This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer File: evV91Sx1_OOf_ikVRp2eZW28uHM.cer (raw, json) Hash identifier: 5H5k0YPkCjhdgwXj5sY0R0y6vVhbyVWGFjdjWpubQQc= Subject key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2AD57BB3C84B1F79A65A86B025AAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204004 AS: 211261 IP: 92.246.80.0/22 IP: 103.226.192.0/22 IP: 103.229.168.0/24 IP: 103.229.170.0/23 IP: 185.117.44.0/22 IP: 185.145.68.0/22 IP: 185.167.181.0/24 IP: 185.201.4.0/24 IP: 185.204.200.0/23 IP: 185.204.203.0/24 IP: 185.223.176.0/23 IP: 185.223.179.0/24 IP: 185.237.212.0 -- 185.237.214.255 IP: 2a07:4640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ad:57:bb:3c:84:b1:f7:9a:65:a8:6b:02:5a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:84:45:89:48:cc:14:fb:55:df:44:29:fd:1d: c7:98:57:eb:c1:8e:d1:70:19:05:ff:87:62:75:e2: e0:e9:b7:fc:a8:37:ea:bf:c3:6a:f7:96:27:51:cb: 8a:48:d6:1b:98:68:c5:dd:ad:55:67:d6:f4:bd:7c: fe:bc:3d:6d:d4:1d:b4:ef:e1:fb:ac:fc:4d:e7:10: 04:d5:98:8f:8a:df:69:e1:6f:bd:0b:3a:8a:39:fa: 76:85:75:7c:93:76:3b:0a:23:9e:19:90:84:e1:12: 99:71:e9:39:f8:e2:41:ba:62:80:c7:70:69:e0:09: c6:7f:83:b2:dc:ee:bb:17:b1:b7:a4:f5:4e:9f:f2: ce:90:2c:26:8e:c9:5d:97:a0:17:ec:ed:96:de:1a: 29:d8:7a:89:cd:5f:90:fe:86:07:f5:bd:c2:89:c1: 08:40:a3:cb:a5:7d:f3:c9:a7:16:48:da:eb:1e:87: 53:e5:af:67:ab:e6:81:0a:e8:6f:a8:e1:2d:08:a3: cf:6d:39:c8:52:5a:27:04:99:25:64:63:71:84:03: 9d:64:95:71:48:62:28:18:33:18:0b:00:98:51:77: 04:d0:fe:2d:8b:3c:c1:c6:08:0b:ed:06:45:70:4c: fc:05:88:af:09:ec:ca:66:ba:b3:17:19:bd:96:a8: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.246.80.0/22 103.226.192.0/22 103.229.168.0/24 103.229.170.0/23 185.117.44.0/22 185.145.68.0/22 185.167.181.0/24 185.201.4.0/24 185.204.200.0/23 185.204.203.0/24 185.223.176.0/23 185.223.179.0/24 185.237.212.0-185.237.214.255 IPv6: 2a07:4640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204004 211261 Signature Algorithm: sha256WithRSAEncryption 4d:68:c2:cc:89:6b:cb:68:4e:fe:ab:98:4e:30:20:4c:e4:a4: 64:61:10:f9:0e:86:18:5b:6f:70:0a:88:73:c1:ca:fa:99:4c: ba:16:5c:e2:9d:24:88:7f:4a:fc:e5:96:fb:61:cc:a2:82:11: ac:22:43:26:1b:d8:8a:b2:74:94:b5:02:50:45:36:75:be:39: 6e:3b:07:ae:19:87:55:62:f9:a4:e6:bb:d8:9e:7d:8b:bc:b7: be:db:2e:8c:c3:6c:22:d0:1d:8c:e4:91:4a:46:57:d9:b0:de: 3a:30:22:44:a0:8a:52:ac:a2:60:f8:9e:73:09:5c:b6:d9:da: 1e:d1:44:07:82:11:84:e0:75:ab:6f:62:bc:e7:05:d8:57:10: 96:ae:8e:64:7e:b1:9a:ad:50:dc:f2:6b:0c:d2:d3:19:f9:af: b0:98:1b:df:87:88:0a:06:5d:a3:7d:a9:c1:94:17:0b:29:2d: 98:ef:04:7f:4e:ee:96:7b:90:b3:59:a8:ab:fa:20:28:ae:ff: e4:67:ef:43:c5:c4:a3:a5:bc:55:5b:65:41:47:e9:6e:d0:77: 22:c1:9e:18:5b:f6:3d:41:94:99:00:f0:45:fb:bb:09:34:ca: 46:c7:6d:a6:c0:b2:85:57:9e:41:91:10:a1:1c:7b:82:96:73: 5a:27:fe:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt4oq1XuzyEsfeaZahrAlqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWY1N2RkNTJjNzVmY2UzOWZmZTI5MTU0NjlkOWU2NTZkYmNiODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YRFiUjMFPtV30Qp/R3HmFfrwY7R cBkF/4dideLg6bf8qDfqv8Nq95YnUcuKSNYbmGjF3a1VZ9b0vXz+vD1t1B207+H7 rPxN5xAE1ZiPit9p4W+9CzqKOfp2hXV8k3Y7CiOeGZCE4RKZcek5+OJBumKAx3Bp 4AnGf4Oy3O67F7G3pPVOn/LOkCwmjsldl6AX7O2W3hop2HqJzV+Q/oYH9b3CicEI QKPLpX3zyacWSNrrHodT5a9nq+aBCuhvqOEtCKPPbTnIUlonBJklZGNxhAOdZJVx SGIoGDMYCwCYUXcE0P4tizzBxggL7QZFcEz8BYivCezKZrqzFxm9lqgZDwIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFHr1fdUsdfzjn/4pFUadnmVtvLhzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzg3OTdk ZS0zYWU5LTRlMDUtODBmZi1jMjUzNDA5NmM2MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvODc5N2Rl LTNhZTktNGUwNS04MGZmLWMyNTM0MDk2YzYwZC8xL2V2VjkxU3gxX09PZl9pa1ZS cDJlWlcyOHVITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBcBAIAATBWAwQCXPZQAwQCZ+LAAwQAZ+WoAwQBZ+WqAwQCuXUs AwQCuZFEAwQAuae1AwQAuckEAwQBuczIAwQAuczLAwQBud+wAwQAud+zMAwDBAK5 7dQDBAC57dYwDQQCAAIwBwMFAyoHRkAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID AxzkAgMDOT0wDQYJKoZIhvcNAQELBQADggEBAE1owsyJa8toTv6rmE4wIEzkpGRh EPkOhhhbb3AKiHPByvqZTLoWXOKdJIh/SvzllvthzKKCEawiQyYb2IqydJS1AlBF NnW+OW47B64Zh1Vi+aTmu9iefYu8t77bLozDbCLQHYzkkUpGV9mw3jowIkSgilKs omD4nnMJXLbZ2h7RRAeCEYTgdatvYrznBdhXEJaujmR+sZqtUNzyawzS0xn5r7CY G9+HiAoGXaN9qcGUFwspLZjvBH9O7pZ7kLNZqKv6ICiu/+Rn70PFxKOlvFVbZUFH 6W7QdyLBnhhb9j1BlJkA8EX7uwk0ykbHbabAsoVXnkGREKEce4KWc1on/oc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:12 2026 by rpki-client