This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer File: 1EdMHAbL_elGFNZcfQX2FKbiOZg.cer (raw, json) Hash identifier: +ywOgGVIkWTDMKBe2bXoDtZ8v1OpmV4vObdZVHiXa0s= Subject key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C93C9ADA835CADCA1C6422A9C21D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.59.120.0/22 IP: 2a02:6b20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:93:c9:ad:a8:35:ca:dc:a1:c6:42:2a:9c:21:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:ba:67:15:a3:da:a9:97:ba:8e:6d:cc:a5: 04:fa:ab:d8:cc:30:36:9e:8d:b5:71:fa:33:f8:7e: 6f:0a:2c:5c:b8:1a:09:8e:0b:80:ca:be:a5:9f:c0: f4:ed:b1:d4:96:ff:3d:03:1a:b3:c4:66:ae:a5:81: de:12:ec:bd:96:4a:7b:b6:cb:0b:5c:26:11:4e:44: 36:b2:c2:06:f0:61:70:6a:d1:9d:28:9e:b6:ab:7e: b1:ab:c9:06:52:73:de:8a:74:77:34:70:0b:a2:c1: fb:f4:c0:08:11:ec:4d:97:8d:f9:e0:84:50:fb:68: 9c:70:c3:90:53:46:c1:e4:89:81:66:64:32:36:23: 84:19:34:e3:1f:12:31:c2:4f:f5:ee:ca:6f:05:b3: 21:a8:6e:fc:5e:8b:11:03:e5:93:d6:b9:48:bc:99: 44:83:08:ff:d9:4f:d7:97:0b:93:f8:ea:db:df:b2: 8b:c9:1e:37:f8:5d:72:40:5f:a2:39:25:77:57:aa: bc:19:0e:20:30:69:bb:83:dd:61:0a:97:45:43:73: 99:78:12:ed:c1:ad:33:18:87:0f:9c:3b:83:24:f4: 87:ec:ae:de:5d:0f:d9:af:38:26:d1:1f:a4:89:6d: b3:a0:c9:4d:ba:2f:a4:7f:68:ec:b0:6e:56:30:e9: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.120.0/22 IPv6: 2a02:6b20::/32 Signature Algorithm: sha256WithRSAEncryption 75:5b:68:58:17:82:a2:34:f6:00:31:33:fc:72:2e:12:37:31: 38:0c:64:d2:83:77:ce:e7:db:6e:3c:ae:25:46:0c:84:28:b5: 64:99:c1:1e:0b:e6:be:c9:9a:4e:46:b2:53:33:74:c9:d0:b8: 53:7b:ef:38:b2:1a:0e:31:b4:fa:30:d3:77:a3:32:ee:ce:6a: af:21:d4:c6:40:9c:12:06:88:00:73:80:b0:8b:6b:8a:fd:04: 66:76:44:63:8b:cd:28:8b:15:cf:58:33:15:ee:40:a1:a7:44: 37:89:b2:82:fa:d1:27:2e:1e:25:94:f7:9e:f8:2a:93:41:96: d5:7b:85:f5:23:51:c5:7e:21:b7:2d:ee:51:e1:9c:4f:f6:0f: 11:41:66:7a:c2:1b:fe:c6:e6:52:01:c1:16:c1:23:27:af:d3: cc:87:fd:83:bf:d2:2a:64:83:a2:61:41:db:ef:3b:3f:4b:7e: 3e:4c:c1:e4:3b:34:f6:a6:14:1a:5c:ce:20:c9:a5:4b:e6:cb: 68:bb:90:21:eb:84:4c:39:29:86:4b:c2:c8:18:07:6c:cb:c4: ca:f7:81:54:8f:e1:6e:61:21:ee:5f:e5:01:49:52:86:d6:1b: 55:3d:9d:49:cf:12:51:04:af:d7:03:93:e2:78:3b:19:a2:dc: a8:f9:5e:d8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XJPJrag1ytyhxkIqnCHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ3NGMxYzA2Y2JmZGU5NDYxNGQ2NWM3ZDA1ZjYxNGE2ZTIzOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmy6ZxWj2qmXuo5tzKUE+qvYzDA2 no21cfoz+H5vCixcuBoJjguAyr6ln8D07bHUlv89AxqzxGaupYHeEuy9lkp7tssL XCYRTkQ2ssIG8GFwatGdKJ62q36xq8kGUnPeinR3NHALosH79MAIEexNl4354IRQ +2iccMOQU0bB5ImBZmQyNiOEGTTjHxIxwk/17spvBbMhqG78XosRA+WT1rlIvJlE gwj/2U/XlwuT+Orb37KLyR43+F1yQF+iOSV3V6q8GQ4gMGm7g91hCpdFQ3OZeBLt wa0zGIcPnDuDJPSH7K7eXQ/Zrzgm0R+kiW2zoMlNui+kf2jssG5WMOkW/QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNRHTBwGy/3pRhTWXH0F9hSm4jmYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2Q3NTc1 OS04ZGNiLTQ1MzItOGJmZS01YjY4OGFjZGI2NzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZDc1NzU5 LThkY2ItNDUzMi04YmZlLTViNjg4YWNkYjY3Ni8xLzFFZE1IQWJMX2VsR0ZOWmNm UVgyRktiaU9aZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTt4MA0EAgACMAcDBQAqAmsgMA0GCSqGSIb3 DQEBCwUAA4IBAQB1W2hYF4KiNPYAMTP8ci4SNzE4DGTSg3fO59tuPK4lRgyEKLVk mcEeC+a+yZpORrJTM3TJ0LhTe+84shoOMbT6MNN3ozLuzmqvIdTGQJwSBogAc4Cw i2uK/QRmdkRji80oixXPWDMV7kChp0Q3ibKC+tEnLh4llPee+CqTQZbVe4X1I1HF fiG3Le5R4ZxP9g8RQWZ6whv+xuZSAcEWwSMnr9PMh/2Dv9IqZIOiYUHb7zs/S34+ TMHkOzT2phQaXM4gyaVL5stou5Ah64RMOSmGS8LIGAdsy8TK94FUj+FuYSHuX+UB SVKG1htVPZ1JzxJRBK/XA5PieDsZotyo+V7Y -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:55 2026 by rpki-client