This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer File: 1EggcpoPmr-2ysO1-WwnGY12ORs.cer (raw, json) Hash identifier: xCm6j+7YcNQn23Pk/WIChlxkX5flSF/sLEOMRhiLk0s= Subject key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECBC6FC3D9FCA0ADEB0906BD1E9338 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42228 IP: 45.137.48.0/22 IP: 77.108.128.0/18 IP: 2a00:6300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bc:6f:c3:d9:fc:a0:ad:eb:09:06:bd:1e:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:c0:09:1a:69:e8:f4:82:aa:c0:c0:52:9d: 6e:75:cd:b4:93:5a:26:aa:93:2b:58:24:ab:cd:d8: 80:81:9e:94:8d:ed:7f:23:d4:88:d1:35:ec:58:ec: 31:28:f8:03:55:a1:28:f7:be:cb:14:75:c3:e8:38: 44:8e:07:bc:13:c3:6c:a0:15:39:60:46:a4:42:77: 04:55:24:f3:f7:c6:5e:41:81:8b:ff:13:a9:a0:cc: 16:50:91:4e:07:22:e2:ff:91:a8:f0:da:16:13:68: 03:35:16:b1:23:2c:ad:e3:de:79:36:42:41:4e:9d: ce:93:5e:01:0a:cb:be:94:84:36:05:13:a2:f4:31: 60:3c:28:14:c1:d0:d4:ac:77:cf:d8:da:0c:99:eb: 6a:ca:b1:ea:96:56:1a:36:54:b8:90:33:20:de:c2: 64:a1:06:01:66:98:d8:83:dd:80:32:79:aa:79:4f: 27:9b:0b:8d:2c:87:73:48:17:7c:c4:94:14:7b:e1: dd:55:e4:7c:cb:99:b5:3b:58:80:52:7b:72:c6:b7: be:46:7e:6f:79:77:8e:28:b9:30:0c:9c:ae:af:8b: 61:18:fd:1e:5b:4c:e5:af:a8:51:67:d2:eb:07:5d: ca:e1:ff:0b:39:11:aa:23:af:6e:ae:e2:ac:4b:56: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.48.0/22 77.108.128.0/18 IPv6: 2a00:6300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42228 Signature Algorithm: sha256WithRSAEncryption 1b:e8:1f:99:69:c6:98:96:9a:e9:01:aa:8b:c1:03:2a:1b:17: 05:b0:42:11:08:79:e4:a6:79:e8:a0:f3:b9:ae:79:6f:15:a9: ed:8b:cf:84:bf:75:2e:07:18:0c:fb:dc:5a:92:c8:93:93:e0: 4e:4c:a6:25:3e:d6:1f:22:51:e1:da:6c:6d:6c:41:3c:87:02: cf:4f:63:07:48:03:4f:14:6c:0f:59:80:4c:db:bd:a9:ff:9b: a7:5f:9e:78:f9:7a:ee:33:d7:7d:07:e2:fe:07:91:03:d3:b4: bc:cd:a0:76:96:38:56:08:0f:4d:9f:bd:d8:b5:9c:37:a0:bb: 7b:0f:2e:b8:9c:4b:49:9a:f4:48:c5:ee:23:7d:27:83:d8:63: 70:d8:20:79:bb:30:05:49:1a:0f:ee:03:95:28:b8:d9:16:51: de:78:28:0f:cd:aa:33:0d:56:e7:b8:4c:6e:d1:33:23:47:b6: 21:95:15:22:ae:a2:84:d3:ec:cf:0c:a5:ba:67:cb:f2:93:83: 41:02:a4:4f:e3:41:4a:87:ac:2c:54:77:31:f4:c4:06:fd:60: 99:0e:5e:d2:54:51:ae:26:e8:b5:09:db:d8:da:62:2e:a7:23: 23:13:41:e5:1e:bf:6a:81:8d:35:1f:bd:77:d4:a5:0d:57:bf: 30:1c:30:0b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87Lxvw9n8oK3rCQa9HpM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ4MjA3MjlhMGY5YWJmYjZjYWMzYjVmOTZjMjcxOThkNzYzOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJDACRpp6PSCqsDAUp1udc20k1om qpMrWCSrzdiAgZ6Uje1/I9SI0TXsWOwxKPgDVaEo977LFHXD6DhEjge8E8NsoBU5 YEakQncEVSTz98ZeQYGL/xOpoMwWUJFOByLi/5Go8NoWE2gDNRaxIyyt4955NkJB Tp3Ok14BCsu+lIQ2BROi9DFgPCgUwdDUrHfP2NoMmetqyrHqllYaNlS4kDMg3sJk oQYBZpjYg92AMnmqeU8nmwuNLIdzSBd8xJQUe+HdVeR8y5m1O1iAUntyxre+Rn5v eXeOKLkwDJyur4thGP0eW0zlr6hRZ9LrB13K4f8LORGqI69uruKsS1YReQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNRIIHKaD5q/tsrDtflsJxmNdjkbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzRiYTQ2 Zi0zNDY5LTQyYjAtOWI5ZS02MTk0OTM1NmE5YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNGJhNDZm LTM0NjktNDJiMC05YjllLTYxOTQ5MzU2YTlhMC8xLzFFZ2djcG9QbXItMnlzTzEt V3duR1kxMk9Scy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLYkwAwQGTWyAMA0EAgACMAcDBQAqAGMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCk9DANBgkqhkiG9w0BAQsFAAOCAQEAG+gf mWnGmJaa6QGqi8EDKhsXBbBCEQh55KZ56KDzua55bxWp7YvPhL91LgcYDPvcWpLI k5PgTkymJT7WHyJR4dpsbWxBPIcCz09jB0gDTxRsD1mATNu9qf+bp1+eePl67jPX fQfi/geRA9O0vM2gdpY4VggPTZ+92LWcN6C7ew8uuJxLSZr0SMXuI30ng9hjcNgg ebswBUkaD+4DlSi42RZR3ngoD82qMw1W57hMbtEzI0e2IZUVIq6ihNPszwylumfL 8pODQQKkT+NBSoesLFR3MfTEBv1gmQ5e0lRRribotQnb2NpiLqcjIxNB5R6/aoGN NR+9d9SlDVe/MBwwCw== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:08 2026 by rpki-client