This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_e2YOSoOie4TAG4eEYUFtBlMKI.cer File: e_e2YOSoOie4TAG4eEYUFtBlMKI.cer (raw, json) Hash identifier: ENVm3IhBYTc3twqtPZb8Xo41g9WCLCA/yOLkBU7+cVY= Subject key identifier: 7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB15164DDA901587A93EC95B5E82F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.243.232.0/22 IP: 2a14:c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b1:51:64:dd:a9:01:58:7a:93:ec:95:b5:e8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bf7b660e4a83a27b84c01b878461416d06530a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:d9:ad:59:bd:5d:b3:50:41:a5:52:24:af: 39:bb:1f:81:f9:7d:93:b3:20:a8:f7:42:2f:6a:1e: dd:ba:db:d7:c5:14:23:77:68:30:20:15:19:21:e3: 1b:39:0f:0b:a7:3f:40:c9:c0:40:67:8f:35:0a:b2: ac:06:f7:97:5c:0b:e8:8b:8b:65:b2:ba:76:ff:19: 1b:46:8b:ba:70:1c:7b:37:cd:a0:c8:30:c9:9d:ee: 01:e0:51:ee:b8:5e:50:27:1f:29:15:2f:2b:e9:b3: 79:39:ff:d2:32:96:af:85:ea:8e:c1:c7:5a:d4:d2: 79:22:64:b9:7c:1c:b7:69:11:e1:ec:25:da:78:7f: 77:1e:47:ee:11:0d:02:52:44:8a:ca:dd:81:81:b1: a7:7a:74:b7:cb:e3:36:bd:73:9b:d4:1f:02:6e:d6: dc:2f:0c:b8:eb:62:86:2d:7f:ac:95:ed:02:86:20: a6:b2:95:fd:6a:8b:59:8d:e1:45:3c:2c:01:02:25: 0d:d3:f9:55:1b:94:83:c8:98:18:07:b1:08:73:31: a9:1b:6b:71:32:9e:80:49:8c:8f:38:da:c8:37:c2: 4c:1d:9b:2d:b3:09:76:f6:75:87:22:9f:ec:21:76: cc:ad:f7:5e:d6:55:4a:d5:f8:5f:c8:54:6c:a9:3c: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.232.0/22 IPv6: 2a14:c40::/29 Signature Algorithm: sha256WithRSAEncryption 5f:2b:84:a3:31:79:75:20:95:7b:e5:ba:db:10:6d:21:71:34: 0a:fa:63:f8:1e:d3:06:3f:ad:bf:06:8f:d6:70:4b:2a:ef:4a: a1:89:f6:38:16:c2:64:94:b5:05:0a:c5:f9:4f:06:e5:58:38: 34:d3:37:99:84:6c:a4:25:22:ad:ed:cb:4e:20:8e:44:84:db: d2:2c:3c:4b:2d:75:bb:f4:28:14:cd:fc:be:9e:b8:18:e5:b4: 8a:ef:d2:cf:ea:34:90:a1:96:c4:a3:f3:66:96:b2:8e:78:dd: 6e:1c:04:b9:c4:8e:c9:2f:ca:59:f9:b9:f2:38:16:f0:7a:f7: de:b0:c6:af:d4:47:95:b5:99:b7:7a:1e:34:ed:68:d7:a5:27: 1f:61:b9:21:19:93:cf:6f:54:7c:6c:bb:76:bd:ff:44:5a:85: 83:0c:cb:00:86:b4:c1:1e:5c:b3:3b:ab:52:73:70:6b:6d:ed: cb:fb:0c:8e:6f:e6:e2:6a:21:1f:3a:d1:45:6c:8e:69:db:22: ff:b4:bb:17:3f:db:13:c0:5d:04:41:de:b5:96:4f:15:d9:96: 28:e3:e9:c4:46:04:b7:21:41:ca:33:69:6f:aa:51:ec:9c:f5: 8d:17:84:5c:f4:33:21:11:9d:f2:17:0f:7b:18:c9:a0:90:eb: 20:eb:72:2a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26rFRZN2pAVh6k+yVtegvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmY3YjY2MGU0YTgzYTI3Yjg0YzAxYjg3ODQ2MTQxNmQwNjUzMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ7ZrVm9XbNQQaVSJK85ux+B+X2T syCo90Ivah7dutvXxRQjd2gwIBUZIeMbOQ8Lpz9AycBAZ481CrKsBveXXAvoi4tl srp2/xkbRou6cBx7N82gyDDJne4B4FHuuF5QJx8pFS8r6bN5Of/SMpavheqOwcda 1NJ5ImS5fBy3aRHh7CXaeH93HkfuEQ0CUkSKyt2BgbGnenS3y+M2vXOb1B8Cbtbc Lwy462KGLX+sle0ChiCmspX9aotZjeFFPCwBAiUN0/lVG5SDyJgYB7EIczGpG2tx Mp6ASYyPONrIN8JMHZstswl29nWHIp/sIXbMrfde1lVK1fhfyFRsqTzCvQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHv3tmDkqDonuEwBuHhGFBbQZTCiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzJiNzdj NS00MDgzLTRlODYtYjQ3ZS0zMDJmNzY5NGJjYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMmI3N2M1 LTQwODMtNGU4Ni1iNDdlLTMwMmY3Njk0YmNiNi8xL2VfZTJZT1NvT2llNFRBRzRl RVlVRnRCbE1LSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufPoMA0EAgACMAcDBQMqFAxAMA0GCSqGSIb3 DQEBCwUAA4IBAQBfK4SjMXl1IJV75brbEG0hcTQK+mP4HtMGP62/Bo/WcEsq70qh ifY4FsJklLUFCsX5TwblWDg00zeZhGykJSKt7ctOII5EhNvSLDxLLXW79CgUzfy+ nrgY5bSK79LP6jSQoZbEo/NmlrKOeN1uHAS5xI7JL8pZ+bnyOBbwevfesMav1EeV tZm3eh407WjXpScfYbkhGZPPb1R8bLt2vf9EWoWDDMsAhrTBHlyzO6tSc3Brbe3L +wyOb+biaiEfOtFFbI5p2yL/tLsXP9sTwF0EQd61lk8V2ZYo4+nERgS3IUHKM2lv qlHsnPWNF4Rc9DMhEZ3yFw97GMmgkOsg63Iq -----END CERTIFICATE-----Generated at Thu Jan 1 07:22:14 2026 by rpki-client