This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer File: egoGVk08cX0tbaoegzxJWXawuto.cer (raw, json) Hash identifier: ZKwYiihQaYXMnVDLZ51XqGQkEIakFAVtI8BYlbtt3zs= Subject key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35E347B157D780006D3F2F34DD0A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 149.249.0.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5e:34:7b:15:7d:78:00:06:d3:f2:f3:4d:d0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:6c:2a:70:8a:6e:44:2c:dc:0b:b6:a4:43: d6:82:68:47:c6:81:67:2a:bb:f2:af:77:ac:8e:44: 0d:dd:3d:98:2e:76:3c:c8:8c:a7:c3:16:21:9f:02: b1:9d:38:65:7a:19:4a:11:65:28:f3:bb:86:f2:00: 04:5e:f2:00:e8:2b:39:d8:6c:1b:2d:e8:e9:29:e5: 66:43:07:e0:81:80:72:cd:0a:30:da:fa:ad:4c:14: e6:bf:38:a6:60:bd:14:46:55:35:eb:ef:a4:da:9e: 13:b1:02:15:db:2a:f6:3e:a1:7e:04:93:41:f1:99: 14:ab:07:f1:1a:ec:c1:4d:b7:13:6a:ce:0e:5a:0b: 9f:76:6e:54:26:9e:b2:b1:ca:52:4e:4f:b6:19:c4: 45:fe:12:f9:c9:0e:ca:b3:23:80:3d:5a:12:0c:e8: f0:af:4b:29:35:46:62:52:80:6f:de:f2:8b:f7:bf: c0:30:8f:8d:7c:35:5e:b7:76:1e:42:57:34:b6:f5: e2:15:27:f8:08:c5:14:f8:e5:cd:cb:43:84:dc:0e: 99:b4:16:bb:3d:40:0a:be:87:8c:2b:02:18:f1:43: 13:a9:0c:56:31:ff:50:9e:da:f9:d5:2a:b5:6c:c1: cc:4c:52:5e:31:79:e8:48:7a:0c:de:fa:0b:f7:bb: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.0.0/21 Signature Algorithm: sha256WithRSAEncryption ab:a9:d4:42:e1:b8:75:96:4c:22:13:6d:d1:3d:db:fb:db:35: 4d:f5:8d:44:34:aa:48:fb:fd:98:10:79:e6:b7:5f:58:90:46: 25:d5:11:ca:c7:32:f4:b6:4a:82:fa:bb:fb:51:d8:af:ba:74: 4c:02:a5:82:e0:2a:0a:a7:e9:8a:57:73:f2:65:4a:c2:07:7a: e5:b5:18:11:ce:6a:79:c5:b7:5a:fc:a3:c4:46:bf:38:10:62: 78:2b:0d:b1:05:85:91:15:cf:71:fc:14:31:0d:86:3c:eb:56: be:ac:3d:b4:c5:44:9c:62:35:2b:7e:1d:20:b2:34:b5:c5:ef: 6e:0a:90:7d:86:81:62:06:0d:5a:57:17:3c:09:f6:f0:2c:57: 38:b8:75:ba:b7:05:33:09:0b:91:2b:33:b4:51:37:d8:41:72: 01:35:cc:8c:ea:7b:ba:5f:65:31:66:ac:e2:2a:f6:6b:e0:a2: 56:da:33:40:ea:ec:dc:f9:60:7f:13:ba:4c:ff:3a:d7:5f:b6: 9a:00:14:a2:50:f0:39:ef:bd:a7:68:da:b2:50:5b:a0:1e:b5: 56:58:b6:35:00:2a:a1:f7:e8:f8:be:f8:96:94:60:83:c1:82: 81:0b:f9:11:20:e5:d4:c3:b1:0d:20:86:c8:45:93:3e:29:9d: dd:75:18:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o140exV9eAAG0/LzTdClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBhMDY1NjRkM2M3MTdkMmQ2ZGFhMWU4MzNjNDk1OTc2YjBiYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwixsKnCKbkQs3Au2pEPWgmhHxoFn Krvyr3esjkQN3T2YLnY8yIynwxYhnwKxnThlehlKEWUo87uG8gAEXvIA6Cs52Gwb LejpKeVmQwfggYByzQow2vqtTBTmvzimYL0URlU16++k2p4TsQIV2yr2PqF+BJNB 8ZkUqwfxGuzBTbcTas4OWgufdm5UJp6yscpSTk+2GcRF/hL5yQ7KsyOAPVoSDOjw r0spNUZiUoBv3vKL97/AMI+NfDVet3YeQlc0tvXiFSf4CMUU+OXNy0OE3A6ZtBa7 PUAKvoeMKwIY8UMTqQxWMf9Qntr51Sq1bMHMTFJeMXnoSHoM3voL97t5OwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHoKBlZNPHF9LW2qHoM8SVl2sLraMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzZmNTk4 ZC1hNWM1LTRjOTktYTFmMC01NDgyNjNlYjZmYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNmY1OThk LWE1YzUtNGM5OS1hMWYwLTU0ODI2M2ViNmZiNC8xL2Vnb0dWazA4Y1gwdGJhb2Vn enhKV1hhd3V0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDlfkAMA0GCSqGSIb3DQEBCwUAA4IBAQCrqdRC 4bh1lkwiE23RPdv72zVN9Y1ENKpI+/2YEHnmt19YkEYl1RHKxzL0tkqC+rv7Udiv unRMAqWC4CoKp+mKV3PyZUrCB3rltRgRzmp5xbda/KPERr84EGJ4Kw2xBYWRFc9x /BQxDYY861a+rD20xUScYjUrfh0gsjS1xe9uCpB9hoFiBg1aVxc8CfbwLFc4uHW6 twUzCQuRKzO0UTfYQXIBNcyM6nu6X2UxZqziKvZr4KJW2jNA6uzc+WB/E7pM/zrX X7aaABSiUPA5772naNqyUFugHrVWWLY1ACqh9+j4vviWlGCDwYKBC/kRIOXUw7EN IIbIRZM+KZ3ddRjc -----END CERTIFICATE-----Generated at Fri Jan 9 07:46:03 2026 by rpki-client