This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer File: ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer (raw, json) Hash identifier: 5bWteJH2ll67an3AyDXeyNkeMrWVaGQYl7Rxep+LVEM= Subject key identifier: 7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F31BDF6B657003B855D1A9848CA63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215588 IP: 91.201.92.0/22 IP: 193.28.151.0/24 IP: 2a10:1a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:bd:f6:b6:57:00:3b:85:5d:1a:98:48:ca:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad869e5efd483a72fd3e89978d1cc66df32b512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:57:71:50:36:c2:49:a2:87:25:c6:94:7a: 08:c5:ae:6b:08:fe:38:13:d0:ed:79:99:56:a3:c3: e2:f2:7d:0c:87:01:ee:e9:51:bc:2b:70:a1:90:7c: ba:9b:f8:a3:13:34:53:5f:77:d8:21:c7:b1:07:3a: 41:82:96:d1:67:22:f5:13:e8:5e:a4:4b:b2:1a:1a: 12:90:5e:54:57:89:65:ef:53:1b:af:61:9b:7d:31: 8e:1b:bd:a5:61:00:68:b9:51:e2:4f:fc:16:02:84: cb:c4:94:98:15:12:cf:e4:d4:99:d8:20:de:21:1e: a4:3f:a8:a1:10:4b:88:31:80:ac:4d:c6:7a:9b:ec: a5:ba:a3:7e:3b:21:d1:3f:e2:6d:4d:38:fb:1b:59: d0:da:7b:04:dc:35:35:c2:c2:50:a3:b1:11:17:d7: ad:d1:2c:52:e2:b8:42:57:14:b6:c9:d5:b0:aa:53: c5:38:6d:36:69:33:ed:af:46:ab:fa:34:12:3e:79: 5b:fa:15:72:cf:f6:8c:d7:02:ce:78:1d:13:83:f3: 7e:b7:2e:c6:99:2b:0c:9a:3b:9f:c4:93:2f:57:e8: c7:c1:2f:16:b7:62:bb:a5:af:ba:a5:e9:61:1b:09: b3:aa:c9:da:8a:64:be:4b:5e:7f:e2:5d:af:1b:c5: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.92.0/22 193.28.151.0/24 IPv6: 2a10:1a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215588 Signature Algorithm: sha256WithRSAEncryption 05:78:71:3e:7c:73:01:ce:a2:a1:69:8e:25:94:4e:73:41:45: f1:9b:35:bc:df:d3:3a:a8:e1:c8:d3:17:39:f8:5d:dd:fa:ae: f3:30:bb:39:1e:06:d1:d2:0f:6c:6f:aa:29:f8:06:07:da:b6: 34:fe:a3:47:b7:2b:cf:e5:f4:b7:5a:54:e2:7a:13:f7:37:3a: ca:86:c3:5d:ba:13:f4:31:c0:af:03:c0:ae:28:5d:a1:c0:33: 32:64:e3:6c:23:b3:38:d2:1c:2d:ff:ba:f7:f3:65:db:1e:b4: f7:64:b2:42:87:ab:cb:e2:a1:7f:8d:79:87:db:60:fb:6a:b6: fc:ed:db:62:e9:24:48:bd:6c:d9:ba:30:00:34:b5:6d:41:26: a6:62:91:10:bc:80:7b:55:c9:6e:08:3d:db:d2:da:29:59:7d: 60:de:53:48:b0:18:ef:df:d5:a4:7b:c0:4f:37:6e:f7:5b:2c: c1:59:e4:af:ba:ce:87:72:ff:2a:85:39:b6:44:1f:32:15:cc: 8e:7c:60:ae:d1:fb:8a:83:9e:92:3c:1b:f9:d4:9c:bb:d0:0b: 64:71:ff:95:0d:cc:61:5b:0f:70:3a:bc:38:39:08:da:96:db: a2:4c:cf:93:a6:87:5e:3d:0c:6c:96:7f:59:7c:e4:ab:00:1f: b9:75:f0:57 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fzG99rZXADuFXRqYSMpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQ4NjllNWVmZDQ4M2E3MmZkM2U4OTk3OGQxY2M2NmRmMzJiNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/FXcVA2wkmihyXGlHoIxa5rCP44 E9DteZlWo8Pi8n0MhwHu6VG8K3ChkHy6m/ijEzRTX3fYIcexBzpBgpbRZyL1E+he pEuyGhoSkF5UV4ll71Mbr2GbfTGOG72lYQBouVHiT/wWAoTLxJSYFRLP5NSZ2CDe IR6kP6ihEEuIMYCsTcZ6m+yluqN+OyHRP+JtTTj7G1nQ2nsE3DU1wsJQo7ERF9et 0SxS4rhCVxS2ydWwqlPFOG02aTPtr0ar+jQSPnlb+hVyz/aM1wLOeB0Tg/N+ty7G mSsMmjufxJMvV+jHwS8Wt2K7pa+6pelhGwmzqsnaimS+S15/4l2vG8XNQQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHrYaeXv1IOnL9PomXjRzGbfMrUSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzk3MzEx ZC1hZjI2LTRiOGQtYTFhZC0xMzY2OTU2OWQ2OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvOTczMTFk LWFmMjYtNGI4ZC1hMWFkLTEzNjY5NTY5ZDY4ZS8xL2V0aHA1ZV9VZzZjdjAtaVpl TkhNWnQ4eXRSSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW8lcAwQAwRyXMA0EAgACMAcDBQMqEBqAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKJDANBgkqhkiG9w0BAQsFAAOCAQEABXhx PnxzAc6ioWmOJZROc0FF8Zs1vN/TOqjhyNMXOfhd3fqu8zC7OR4G0dIPbG+qKfgG B9q2NP6jR7crz+X0t1pU4noT9zc6yobDXboT9DHArwPArihdocAzMmTjbCOzONIc Lf+69/Nl2x6092SyQoery+Khf415h9tg+2q2/O3bYukkSL1s2bowADS1bUEmpmKR ELyAe1XJbgg929LaKVl9YN5TSLAY79/VpHvATzdu91sswVnkr7rOh3L/KoU5tkQf MhXMjnxgrtH7ioOekjwb+dScu9ALZHH/lQ3MYVsPcDq8ODkI2pbbokzPk6aHXj0M bJZ/WXzkqwAfuXXwVw== -----END CERTIFICATE-----Generated at Sun Jan 11 22:31:29 2026 by rpki-client