This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer File: e0fNwhx8siRnTA6v3sY6ID7uMQg.cer (raw, json) Hash identifier: XPvcs4xynvOe3JZ/jymi2XcbMRHgyxIrKdTbNC6xMxo= Subject key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5561C9F480F6AA88FC14EAE3BD200 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207421 IP: 94.231.214.0/24 IP: 2a10:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:56:1c:9f:48:0f:6a:a8:8f:c1:4e:ae:3b:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:da:93:10:82:b1:78:51:c0:ea:7a:d9:05: 16:1f:d6:e3:d3:3c:2a:e6:42:77:35:c1:89:3c:4a: 0b:e4:d1:c2:3a:7c:77:99:6b:de:4e:63:0f:78:2c: 71:2f:ee:1d:c0:a5:20:35:b5:f0:44:02:55:fa:0f: 34:43:3e:d6:34:cc:29:10:12:66:ae:48:b9:ce:84: 8b:0c:fa:1f:1d:16:4e:9a:fe:5f:07:ea:64:e4:18: f5:91:97:2f:81:c7:8b:ee:f0:24:db:ab:e7:e0:62: b4:6f:3a:08:f5:3b:db:45:66:8f:e8:2d:fd:f4:17: a0:1a:da:f6:72:26:5b:62:e5:05:93:e1:4e:25:d9: be:96:6f:c4:36:47:51:4d:14:b7:0d:c3:04:8c:08: 4d:93:a0:9c:1f:6e:1f:54:c0:5a:dd:4d:48:7a:2f: a0:0b:e3:1d:e1:4c:6b:e2:b9:ae:9b:b7:10:5d:37: 12:f4:b9:43:b2:ee:99:b9:4e:1a:eb:aa:bb:63:3c: f3:c3:6f:2e:ee:32:20:8d:67:0b:a0:73:61:40:75: 51:e7:7b:ed:b3:62:e2:44:dd:ff:ee:8f:61:13:38: a4:51:a0:f5:b3:80:31:7a:fa:19:d0:9f:44:ec:d7: 24:a6:1d:47:2b:b6:75:5a:4e:2f:4a:6f:de:b0:b7: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.214.0/24 IPv6: 2a10:b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207421 Signature Algorithm: sha256WithRSAEncryption 6b:d8:77:29:b9:6b:01:82:bd:28:99:b7:70:9d:f6:bb:3a:ee: 71:46:6b:e5:0b:7f:16:1f:69:4c:32:4b:ca:9a:69:29:c3:31: 7b:8d:6b:2b:76:be:24:b9:3e:da:ec:e2:0f:11:83:fd:eb:b7: e6:0e:b3:23:94:76:6a:1f:4b:82:73:00:ab:a0:7f:73:51:91: 2e:e2:bf:21:ba:53:d3:f8:1e:f6:53:e0:1d:ee:37:8a:b8:bd: d6:31:43:43:2c:17:88:a2:0e:25:03:2c:ec:54:64:90:13:52: 61:c0:aa:15:d6:5f:28:ac:ee:4b:b9:68:49:3a:b1:c3:72:20: 32:08:b3:9e:fe:b9:36:8e:98:3d:ea:fe:2b:76:99:5a:9a:b4: 5f:b3:bd:a1:3c:17:08:c9:97:a0:1b:ca:f7:fc:5a:68:cf:90: 11:59:18:4b:7c:29:2c:3c:c6:71:7d:2d:1d:8a:fa:6b:b1:b3: 5c:ee:d5:03:b1:29:1a:5c:9f:30:eb:b2:57:14:96:75:c7:1f: 5e:91:61:dc:24:c0:f2:2c:52:7f:b0:1a:63:e4:ef:bc:ed:71: 94:32:35:0b:95:8f:9d:ba:55:37:9d:82:96:d2:db:13:86:20: 27:bd:54:46:a5:88:93:47:5c:72:0c:ae:9a:28:6f:92:2d:76: c4:d9:da:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pVYcn0gPaqiPwU6uO9IAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQ3Y2RjMjFjN2NiMjI0Njc0YzBlYWZkZWM2M2EyMDNlZWUzMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNjakxCCsXhRwOp62QUWH9bj0zwq 5kJ3NcGJPEoL5NHCOnx3mWveTmMPeCxxL+4dwKUgNbXwRAJV+g80Qz7WNMwpEBJm rki5zoSLDPofHRZOmv5fB+pk5Bj1kZcvgceL7vAk26vn4GK0bzoI9TvbRWaP6C39 9BegGtr2ciZbYuUFk+FOJdm+lm/ENkdRTRS3DcMEjAhNk6CcH24fVMBa3U1Iei+g C+Md4Uxr4rmum7cQXTcS9LlDsu6ZuU4a66q7Yzzzw28u7jIgjWcLoHNhQHVR53vt s2LiRN3/7o9hEzikUaD1s4AxevoZ0J9E7Nckph1HK7Z1Wk4vSm/esLdjPwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHtHzcIcfLIkZ0wOr97GOiA+7jEIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzliMjk1 My0xM2I4LTQ3MDYtODFjNC0wNzU1NzhjMzdhY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOWIyOTUz LTEzYjgtNDcwNi04MWM0LTA3NTU3OGMzN2FjYS8xL2UwZk53aHg4c2lSblRBNnYz c1k2SUQ3dU1RZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXufWMA0EAgACMAcDBQMqEAsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqPTANBgkqhkiG9w0BAQsFAAOCAQEAa9h3KblrAYK9 KJm3cJ32uzrucUZr5Qt/Fh9pTDJLypppKcMxe41rK3a+JLk+2uziDxGD/eu35g6z I5R2ah9LgnMAq6B/c1GRLuK/IbpT0/ge9lPgHe43iri91jFDQywXiKIOJQMs7FRk kBNSYcCqFdZfKKzuS7loSTqxw3IgMgiznv65No6YPer+K3aZWpq0X7O9oTwXCMmX oBvK9/xaaM+QEVkYS3wpLDzGcX0tHYr6a7GzXO7VA7EpGlyfMOuyVxSWdccfXpFh 3CTA8ixSf7AaY+TvvO1xlDI1C5WPnbpVN52CltLbE4YgJ71URqWIk0dccgyumihv ki12xNnaRw== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:35 2026 by rpki-client