This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer File: esYj77_BJHEhYiQMugKk2h1NzqM.cer (raw, json) Hash identifier: B2JdZ+OFAPOzFZdCi9aq/sVtSsl+QstUX+GK196cv7k= Subject key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387A301DB8D7325C46C3A1EB484BF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212661 IP: 45.95.244.0/22 IP: 45.131.140.0/22 IP: 45.140.104.0/22 IP: 45.148.200.0/22 IP: 185.123.148.0/22 IP: 185.143.64.0/22 IP: 193.3.37.0/24 IP: 212.146.160.0/19 IP: 2a06:dac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7a:30:1d:b8:d7:32:5c:46:c3:a1:eb:48:4b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ac623efbfc124712162240cba02a4da1d4dcea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:1b:68:1c:5b:8d:19:e6:f0:6d:05:0e:27: 09:2a:30:10:c1:65:62:74:a7:78:07:dd:3f:d4:d4: 8d:1e:59:ab:a7:53:a3:06:cc:bd:c3:9f:72:dd:dd: 28:bd:48:d7:0b:ce:8f:0d:0b:e8:d0:5a:32:b5:e5: 54:51:d8:7c:2c:9f:c7:c2:64:8b:1d:16:f6:f5:be: 9d:92:6e:f6:7b:e1:86:19:27:12:4e:e4:e7:a3:08: 91:95:a1:f5:d0:52:70:b5:b6:89:4b:fc:45:25:4f: 5a:78:ec:8b:98:e2:ab:86:d6:8a:5c:65:41:76:a7: e7:67:3f:f3:e8:80:07:cc:82:d8:ce:cd:2d:cf:ea: d6:2c:05:a4:1a:1e:8f:ef:ac:9a:fc:fd:9a:d7:7d: 10:a6:a1:0e:60:9d:47:fe:f1:6e:de:ff:56:57:5a: 54:d2:1e:51:aa:47:bf:45:27:1f:22:fb:53:ee:51: 10:0c:a0:ce:45:a6:3c:f0:b3:38:a9:82:93:08:ff: 09:61:64:bc:ae:3a:ca:09:e2:af:e6:84:33:f4:ec: 6f:ad:f0:12:cf:c9:62:f7:32:21:40:ac:83:a4:d8: 69:e8:70:7b:0b:07:43:08:34:a3:9c:6b:59:b9:ab: c5:14:f5:e0:5f:78:7c:e7:53:12:54:b6:74:1e:50: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.244.0/22 45.131.140.0/22 45.140.104.0/22 45.148.200.0/22 185.123.148.0/22 185.143.64.0/22 193.3.37.0/24 212.146.160.0/19 IPv6: 2a06:dac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212661 Signature Algorithm: sha256WithRSAEncryption 88:dc:b8:96:9a:56:3f:38:91:44:97:19:45:0d:18:b6:3a:80: 71:2f:ff:5a:db:a4:cd:87:2b:8a:c9:e4:4e:54:f4:6d:ce:33: b5:26:ba:4c:b4:13:ba:29:6f:26:bb:4f:ed:c2:3b:fe:39:60: e4:ca:8b:2e:16:53:0b:ad:63:97:2a:c9:1e:2a:d4:d0:0e:7a: 38:7f:50:46:58:03:8e:6c:d5:10:d3:74:b8:9b:92:70:de:75: 31:43:cf:41:e8:dd:90:2a:6f:36:2e:9b:1c:44:d4:36:9c:ba: 10:d3:a0:9c:7b:48:51:a5:c9:a8:ad:4c:3c:1f:35:8e:07:4a: 8c:90:2c:1e:9a:68:82:2d:e6:1d:1e:18:b5:d5:2d:d3:b9:88: 3c:b5:f0:c4:63:69:4d:b4:5b:f2:99:0a:18:0b:64:65:7c:41: 5a:a9:ba:75:e0:55:74:43:bf:2e:8f:ce:cc:d8:93:8b:14:b1: a7:88:e9:88:7c:d6:02:51:00:bb:95:bb:e0:ce:ae:54:22:a3: 2a:0e:1c:7e:5e:ab:fc:7c:ef:48:1e:ae:9d:43:9e:0e:46:b1: 87:0b:47:41:c3:b5:94:92:ae:56:9f:da:0b:05:31:28:04:f4: b2:8d:be:67:53:72:52:51:1a:aa:76:c7:9a:b8:f7:e9:72:6d: 11:35:48:70 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt+OHowHbjXMlxGw6HrSEv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWM2MjNlZmJmYzEyNDcxMjE2MjI0MGNiYTAyYTRkYTFkNGRjZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AMbaBxbjRnm8G0FDicJKjAQwWVi dKd4B90/1NSNHlmrp1OjBsy9w59y3d0ovUjXC86PDQvo0FoyteVUUdh8LJ/HwmSL HRb29b6dkm72e+GGGScSTuTnowiRlaH10FJwtbaJS/xFJU9aeOyLmOKrhtaKXGVB dqfnZz/z6IAHzILYzs0tz+rWLAWkGh6P76ya/P2a130QpqEOYJ1H/vFu3v9WV1pU 0h5Rqke/RScfIvtT7lEQDKDORaY88LM4qYKTCP8JYWS8rjrKCeKv5oQz9OxvrfAS z8li9zIhQKyDpNhp6HB7CwdDCDSjnGtZuavFFPXgX3h851MSVLZ0HlCnbQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFHrGI++/wSRxIWIkDLoCpNodTc6jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2M3NGE0 Zi00MDUyLTRjOWItYTdmOC00M2FhNGNjZTNmNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYzc0YTRm LTQwNTItNGM5Yi1hN2Y4LTQzYWE0Y2NlM2Y0OC8xL2VzWWo3N19CSkhFaFlpUU11 Z0trMmgxTnpxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCLV/0AwQCLYOMAwQCLYxoAwQCLZTIAwQCuXuU AwQCuY9AAwQAwQMlAwQF1JKgMA0EAgACMAcDBQMqBtrAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwM+tTANBgkqhkiG9w0BAQsFAAOCAQEAiNy4lppWPziRRJcZRQ0Y tjqAcS//WtukzYcrisnkTlT0bc4ztSa6TLQTuilvJrtP7cI7/jlg5MqLLhZTC61j lyrJHirU0A56OH9QRlgDjmzVENN0uJuScN51MUPPQejdkCpvNi6bHETUNpy6ENOg nHtIUaXJqK1MPB81jgdKjJAsHppogi3mHR4YtdUt07mIPLXwxGNpTbRb8pkKGAtk ZXxBWqm6deBVdEO/Lo/OzNiTixSxp4jpiHzWAlEAu5W74M6uVCKjKg4cfl6r/Hzv SB6unUOeDkaxhwtHQcO1lJKuVp/aCwUxKAT0so2+Z1NyUlEaqnbHmrj36XJtETVI cA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:25:06 2026 by rpki-client