcxNYXW4+piTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2IyZDRk OC00ZjdjLTQ3NTYtYTQ2MS1mYWZkYmVkNTc0YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYjJkNGQ4 LTRmN2MtNDc1Ni1hNDYxLWZhZmRiZWQ1NzRhZC8xL2VxaHNnVmJ3Z0czTXpjSXR6 RTFoZGJqNm1KTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwkx0MA0EAgACMAcDBQMqDXkAMA0GCSqGSIb3 DQEBCwUAA4IBAQCowRjYVibls9jTxEm5fR580bMnMv/tq5BCVQTCNGu4myUVJI47 K8JxvbEQyhUbrTfraOokp44INpAHbjcVEHXLEzbmW5oNRTkpXaWErvX0RGE8O77P Txw82aZGIxPB2o2Z4r/21ZMgORiFCjhaVVK3NGwBUrShSoz8PY4tG2+uX0DzrNwn jTYfUBgnz3SaPBBIHq7uKJcIWSp6pUXRorA6Y24Cd/OyJU6HREHvIqWK3ODM2yCx QJpR2DHQT2bPGD8jV0jS+dMzqaH7l9DTnTht3HZ9TBX4ly4SRttPH7pBBYv1De03 SHjfCB8kal0ZNjkfUdjnB9BBDEOwRX2UD4j4 -----END CERTIFICATE-----Generated at Mon Jan 26 13:41:54 2026 by rpki-client