This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer (raw, json) Hash identifier: Ds0hHBXLd3IDBMGoN2WzDdal0U2uSkhjT1z4jh3AOSw= Subject key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B06F8AAF1556FCEDF72326E70110C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215621 IP: 62.164.160.0/21 IP: 116.199.224.0/20 IP: 2a14:18c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:06:f8:aa:f1:55:6f:ce:df:72:32:6e:70:11:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:36:60:89:2c:4f:8b:2c:0f:72:9c:47:a3: bd:37:bb:98:9b:a6:53:28:99:38:c2:af:b3:ec:b9: cf:ea:a0:1b:0f:3d:d3:2a:97:2b:3f:df:67:58:d5: b1:35:56:91:b3:0f:98:fb:e0:ea:ef:84:83:aa:7c: 7f:cd:34:cd:cd:59:ea:e2:97:f5:26:26:2a:17:f0: 4e:99:0b:83:ad:dc:b1:21:f2:3b:0c:19:e1:a2:c6: 8c:b7:3a:05:d4:91:c1:00:4a:cd:d5:5e:61:74:24: 7c:70:a7:84:70:af:a7:93:b9:4d:49:06:af:b3:92: 08:f1:19:0a:a1:2f:ea:cc:75:d8:39:07:4b:da:51: ea:c1:12:0e:09:d4:b3:93:7c:a1:30:f0:ac:c7:92: c9:10:af:79:13:4a:bf:65:8d:03:03:9d:04:97:4c: 26:76:f6:2a:36:64:29:22:9e:f1:a7:2d:ac:61:39: 4c:81:53:f6:46:e2:fe:6a:4a:75:4b:c3:ed:cb:e7: fd:62:79:b8:ac:ad:6a:6a:89:6b:61:e7:95:95:df: d9:2e:ad:39:24:50:2f:d9:01:ed:c8:1c:dd:ac:11: 9f:b7:73:52:09:45:dc:73:c7:b8:99:2d:74:d1:a1: 5d:b2:12:c7:47:c8:02:65:71:1b:a9:5e:6f:52:da: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.160.0/21 116.199.224.0/20 IPv6: 2a14:18c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215621 Signature Algorithm: sha256WithRSAEncryption 97:74:36:04:c4:b2:17:b0:9c:1c:18:4b:bc:5f:ce:9d:06:fa: c4:64:91:4e:e6:35:6a:51:52:52:ef:e0:61:4a:bf:95:3a:a3: 5c:26:df:5d:18:03:a5:21:87:cf:05:eb:79:c5:10:2f:28:59: e6:16:f8:5c:1e:bf:52:96:55:7c:44:92:f0:e0:91:ad:f3:f0: 5c:f6:a0:74:b6:9d:39:0e:2b:18:80:1e:3c:f4:77:56:d3:b8: 35:ad:4d:3b:81:db:74:84:d2:39:7e:81:cd:d1:d2:9d:74:43: 60:6e:f6:73:f0:57:b7:56:1e:d1:c8:3a:20:ce:d2:a3:ed:3d: 25:0c:7e:3c:b8:2b:ab:22:3b:56:03:3e:e1:9b:76:e1:c8:e0: cc:7b:2e:f6:0c:00:8f:c0:c3:c9:34:0d:cd:17:15:61:ba:6a: 9a:a3:2e:25:a5:29:fb:eb:a2:70:c7:a4:88:90:b8:9f:ea:8e: cb:00:1b:07:ab:ed:05:ee:ad:d4:f1:51:c1:65:e7:38:99:c6: 5f:f2:f2:db:56:9c:9b:99:1e:40:bd:2b:0f:cc:c6:cf:c6:92: 32:87:ed:1a:64:c9:7c:83:32:1a:86:48:af:ac:9e:ae:4e:c2: d7:7c:53:39:27:4f:3f:c4:18:04:dc:4a:20:f1:6e:09:d7:ce: b0:13:f1:9d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6Wwb4qvFVb87fcjJucBEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWZiNTQ0MWQ4ZWY4ZTQxYWEyOGRkNTFjZGRlOTI1OTQzYWVmN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilI2YIksT4ssD3KcR6O9N7uYm6ZT KJk4wq+z7LnP6qAbDz3TKpcrP99nWNWxNVaRsw+Y++Dq74SDqnx/zTTNzVnq4pf1 JiYqF/BOmQuDrdyxIfI7DBnhosaMtzoF1JHBAErN1V5hdCR8cKeEcK+nk7lNSQav s5II8RkKoS/qzHXYOQdL2lHqwRIOCdSzk3yhMPCsx5LJEK95E0q/ZY0DA50El0wm dvYqNmQpIp7xpy2sYTlMgVP2RuL+akp1S8Pty+f9Ynm4rK1qaolrYeeVld/ZLq05 JFAv2QHtyBzdrBGft3NSCUXcc8e4mS100aFdshLHR8gCZXEbqV5vUtoX+QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHr7VEHY745BqijdUc3ekllDrvf6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzRkNzZm NS00MmVjLTQ1M2UtODk5Mi1kODk3M2FjYWY0MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNGQ3NmY1 LTQyZWMtNDUzZS04OTkyLWQ4OTczYWNhZjQxZC8xL2V2dFVRZGp2amtHcUtOMVJ6 ZDZTV1VPdTlfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDPqSgAwQEdMfgMA0EAgACMAcDBQMqFBjAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKRTANBgkqhkiG9w0BAQsFAAOCAQEAl3Q2 BMSyF7CcHBhLvF/OnQb6xGSRTuY1alFSUu/gYUq/lTqjXCbfXRgDpSGHzwXrecUQ LyhZ5hb4XB6/UpZVfESS8OCRrfPwXPagdLadOQ4rGIAePPR3VtO4Na1NO4HbdITS OX6BzdHSnXRDYG72c/BXt1Ye0cg6IM7So+09JQx+PLgrqyI7VgM+4Zt24cjgzHsu 9gwAj8DDyTQNzRcVYbpqmqMuJaUp++uicMekiJC4n+qOywAbB6vtBe6t1PFRwWXn OJnGX/Ly21acm5keQL0rD8zGz8aSMoftGmTJfIMyGoZIr6yerk7C13xTOSdPP8QY BNxKIPFuCdfOsBPxnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:02 2026 by rpki-client