This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer (raw, json) Hash identifier: Fw0We9a3BKEO79PSRvlu6fv0wlaXFOuradbCu0exvaM= Subject key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3888D35099674108F090C447C1678A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.154.148.0/22 IP: 2a14:3b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:88:d3:50:99:67:41:08:f0:90:c4:47:c1:67:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:24:b9:0a:f8:a1:65:ee:be:25:89:75:cb: c4:8b:67:5e:b0:f6:7c:c1:71:78:14:3e:03:e4:c8: f5:07:8e:29:cb:44:0e:e0:28:e3:6f:e5:2d:d5:39: 5f:df:a2:db:ed:cd:17:09:2e:25:ad:80:9e:8d:3c: 38:11:96:1c:47:11:85:c6:15:bb:cd:95:f4:ef:d2: f3:d3:1d:85:7e:ee:77:87:be:9d:0d:e3:46:7f:04: 88:41:2e:2d:b3:db:7e:7a:fa:d6:39:e8:50:f5:ed: c3:8c:05:77:23:91:9d:e5:af:a7:c3:d3:c9:43:3c: 84:2c:23:4f:17:8b:34:9e:55:28:5e:73:cc:4c:c5: 74:f8:a5:14:8e:8f:18:c7:ee:88:81:e6:91:eb:65: ee:62:93:f1:ce:29:2f:c9:a1:cd:91:94:e4:0c:99: 7e:99:e5:c2:7b:4a:a8:df:f6:f6:85:29:b8:05:76: f7:c7:3b:05:47:be:e6:50:be:9f:6c:d0:76:9a:a2: ae:98:8f:e0:69:47:f2:78:3a:b2:b5:67:a0:81:73: 0d:c3:6b:ea:dd:8d:e4:66:5b:5c:8d:05:03:83:84: 24:24:a2:df:32:33:2d:fc:1e:e0:59:2b:8f:04:36: 53:e4:95:fa:aa:c3:cc:e7:f7:03:31:b2:80:5b:e0: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.148.0/22 IPv6: 2a14:3b00::/29 Signature Algorithm: sha256WithRSAEncryption 89:16:59:c9:0c:c5:88:74:42:37:64:8d:d5:eb:da:04:25:4d: 89:14:8c:8a:b4:82:20:a3:f4:89:cc:dc:88:0b:a8:6f:f6:fe: 40:f7:bc:91:bc:68:e2:47:7e:91:9a:30:74:ba:42:48:6d:d3: 5f:c6:ee:08:15:9c:cf:7b:b3:40:6f:a2:bb:1b:7b:cf:68:a2: c4:f9:12:e5:d5:a5:ae:2a:72:a6:d9:01:45:ab:e1:c7:05:00: 82:30:4a:79:9d:73:c3:cc:c0:cc:4c:3c:5a:40:1a:88:65:70: 90:da:16:7c:1e:05:66:5e:ef:9d:15:d2:aa:ac:83:99:3c:a0: 24:e8:31:12:83:27:5b:6f:83:c6:2b:fb:2e:f0:59:b9:63:70: 03:c9:fd:1d:fb:09:70:bb:ef:25:8c:38:7c:21:ac:ed:55:07: 13:f8:fe:da:93:61:17:e4:46:65:b6:38:b0:eb:61:b0:fd:b3: f6:33:b7:a1:14:52:ef:a5:25:9b:6e:9a:d4:04:ea:96:b3:c2: af:2d:86:9e:5d:9e:4f:aa:b4:94:b8:e7:6b:bf:d0:64:29:36: 70:8e:43:18:2b:ff:7d:43:83:db:3d:b2:f4:06:33:bd:fa:16: 8c:22:52:11:82:f1:f9:72:ee:a0:ea:af:03:18:b0:66:a3:cb: 7d:b8:5b:b5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OIjTUJlnQQjwkMRHwWeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTkxYjM0MTUzZGEwZDVkMTIxY2ZmNDMyNTlmY2Q5ZTNkYmZjN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBkkuQr4oWXuviWJdcvEi2desPZ8 wXF4FD4D5Mj1B44py0QO4Cjjb+Ut1Tlf36Lb7c0XCS4lrYCejTw4EZYcRxGFxhW7 zZX079Lz0x2Ffu53h76dDeNGfwSIQS4ts9t+evrWOehQ9e3DjAV3I5Gd5a+nw9PJ QzyELCNPF4s0nlUoXnPMTMV0+KUUjo8Yx+6IgeaR62XuYpPxzikvyaHNkZTkDJl+ meXCe0qo3/b2hSm4BXb3xzsFR77mUL6fbNB2mqKumI/gaUfyeDqytWeggXMNw2vq 3Y3kZltcjQUDg4QkJKLfMjMt/B7gWSuPBDZT5JX6qsPM5/cDMbKAW+BmGwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHqRs0FT2g1dEhz/QyWfzZ49v8fUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzUzZjY1 Mi0wMWIxLTQyZjItODVlOS00ZGNiMjNmZGIwNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNTNmNjUy LTAxYjEtNDJmMi04NWU5LTRkY2IyM2ZkYjA2YS8xL2VwR3pRVlBhRFYwU0hQOURK Wl9ObmoyX3g5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZqUMA0EAgACMAcDBQMqFDsAMA0GCSqGSIb3 DQEBCwUAA4IBAQCJFlnJDMWIdEI3ZI3V69oEJU2JFIyKtIIgo/SJzNyIC6hv9v5A 97yRvGjiR36RmjB0ukJIbdNfxu4IFZzPe7NAb6K7G3vPaKLE+RLl1aWuKnKm2QFF q+HHBQCCMEp5nXPDzMDMTDxaQBqIZXCQ2hZ8HgVmXu+dFdKqrIOZPKAk6DESgydb b4PGK/su8Fm5Y3ADyf0d+wlwu+8ljDh8IaztVQcT+P7ak2EX5EZltjiw62Gw/bP2 M7ehFFLvpSWbbprUBOqWs8KvLYaeXZ5PqrSUuOdrv9BkKTZwjkMYK/99Q4PbPbL0 BjO9+haMIlIRgvH5cu6g6q8DGLBmo8t9uFu1 -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:16 2026 by rpki-client