This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer File: eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer (raw, json) Hash identifier: xb9SbKHsl4uwQ7Z4tuJ2OoQlzzzB4oHEYxoQD03d2xg= Subject key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6320F665F2A0FA0CBC37E093DB9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205743 IP: 185.208.4.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:63:20:f6:65:f2:a0:fa:0c:bc:37:e0:93:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=794f6b59b439d1769932059d198428cb806ae753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:b8:b7:c3:24:60:2b:ce:1d:51:8c:b4:56: c2:f7:79:8f:8c:50:1c:1b:f5:76:92:a0:9d:fe:f7: 23:0c:69:dc:cb:cf:50:b5:3d:0a:a4:01:1e:82:b1: 32:01:06:ec:73:db:97:fa:6e:df:c2:26:31:13:cd: 1b:7e:a0:8f:57:01:f4:46:65:37:3c:4d:77:f9:47: b8:72:c4:8b:a3:f7:87:2d:53:a2:27:9e:cd:e5:08: c0:62:ad:0a:2b:42:be:af:b9:f4:99:f7:bc:88:e5: fa:49:d1:45:f4:18:79:c0:b2:0e:e4:c4:75:8c:a7: c1:c7:76:01:cb:44:ca:ee:04:a8:53:e2:0b:3e:a7: ce:2d:03:c6:e8:e4:49:ac:19:e2:7b:93:6b:34:cd: 73:3e:ef:db:7f:3a:ce:b1:bd:06:f1:72:63:12:b1: 47:cb:9e:67:06:79:1d:ee:6f:15:99:4e:18:41:b5: bb:b9:82:96:2c:71:f3:bb:22:d6:a3:dd:d5:c5:ff: 29:0f:74:e4:f1:c8:13:13:7d:15:07:d3:8b:68:65: b4:09:57:b2:a9:2a:2b:10:d3:38:7b:9f:1c:c6:f3: 99:81:79:32:cb:33:c5:76:0a:5a:d8:ea:a8:2c:e0: e8:71:90:db:60:e4:6e:cd:19:97:68:7d:d2:66:34: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.4.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205743 Signature Algorithm: sha256WithRSAEncryption 75:7c:15:5a:f1:25:6d:3a:4f:6e:18:48:b7:00:22:40:49:ce: cf:42:b8:d1:42:4e:44:49:6d:90:af:8e:1b:18:20:29:a8:70: 1f:ae:e6:50:e9:44:3a:78:b9:88:44:99:b2:a3:5f:cc:33:1d: e3:03:02:08:4c:59:44:5b:23:92:70:3c:53:46:42:91:00:01: 04:92:05:3e:98:0c:3c:c0:6a:4c:34:0f:46:80:61:3d:61:c0: 0f:ca:5a:4e:a4:24:f9:60:56:da:a1:4a:d2:5a:94:df:24:55: 4e:ba:c9:47:af:4a:63:51:8f:f5:44:56:68:42:8b:60:a0:26: 10:e1:de:f1:b0:5f:2d:85:7d:25:cd:b4:73:28:0f:29:02:b7: 40:2e:18:ed:73:33:85:e9:bb:3d:22:4a:1f:9e:1e:ca:f8:54: 74:cc:1b:6f:8e:5a:95:21:39:0b:61:d9:53:6a:83:c0:1a:e2: bf:5e:de:af:c5:dc:4a:7e:be:ae:ce:87:ba:4f:22:e2:9b:8b: df:3f:bd:e5:89:ac:cf:ae:5a:cb:ed:8a:77:9b:97:02:c5:5f: 9f:4f:f2:3e:65:ca:14:86:49:4f:88:5c:22:57:62:86:d4:f8: 43:d8:b9:39:50:d9:84:d8:fc:2e:35:8e:c8:ab:87:3a:81:ee: e0:ec:32:f2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt262Mg9mXyoPoMvDfgk9ufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTRmNmI1OWI0MzlkMTc2OTkzMjA1OWQxOTg0MjhjYjgwNmFlNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZC4t8MkYCvOHVGMtFbC93mPjFAc G/V2kqCd/vcjDGncy89QtT0KpAEegrEyAQbsc9uX+m7fwiYxE80bfqCPVwH0RmU3 PE13+Ue4csSLo/eHLVOiJ57N5QjAYq0KK0K+r7n0mfe8iOX6SdFF9Bh5wLIO5MR1 jKfBx3YBy0TK7gSoU+ILPqfOLQPG6ORJrBnie5NrNM1zPu/bfzrOsb0G8XJjErFH y55nBnkd7m8VmU4YQbW7uYKWLHHzuyLWo93Vxf8pD3Tk8cgTE30VB9OLaGW0CVey qSorENM4e58cxvOZgXkyyzPFdgpa2OqoLODocZDbYORuzRmXaH3SZjRlBQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHlPa1m0OdF2mTIFnRmEKMuAaudTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzE3ZDBh ZC04MDFjLTQ4MTQtYjg5MS1lMGE2NTIwMDQ4NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMTdkMGFk LTgwMWMtNDgxNC1iODkxLWUwYTY1MjAwNDg3OC8xL2VVOXJXYlE1MFhhWk1nV2RH WVFveTRCcTUxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudAEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjrzANBgkqhkiG9w0BAQsFAAOCAQEAdXwVWvElbTpPbhhItwAiQEnOz0K40UJO REltkK+OGxggKahwH67mUOlEOni5iESZsqNfzDMd4wMCCExZRFsjknA8U0ZCkQAB BJIFPpgMPMBqTDQPRoBhPWHAD8paTqQk+WBW2qFK0lqU3yRVTrrJR69KY1GP9URW aEKLYKAmEOHe8bBfLYV9Jc20cygPKQK3QC4Y7XMzhem7PSJKH54eyvhUdMwbb45a lSE5C2HZU2qDwBriv17er8XcSn6+rs6Huk8i4puL3z+95Ymsz65ay+2Kd5uXAsVf n0/yPmXKFIZJT4hcIldihtT4Q9i5OVDZhNj8LjWOyKuHOoHu4Owy8g== -----END CERTIFICATE-----Generated at Thu Jan 1 14:09:20 2026 by rpki-client