This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer (raw, json) Hash identifier: kahVgue8ti6JieKgaC7Bl86lVkePGjUjeKdv28l/hoQ= Subject key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4B3514F77F3B7A16FCF86B6A354CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203030 IP: 185.27.224.0/22 IP: 2a00:98e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b3:51:4f:77:f3:b7:a1:6f:cf:86:b6:a3:54:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:60:fd:09:41:c2:9f:e6:9f:4d:9e:fd:8c: d7:47:9c:2a:14:6d:df:72:c3:63:62:45:fe:0e:54: 9c:49:b7:aa:79:d4:a5:82:14:92:82:76:29:b6:bf: a4:b9:9c:8e:27:ac:03:b1:5d:44:72:af:30:82:f7: f8:36:b5:d7:ad:10:6f:62:3a:8a:6a:24:df:7d:ec: 4f:25:77:0b:a8:9b:9f:c2:b8:e1:03:66:c1:70:02: 7e:99:86:ae:6c:aa:3a:cb:da:e0:6a:d9:71:f6:32: 7e:69:4a:ae:3e:e0:4f:37:76:ba:3c:54:e0:c7:79: a0:4a:72:ca:66:6c:2f:2e:c6:09:ba:d9:f8:6e:c0: 76:98:78:ec:4f:66:ea:28:f2:82:9b:7b:0c:6d:17: 3d:bd:07:18:7d:04:84:83:8e:3c:90:a2:ad:2a:5d: 4d:45:12:60:40:b1:9d:e5:f7:dd:ef:32:04:12:c6: 26:86:20:f3:f8:21:1c:33:77:de:89:19:dd:24:d8: 08:e5:18:95:77:40:0e:c5:21:89:ca:5f:49:c9:fc: a7:f3:65:01:c5:41:72:59:7b:93:7f:1d:88:84:c0: b0:57:b3:17:a8:e2:0b:50:cc:e4:83:ef:b2:55:04: 9f:5d:a0:34:e1:95:3e:06:cd:0f:89:71:a0:84:2d: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.224.0/22 IPv6: 2a00:98e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203030 Signature Algorithm: sha256WithRSAEncryption 15:18:7d:e6:a8:99:53:8f:43:d2:0b:a4:fb:2d:9c:77:24:d1: 8b:a5:36:26:96:85:a3:4d:df:ac:75:dc:6f:4d:24:43:88:3e: 5c:48:a7:4d:ff:42:e8:8c:7d:bb:65:b1:82:e0:19:2d:d3:ac: 4a:1b:4e:ba:05:a3:96:32:08:39:89:94:cd:93:f9:47:e8:97: 4d:cf:cf:6c:00:29:c2:43:0b:d7:bd:e5:e0:22:8e:8c:9f:cb: 4b:6a:8e:4f:a1:4b:26:24:72:21:2e:fd:5f:8d:29:76:8a:82: 1f:5d:32:39:be:9c:e6:63:7f:e6:31:fe:7c:86:1f:fe:32:b3: 8d:82:a3:8b:cd:11:03:ab:54:96:a0:2b:8b:ee:f2:1f:6e:e0: 5e:fc:4a:8d:b8:1a:38:60:fc:2c:90:61:84:a8:02:e6:83:a2: e4:ab:0d:72:f2:80:5b:a8:19:71:56:7f:2c:fb:b3:fa:99:92: 44:45:e1:8b:bd:d4:1e:02:88:8b:5e:fe:4e:08:95:07:d7:df: f1:61:12:c4:b7:96:7f:c7:cd:24:1b:5b:97:ad:c2:17:9f:c3: 8a:de:41:83:ae:24:66:83:0b:ec:41:a3:7c:28:fb:79:91:61: f7:a3:a5:ee:7d:2f:d0:31:6f:a7:31:be:52:42:37:5c:8f:0d: e2:53:1e:1f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pLNRT3fzt6Fvz4a2o1TOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWNjZjEzNzI0NWFlYzY2YjJmNjc0YTg1ODFhNzQ0OWFlMmNmY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza9g/QlBwp/mn02e/YzXR5wqFG3f csNjYkX+DlScSbeqedSlghSSgnYptr+kuZyOJ6wDsV1Ecq8wgvf4NrXXrRBvYjqK aiTffexPJXcLqJufwrjhA2bBcAJ+mYaubKo6y9rgatlx9jJ+aUquPuBPN3a6PFTg x3mgSnLKZmwvLsYJutn4bsB2mHjsT2bqKPKCm3sMbRc9vQcYfQSEg448kKKtKl1N RRJgQLGd5ffd7zIEEsYmhiDz+CEcM3feiRndJNgI5RiVd0AOxSGJyl9Jyfyn82UB xUFyWXuTfx2IhMCwV7MXqOILUMzkg++yVQSfXaA04ZU+Bs0PiXGghC31+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHrM8TckWuxmsvZ0qFgadEmuLPzkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzM4ZjI0 Yi1iNjhlLTQxNDMtYmI1Mi03ZmMzZmUwNWYzMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMzhmMjRi LWI2OGUtNDE0My1iYjUyLTdmYzNmZTA1ZjMxMC8xL2VzenhOeVJhN0dheTluU29X QnAwU2E0c19PUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRvgMA0EAgACMAcDBQAqAJjgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZFjANBgkqhkiG9w0BAQsFAAOCAQEAFRh95qiZU49D 0guk+y2cdyTRi6U2JpaFo03frHXcb00kQ4g+XEinTf9C6Ix9u2WxguAZLdOsShtO ugWjljIIOYmUzZP5R+iXTc/PbAApwkML173l4CKOjJ/LS2qOT6FLJiRyIS79X40p doqCH10yOb6c5mN/5jH+fIYf/jKzjYKji80RA6tUlqAri+7yH27gXvxKjbgaOGD8 LJBhhKgC5oOi5KsNcvKAW6gZcVZ/LPuz+pmSREXhi73UHgKIi17+TgiVB9ff8WES xLeWf8fNJBtbl63CF5/Dit5Bg64kZoML7EGjfCj7eZFh96Ol7n0v0DFvpzG+UkI3 XI8N4lMeHw== -----END CERTIFICATE-----Generated at Sun Jan 11 20:16:45 2026 by rpki-client