This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer File: 1EZzVsX7atsuunE8gBkUsvTX860.cer (raw, json) Hash identifier: D7A9akFJqY1/fZymnFZozWLrC0uWPRdtvDjYYIyy05M= Subject key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF209429E3524AB1FC3FABE32ACCFF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213116 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:09:42:9e:35:24:ab:1f:c3:fa:be:32:ac:cf:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:88:93:2f:0a:41:73:18:19:60:2d:15:ee: 67:c5:5a:c7:be:88:1a:99:02:35:72:21:a2:0e:46: 20:f6:fa:a6:a0:5e:5d:35:5c:1f:14:92:24:f7:29: aa:13:9f:1c:3a:44:9e:cb:9a:0b:7f:b6:20:e9:cd: 02:1c:63:d3:83:28:b3:55:45:fd:92:be:ca:1f:e8: de:ee:1b:48:74:38:b0:8d:90:d7:00:f2:45:a4:ad: 92:eb:f6:06:5c:ba:9a:c2:8f:aa:0c:5c:cd:5f:78: d1:83:57:82:d0:41:28:e5:c6:4f:af:64:78:b0:e1: d3:6b:07:e0:ce:18:f9:f9:4b:e1:14:f1:19:a6:a3: 68:cc:a6:2f:cb:53:4e:8a:45:b8:40:f7:0f:60:2b: 77:7e:a7:02:c3:78:7d:7a:d9:75:3e:d3:73:a9:9f: 78:a3:17:f4:89:52:1f:de:19:9b:01:15:a1:7d:9b: 4f:83:7e:65:8c:97:ec:f8:20:33:18:bd:c4:bb:70: 0a:30:de:7f:15:a6:e5:45:e6:75:5b:f6:3c:d6:6a: f9:d4:de:af:17:b7:21:d0:03:e9:10:6b:ba:98:7d: e3:15:34:3b:71:ee:e4:86:b4:06:f8:8c:34:f6:42: b3:ce:9d:66:e2:db:e8:e1:9c:df:98:2d:2c:28:3f: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213116 Signature Algorithm: sha256WithRSAEncryption 8b:17:36:51:4d:cb:6e:ac:4d:71:97:bf:66:f1:d8:4b:1a:86: f6:14:55:53:97:fd:0d:ac:36:08:7b:37:53:a0:2c:34:40:e7: f7:60:22:d0:20:b1:a5:45:f5:a8:0b:a6:ec:6c:d4:9e:b6:1d: 75:fb:32:24:2e:76:6e:e4:45:71:8f:8a:36:30:22:48:89:3c: 23:66:40:63:7e:27:d9:d3:3b:cc:a4:4e:ef:12:1a:3e:b7:f5: 8a:96:77:ca:88:5a:9e:bf:7b:a9:57:6a:8d:a5:50:35:ee:cb: d8:e5:26:55:92:c9:6e:7e:7e:3a:78:c4:d9:8d:e5:57:f4:de: d4:a4:17:73:fc:be:9d:da:c8:bc:05:d8:7b:6a:88:ef:08:f9: be:61:dd:44:e0:44:79:06:f9:16:92:af:8c:f2:e5:2f:8a:a6: 2d:67:e1:8c:35:97:8a:40:a2:c1:91:54:0c:b9:0a:a3:f1:80: a0:77:0d:c6:9f:22:3f:d0:a0:9d:a5:de:ba:64:eb:22:ce:84: 71:d7:b0:ad:d3:b5:4f:ac:4e:67:02:13:e1:50:86:c1:d2:58: 58:e6:9d:c1:97:78:0a:a7:cb:f1:f5:a7:a3:cc:0f:a3:00:73: 21:ac:8a:ff:ba:4f:66:99:c3:a0:fe:18:14:0c:8c:3d:fb:3e: bd:a5:b2:0c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8glCnjUkqx/D+r4yrM/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ2NzM1NmM1ZmI2YWRiMmViYTcxM2M4MDE5MTRiMmY0ZDdmM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLWIky8KQXMYGWAtFe5nxVrHvoga mQI1ciGiDkYg9vqmoF5dNVwfFJIk9ymqE58cOkSey5oLf7Yg6c0CHGPTgyizVUX9 kr7KH+je7htIdDiwjZDXAPJFpK2S6/YGXLqawo+qDFzNX3jRg1eC0EEo5cZPr2R4 sOHTawfgzhj5+UvhFPEZpqNozKYvy1NOikW4QPcPYCt3fqcCw3h9etl1PtNzqZ94 oxf0iVIf3hmbARWhfZtPg35ljJfs+CAzGL3Eu3AKMN5/FablReZ1W/Y81mr51N6v F7ch0APpEGu6mH3jFTQ7ce7khrQG+Iw09kKzzp1m4tvo4ZzfmC0sKD88QwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNRGc1bF+2rbLrpxPIAZFLL01/OtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2U3ZDJl Mi01NmM5LTQwMTktYWY5ZS01OTdiNDdkNDJkYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZTdkMmUy LTU2YzktNDAxOS1hZjllLTU5N2I0N2Q0MmRiMC8xLzFFWnpWc1g3YXRzdXVuRThn QmtVc3ZUWDg2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNAfDANBgkqhkiG9w0BAQsFAAOCAQEAixc2UU3LbqxN cZe/ZvHYSxqG9hRVU5f9Daw2CHs3U6AsNEDn92Ai0CCxpUX1qAum7GzUnrYddfsy JC52buRFcY+KNjAiSIk8I2ZAY34n2dM7zKRO7xIaPrf1ipZ3yohanr97qVdqjaVQ Ne7L2OUmVZLJbn5+OnjE2Y3lV/Te1KQXc/y+ndrIvAXYe2qI7wj5vmHdROBEeQb5 FpKvjPLlL4qmLWfhjDWXikCiwZFUDLkKo/GAoHcNxp8iP9CgnaXeumTrIs6Ecdew rdO1T6xOZwIT4VCGwdJYWOadwZd4CqfL8fWno8wPowBzIayK/7pPZpnDoP4YFAyM Pfs+vaWyDA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:05 2026 by rpki-client