This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer File: 0elpYhQkgMux04QRdx60_z45g58.cer (raw, json) Hash identifier: JKj04gs1obNM9SS+XfNSQQsd5BdMQTjjeFL/gbiFVVY= Subject key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32F99D448424E9BB68BDE44E3BE0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211057 IP: 185.203.66.0/24 IP: 2a11:a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2f:99:d4:48:42:4e:9b:b6:8b:de:44:e3:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1e96962142480cbb1d38411771eb4ff3e39839f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:61:13:a4:3f:13:08:57:1c:9d:90:22:22: b6:61:3b:65:eb:be:ca:e8:91:fc:42:4d:8b:bb:27: 32:d2:c3:3b:46:04:34:4c:c0:20:fd:9f:b2:c7:5d: ad:17:9f:11:bc:ec:5d:53:64:8e:0a:72:6d:d8:98: a8:f5:21:04:23:00:0c:c7:a2:4f:fe:ec:55:84:da: 3c:2c:db:b3:3e:9e:15:31:bf:d7:b4:99:58:8a:65: e5:58:19:3f:21:79:20:32:97:2b:b4:ac:94:d4:aa: 2f:0b:9f:bf:9c:66:99:aa:3e:52:94:d1:b3:42:0f: f0:1f:b2:b9:b3:3b:ef:ac:9b:2e:f9:cb:27:e4:5f: 1f:4b:21:d0:ba:5c:af:f3:f4:43:85:74:c0:8a:e4: c7:b1:46:c9:32:56:d7:3c:af:05:13:f7:d5:52:65: cc:1a:d5:ac:58:d2:98:c9:58:54:3d:6a:70:f7:cd: 1a:0a:4b:10:67:ab:1b:1a:08:67:bc:31:4b:50:3c: f5:45:96:76:70:6e:6b:30:4b:aa:d9:f2:6e:ad:8f: 46:86:0c:9f:ec:14:75:e4:0f:dc:4e:37:5b:e6:82: 26:70:82:4e:60:64:ec:6a:ec:81:41:14:36:3b:ab: 0e:14:8a:f8:87:9a:68:6d:62:ff:a1:24:dd:32:a2: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.66.0/24 IPv6: 2a11:a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211057 Signature Algorithm: sha256WithRSAEncryption 01:6e:f4:e1:3b:42:0d:81:f5:42:c0:58:f4:cf:bd:6e:49:e3: d7:9f:8a:c0:62:21:b9:99:e4:5a:3d:cd:20:20:c3:ed:ad:70: a7:67:a8:5d:78:b8:e4:6d:de:16:63:19:72:c8:04:11:e3:4c: 2c:48:8a:63:26:19:bf:1d:6a:5e:bb:7f:e3:f3:d4:29:68:08: c8:44:66:4b:96:67:63:d6:5e:bf:bf:45:39:75:00:b6:ba:22: 05:5c:78:9f:39:fb:c5:9d:0d:f2:df:14:be:99:df:8d:10:22: 68:f3:9c:8d:9a:d8:aa:43:b6:74:e0:0e:b6:40:1a:76:ae:d7: 23:54:62:d6:8d:29:60:e1:6a:d7:a2:48:3d:8d:0b:b7:3f:6f: bb:99:7a:07:4e:70:a3:9a:44:6e:7e:d7:c0:a2:c5:4f:e4:82: 6f:e2:fe:bb:0c:be:58:00:cd:09:87:b4:26:13:7d:33:26:67: 81:e3:c2:6f:22:c7:9d:15:dc:81:48:9d:6b:48:d2:a7:8b:99: f8:57:e0:b0:b4:e8:76:c8:4a:84:61:20:b6:00:c7:26:8f:c5: fb:96:8e:24:ce:dd:85:36:5a:24:ff:95:1d:15:c4:86:36:e4: 47:c3:4e:7e:28:29:8b:dd:e4:68:fa:1f:b3:68:7d:ae:48:dd: a5:88:52:ef -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7oy+Z1EhCTpu2i95E474MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWU5Njk2MjE0MjQ4MGNiYjFkMzg0MTE3NzFlYjRmZjNlMzk4MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p9hE6Q/EwhXHJ2QIiK2YTtl677K 6JH8Qk2Luycy0sM7RgQ0TMAg/Z+yx12tF58RvOxdU2SOCnJt2Jio9SEEIwAMx6JP /uxVhNo8LNuzPp4VMb/XtJlYimXlWBk/IXkgMpcrtKyU1KovC5+/nGaZqj5SlNGz Qg/wH7K5szvvrJsu+csn5F8fSyHQulyv8/RDhXTAiuTHsUbJMlbXPK8FE/fVUmXM GtWsWNKYyVhUPWpw980aCksQZ6sbGghnvDFLUDz1RZZ2cG5rMEuq2fJurY9Ghgyf 7BR15A/cTjdb5oImcIJOYGTsauyBQRQ2O6sOFIr4h5pobWL/oSTdMqJGhQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNHpaWIUJIDLsdOEEXcetP8+OYOfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzJjNzQ5 OS1jZDQyLTQzMjEtYmM0MC04OGY2NDE2ODhlMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMmM3NDk5 LWNkNDItNDMyMS1iYzQwLTg4ZjY0MTY4OGUwZi8xLzBlbHBZaFFrZ011eDA0UVJk eDYwX3o0NWc1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuctCMA0EAgACMAcDBQMqEQpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4cTANBgkqhkiG9w0BAQsFAAOCAQEAAW704TtCDYH1 QsBY9M+9bknj15+KwGIhuZnkWj3NICDD7a1wp2eoXXi45G3eFmMZcsgEEeNMLEiK YyYZvx1qXrt/4/PUKWgIyERmS5ZnY9Zev79FOXUAtroiBVx4nzn7xZ0N8t8Uvpnf jRAiaPOcjZrYqkO2dOAOtkAadq7XI1Ri1o0pYOFq16JIPY0Ltz9vu5l6B05wo5pE bn7XwKLFT+SCb+L+uwy+WADNCYe0JhN9MyZngePCbyLHnRXcgUida0jSp4uZ+Ffg sLTodshKhGEgtgDHJo/F+5aOJM7dhTZaJP+VHRXEhjbkR8NOfigpi93kaPofs2h9 rkjdpYhS7w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:48 2026 by rpki-client