This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer File: 1-eZZ5-721ztobrHSlWxx875bvXc.cer (raw, json) Hash identifier: 5H4LCIEo+UxqjtHfoymyzEPzlCuyLLqVYAJg0GBR1MI= Subject key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE3025557012D9BFC5CA031148931C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15657 IP: 80.81.240.0/20 IP: 95.173.96.0/19 IP: 185.79.208.0/22 IP: 217.13.192.0/20 IP: 2a02:8b8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:30:25:55:70:12:d9:bf:c5:ca:03:11:48:93:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:cc:2b:26:5c:73:a5:a7:d9:6a:a8:aa:f2: 6d:2f:92:07:ea:8d:95:42:5a:d4:4c:35:42:36:6f: 64:9a:0a:23:b3:e8:da:66:a0:2f:2f:85:59:bd:52: 6b:29:59:01:f2:56:76:5a:70:b2:b0:a7:46:1d:67: fb:28:6f:35:5f:1d:b8:fb:5b:7f:8c:74:65:42:39: 2b:de:37:59:ce:2a:90:00:aa:ab:72:21:1e:04:6c: bf:f8:3d:db:f5:41:0f:5f:3c:3a:0d:9c:98:4d:69: a8:ef:77:2f:b5:24:09:e0:de:23:ff:9c:0f:3f:98: 59:78:6e:2d:3a:72:76:ed:53:3f:f4:38:a9:26:1d: 58:0d:45:e5:4b:7b:71:43:45:1a:71:b7:4e:52:cb: 8c:c4:dc:a3:a3:d7:72:3f:c9:f7:29:cc:45:37:d9: f0:71:1a:75:bf:ec:84:28:7f:78:74:80:a9:0f:b2: 55:0d:9d:29:e2:92:f0:77:e9:f4:31:87:56:a1:8b: 1e:40:73:99:de:fa:99:32:a0:b6:9c:19:e1:8d:0c: ad:83:32:bf:f3:cd:b6:cc:e2:79:20:c3:09:5c:b7: 95:f8:4b:24:d5:37:26:8d:30:67:0d:b8:28:88:24: 06:ba:f8:dc:04:de:4f:bc:92:78:dc:0b:e9:0d:f3: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.240.0/20 95.173.96.0/19 185.79.208.0/22 217.13.192.0/20 IPv6: 2a02:8b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15657 Signature Algorithm: sha256WithRSAEncryption 76:87:62:5a:0b:74:e5:fd:dd:d5:a3:bb:a5:56:44:70:ec:02: db:ac:4a:d7:3b:4a:08:4a:8b:2b:b1:c5:a3:48:d1:4a:3e:1e: 59:16:90:35:67:81:44:b0:c1:c2:f5:90:24:e6:41:aa:78:1b: 22:9c:10:c9:70:60:70:0b:0c:b2:c8:76:1a:0f:cd:f9:9f:f1: b4:01:a5:36:54:de:c1:0b:e2:6a:2e:8f:ab:21:5c:b3:2e:42: e0:18:7c:1c:44:83:cc:6d:77:6e:17:09:11:4e:6f:ce:6d:fa: be:13:60:b0:ab:9b:7b:ca:3c:a1:df:5a:55:78:e7:f6:f3:01: ba:fa:f0:09:6e:6c:78:83:4c:8d:8f:10:68:64:3b:65:4b:04: c8:23:f0:d8:98:9c:5b:94:3c:9e:af:78:5b:a0:08:ab:da:33: ce:5f:d4:50:fe:03:a6:53:ba:f1:bf:bf:71:83:66:0b:94:d8: f3:9f:ab:96:f8:ac:68:34:b0:ff:86:19:69:76:3f:c7:50:5b: 31:36:ed:4c:f0:b4:df:ba:fa:f9:99:30:b6:77:d8:c5:60:65: 80:ae:38:35:53:b8:6e:94:5b:6d:5a:80:bc:cd:0f:ae:96:6f: 47:a3:05:25:af:a4:58:fd:64:b4:ca:5e:13:24:31:80:60:50: 5d:3e:62:91 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt87jAlVXAS2b/FygMRSJMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU2NTllN2VlZjZkNzNiNjg2ZWIxZDI5NTZjNzFmM2JlNWJiZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//MKyZcc6Wn2WqoqvJtL5IH6o2V QlrUTDVCNm9kmgojs+jaZqAvL4VZvVJrKVkB8lZ2WnCysKdGHWf7KG81Xx24+1t/ jHRlQjkr3jdZziqQAKqrciEeBGy/+D3b9UEPXzw6DZyYTWmo73cvtSQJ4N4j/5wP P5hZeG4tOnJ27VM/9DipJh1YDUXlS3txQ0UacbdOUsuMxNyjo9dyP8n3KcxFN9nw cRp1v+yEKH94dICpD7JVDZ0p4pLwd+n0MYdWoYseQHOZ3vqZMqC2nBnhjQytgzK/ 8822zOJ5IMMJXLeV+Esk1TcmjTBnDbgoiCQGuvjcBN5PvJJ43AvpDfPf6QIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFPnmWefu9tc7aG6x0pVscfO+W713MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2ZiOGRi NS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0MjEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1 LTExODktNDM1MS1iZGU3LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhT bFd4eDg3NWJ2WGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEF BQcBBwEB/wQxMC8wHgQCAAEwGAMEBFBR8AMEBV+tYAMEArlP0AMEBNkNwDANBAIA AjAHAwUAKgIIuDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI9KTANBgkqhkiG9w0B AQsFAAOCAQEAdodiWgt05f3d1aO7pVZEcOwC26xK1ztKCEqLK7HFo0jRSj4eWRaQ NWeBRLDBwvWQJOZBqngbIpwQyXBgcAsMssh2Gg/N+Z/xtAGlNlTewQviai6PqyFc sy5C4Bh8HESDzG13bhcJEU5vzm36vhNgsKube8o8od9aVXjn9vMBuvrwCW5seINM jY8QaGQ7ZUsEyCPw2JicW5Q8nq94W6AIq9ozzl/UUP4DplO68b+/cYNmC5TY85+r lvisaDSw/4YZaXY/x1BbMTbtTPC037r6+ZkwtnfYxWBlgK44NVO4bpRbbVqAvM0P rpZvR6MFJa+kWP1ktMpeEyQxgGBQXT5ikQ== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:34 2026 by rpki-client