This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer File: e20oQEBEI571gkLyEOCxZmfrQNA.cer (raw, json) Hash identifier: jYsghQbgvBvXr689k7ksXCkkO4SsMBu2wW7IWV1kqds= Subject key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3290B8D6037DE7F954FAFBBD45ADE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.53.0/24 IP: 2001:67c:19fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:0b:8d:60:37:de:7f:95:4f:af:bb:d4:5a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b6d28404044239ef58242f210e0b16667eb40d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:72:3c:63:10:df:c2:0a:db:fd:c9:90:7e: 6d:ad:1e:06:51:78:45:9d:3c:86:00:40:e2:bc:ec: 8b:97:aa:5f:ef:d8:a3:d4:0e:a5:e5:3a:ac:8a:95: 22:2f:a8:80:58:e8:eb:c1:72:07:77:05:34:e9:95: 73:32:f1:08:c2:72:91:c0:cc:f4:cd:35:97:8d:5f: 9e:ef:7a:4e:de:66:52:34:cb:12:05:47:7c:cc:d5: 47:27:be:5a:13:63:be:c8:26:54:10:48:d1:68:3a: 3c:d6:92:d0:41:c0:5a:06:0a:ad:19:93:42:28:6b: 70:b6:48:e9:d7:47:a2:11:68:d7:63:bc:a1:ce:2c: b3:00:6d:d9:24:1d:54:f9:93:dc:a3:0b:bc:24:c5: 22:59:9d:3f:47:01:f0:fc:5b:c2:70:58:06:eb:65: 64:ab:37:27:05:f0:cb:61:41:a2:36:56:63:a2:c7: d6:3a:78:58:5e:70:14:88:d1:63:5b:fb:b7:fb:6f: 47:82:49:bf:57:44:35:87:36:57:87:59:e9:30:52: 5d:d6:bb:a1:d5:38:b2:6f:4d:e5:f6:bb:bd:a2:ef: 0f:d1:83:dd:f5:24:13:ed:16:af:03:11:2e:45:40: 87:fe:4d:43:cb:be:bf:26:ca:ac:97:8b:8f:02:fe: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.53.0/24 IPv6: 2001:67c:19fc::/48 Signature Algorithm: sha256WithRSAEncryption 74:af:c3:8d:d7:0f:7f:f0:09:6f:7c:0c:29:fe:24:43:45:3d: af:9e:2f:f3:ef:45:03:43:15:16:fd:53:b1:7e:a2:e6:e3:a4: 6f:01:68:0e:82:f6:84:41:32:eb:2e:d0:ca:f5:98:e1:2e:90: ae:51:29:74:fa:58:05:a6:a6:a4:d2:ee:f2:43:81:55:2f:90: 1b:21:d8:9b:83:a0:f8:9f:ef:61:7d:55:ec:7b:d3:60:7e:32: ca:b4:7d:c2:f3:35:4f:93:f3:2b:95:5c:5e:a4:6b:85:a7:65: d5:79:84:81:58:7f:67:ac:65:35:95:2b:13:e1:cd:7d:bc:21: a2:4d:f6:50:a1:9a:47:4b:df:82:c6:71:f6:fe:2d:6b:b4:36: 7c:17:cd:2d:0d:8b:55:95:59:47:63:5a:bb:cb:8c:d4:ad:aa: 43:9d:95:85:0a:4e:64:23:fc:f7:9a:66:ff:d3:73:ec:43:3a: 8b:8d:e3:c6:f2:51:96:f7:06:6a:50:19:e7:23:47:d0:28:ba: 4a:74:6b:58:58:34:04:c5:2b:72:3c:55:0d:97:34:08:b0:f9: ec:02:62:35:4a:af:2e:5b:a9:a1:c7:58:65:ed:d4:32:a3:94: 29:21:fa:9a:e8:ed:41:e1:9b:31:d2:dc:56:30:ad:1c:90:0d: 71:41:ba:3a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt4oykLjWA33n+VT6+71FreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjZkMjg0MDQwNDQyMzllZjU4MjQyZjIxMGUwYjE2NjY3ZWI0MGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt9yPGMQ38IK2/3JkH5trR4GUXhF nTyGAEDivOyLl6pf79ij1A6l5TqsipUiL6iAWOjrwXIHdwU06ZVzMvEIwnKRwMz0 zTWXjV+e73pO3mZSNMsSBUd8zNVHJ75aE2O+yCZUEEjRaDo81pLQQcBaBgqtGZNC KGtwtkjp10eiEWjXY7yhziyzAG3ZJB1U+ZPcowu8JMUiWZ0/RwHw/FvCcFgG62Vk qzcnBfDLYUGiNlZjosfWOnhYXnAUiNFjW/u3+29Hgkm/V0Q1hzZXh1npMFJd1ruh 1Tiyb03l9ru9ou8P0YPd9SQT7RavAxEuRUCH/k1Dy76/Jsqsl4uPAv5PSQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFHttKEBARCOe9YJC8hDgsWZn60DQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2MzMjg5 Zi03NmU5LTQ4OTMtOWNkMS1hNjVmYmQ4MzAzNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvYzMyODlm LTc2ZTktNDg5My05Y2QxLWE2NWZiZDgzMDM1OC8xL2UyMG9RRUJFSTU3MWdrTHlF T0N4Wm1mclFOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwQU1MA8EAgACMAkDBwAgAQZ8GfwwDQYJKoZI hvcNAQELBQADggEBAHSvw43XD3/wCW98DCn+JENFPa+eL/PvRQNDFRb9U7F+oubj pG8BaA6C9oRBMusu0Mr1mOEukK5RKXT6WAWmpqTS7vJDgVUvkBsh2JuDoPif72F9 Vex702B+Msq0fcLzNU+T8yuVXF6ka4WnZdV5hIFYf2esZTWVKxPhzX28IaJN9lCh mkdL34LGcfb+LWu0NnwXzS0Ni1WVWUdjWrvLjNStqkOdlYUKTmQj/PeaZv/Tc+xD OouN48byUZb3BmpQGecjR9Aoukp0a1hYNATFK3I8VQ2XNAiw+ewCYjVKry5bqaHH WGXt1DKjlCkh+pro7UHhmzHS3FYwrRyQDXFBujo= -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:00 2026 by rpki-client