This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer File: en7OlN5d9qGjTJjsZtPZaOWymyE.cer (raw, json) Hash identifier: 9HVaNWLy2e4H8Rg8MS3SdvJIEuFMSVttdLApdRWkDsI= Subject key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3742926AE94084B6B82AB84FE2B752 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.147.141.0/24 IP: 2001:67c:5dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:42:92:6a:e9:40:84:b6:b8:2a:b8:4f:e2:b7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:e5:ea:06:bc:fb:80:9d:02:3e:b8:29:ce: 62:79:0a:08:bf:d3:c9:56:13:06:1b:0c:eb:29:a1: da:da:d7:44:fe:1b:f1:9a:dd:2b:75:27:2f:57:e4: 28:db:ad:81:2a:dd:84:94:e4:a1:10:5a:16:0b:62: 88:64:1d:ec:74:3b:13:7f:02:54:01:a8:60:a6:9b: fa:b5:f5:53:0b:99:d9:df:c2:76:5b:f5:82:30:ef: fa:f0:06:90:12:ac:83:65:6c:a6:c1:21:9a:99:3f: 6c:55:de:d7:cd:a5:c9:0c:70:a4:7d:78:49:c5:f0: 08:ea:a0:f7:40:e2:31:2c:59:ab:3c:d6:26:31:40: 0f:ce:69:e7:db:24:c3:9b:0e:dc:ca:a8:3e:a0:92: 3a:6a:49:2f:0d:88:d8:cf:0f:da:41:51:a1:73:f3: 03:03:0a:b4:54:78:20:b9:e2:a1:cc:15:99:fa:ca: 1e:bb:01:33:55:26:1a:19:e1:71:67:82:fd:fe:94: 66:30:7c:74:d1:30:82:29:a1:3b:05:6c:44:32:e3: 6b:07:b0:80:39:5c:16:aa:fa:c4:c8:8e:5c:e5:f0: fc:14:ec:e7:47:11:6d:aa:b1:47:2e:8a:21:bd:f9: 9c:91:74:03:01:fa:09:8c:df:d6:bd:76:a7:a0:f2: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.141.0/24 IPv6: 2001:67c:5dc::/48 Signature Algorithm: sha256WithRSAEncryption 1f:4c:b0:d5:4e:56:8b:c1:fe:f0:02:78:23:0c:5e:0b:2a:47: d2:27:be:dd:08:35:c2:e6:8e:69:1a:85:76:fd:45:36:05:44: 93:6c:64:a7:43:da:94:48:39:89:df:7b:2e:e8:e5:2b:79:86: 67:65:a0:bd:e8:5c:0c:d0:89:4f:85:a4:36:c5:c8:b9:e7:49: 08:c1:c1:cb:cb:b0:f5:54:24:e6:fa:21:db:fe:79:f0:07:8b: ee:46:b3:44:3b:c6:90:50:71:44:06:29:c9:c5:7f:e9:50:97: 7a:40:5c:1b:be:e4:12:3a:0e:4e:ca:4d:7b:a3:ee:0d:5a:29: d5:b2:cd:64:4b:b9:a4:f6:a0:f2:2d:81:91:66:2c:38:14:f7: 06:f1:b8:e8:55:c4:14:0b:c9:b5:4c:ae:3f:d3:46:a9:97:6e: ed:53:c8:bd:9a:2e:59:cb:c8:2a:4e:2e:71:7b:ea:f0:13:50: f6:75:ca:8c:94:49:e0:41:b2:49:25:4a:d9:0e:24:36:b6:d3: f8:bd:11:eb:52:23:65:9a:0d:e4:0d:12:7e:94:82:c4:52:96: c4:6c:fa:f0:53:20:e9:44:4e:3c:e6:5c:8d:f2:dc:d6:86:08: 69:60:31:28:89:6a:e0:27:47:ad:fa:e5:77:19:1d:83:13:5d: b9:1b:7b:3d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt+N0KSaulAhLa4KrhP4rdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTdlY2U5NGRlNWRmNmExYTM0Yzk4ZWM2NmQzZDk2OGU1YjI5YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Pl6ga8+4CdAj64Kc5ieQoIv9PJ VhMGGwzrKaHa2tdE/hvxmt0rdScvV+Qo262BKt2ElOShEFoWC2KIZB3sdDsTfwJU Aahgppv6tfVTC5nZ38J2W/WCMO/68AaQEqyDZWymwSGamT9sVd7XzaXJDHCkfXhJ xfAI6qD3QOIxLFmrPNYmMUAPzmnn2yTDmw7cyqg+oJI6akkvDYjYzw/aQVGhc/MD Awq0VHggueKhzBWZ+soeuwEzVSYaGeFxZ4L9/pRmMHx00TCCKaE7BWxEMuNrB7CA OVwWqvrEyI5c5fD8FOznRxFtqrFHLoohvfmckXQDAfoJjN/WvXanoPIueQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFHp+zpTeXfaho0yY7GbT2WjlspshMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2JmNGU4 OC0wMDU4LTRkZjgtOTk5YS1mYWU1ZmU5MDBjYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvYmY0ZTg4 LTAwNTgtNGRmOC05OTlhLWZhZTVmZTkwMGNiZC8xL2VuN09sTjVkOXFHalRKanNa dFBaYU9XeW15RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwpONMA8EAgACMAkDBwAgAQZ8BdwwDQYJKoZI hvcNAQELBQADggEBAB9MsNVOVovB/vACeCMMXgsqR9Invt0INcLmjmkahXb9RTYF RJNsZKdD2pRIOYnfey7o5St5hmdloL3oXAzQiU+FpDbFyLnnSQjBwcvLsPVUJOb6 Idv+efAHi+5Gs0Q7xpBQcUQGKcnFf+lQl3pAXBu+5BI6Dk7KTXuj7g1aKdWyzWRL uaT2oPItgZFmLDgU9wbxuOhVxBQLybVMrj/TRqmXbu1TyL2aLlnLyCpOLnF76vAT UPZ1yoyUSeBBskklStkOJDa20/i9EetSI2WaDeQNEn6UgsRSlsRs+vBTIOlETjzm XI3y3NaGCGlgMSiJauAnR6365XcZHYMTXbkbez0= -----END CERTIFICATE-----Generated at Sun Jan 11 14:33:57 2026 by rpki-client