This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.cer (raw, json) Hash identifier: hwwpFai4olewRJIO4bYFlP09VYtVYNwL2o3tDxHGyXg= Subject key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFD48123CF1969C20E0C6D32A3F91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197212 IP: 89.35.36.0/23 IP: 178.23.96.0/21 IP: 185.39.212.0/22 IP: 2a04:7f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fd:48:12:3c:f1:96:9c:20:e0:c6:d3:2a:3f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:e6:50:25:50:fe:42:26:11:9a:a3:b9:a4: fc:81:79:35:f0:15:e7:af:cb:a4:58:d9:4d:61:d0: 11:a7:dc:d4:86:08:cf:c0:19:50:cc:3c:40:03:e1: 8a:05:68:8a:18:e5:07:1f:62:4a:41:49:70:6c:b4: e9:7e:03:6e:4e:f1:20:e0:87:fc:40:43:b2:75:ee: 5b:99:63:69:17:0a:23:a3:c3:72:b0:4b:bd:94:b3: bf:93:b4:86:3b:89:e8:6f:61:3c:bb:da:0f:f8:13: 10:3b:28:62:68:47:41:c3:4b:7e:46:6e:61:8b:04: 64:96:af:cb:14:35:ad:81:e6:6e:70:3c:61:27:ec: 6b:9c:16:db:84:88:27:1f:aa:b7:76:d8:f6:7b:95: c0:1d:43:23:a2:9b:2e:16:26:03:a6:2e:f8:7b:e8: d9:c5:b6:16:5b:9d:19:f9:e4:1c:9f:87:97:88:2a: 14:30:8d:ae:6d:de:5c:6c:fc:4d:9b:99:02:71:81: 6f:14:36:c2:4b:81:da:74:06:e8:2e:12:d9:86:7b: 86:84:84:54:35:31:7c:b2:ca:b4:0f:ae:66:3c:6b: 7b:08:2a:ff:99:a3:1f:3e:24:77:53:f7:c1:8e:8f: ed:fb:7d:56:7c:cf:97:dd:c5:a6:3d:33:fc:f4:4b: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.36.0/23 178.23.96.0/21 185.39.212.0/22 IPv6: 2a04:7f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197212 Signature Algorithm: sha256WithRSAEncryption 9b:d9:a0:5d:a2:49:b9:e8:46:7c:ea:12:1e:0c:77:54:03:87: 8c:4a:75:0a:16:a9:08:6d:35:63:c1:82:29:fd:00:3e:b2:33: af:e6:a3:c6:3f:c7:11:14:19:17:81:8d:07:4c:e5:2c:de:98: 70:43:71:44:06:81:19:74:34:0d:86:75:fc:9d:e7:7b:16:b7: 5a:7a:52:58:23:48:33:7c:20:a7:d2:1e:e7:4f:c2:83:e1:4f: bc:6e:2e:1c:e6:1c:21:37:38:ab:28:99:0f:b2:9a:a7:25:bd: 2e:7c:eb:cc:38:2a:e7:61:9e:4e:34:cd:13:ef:e7:c0:43:c0: 1d:d5:fd:ee:83:c8:6b:e8:cb:03:97:04:a7:5b:25:2c:f2:e5: 44:b8:80:2f:72:38:83:8c:61:3e:d7:b0:38:4c:1d:c1:6c:e1: 74:9e:1d:9c:54:49:90:6a:1e:b9:79:ef:b9:27:e8:4a:db:54: 50:ac:ba:e7:27:ae:ac:ee:01:33:15:10:e2:a6:4c:77:75:1d: 29:03:97:d2:1e:ab:f4:d1:3c:32:a2:25:d7:9d:79:d1:73:29: 50:0f:2d:87:94:25:df:03:06:cc:23:c8:ff:9c:cb:28:1f:45: 4a:12:25:31:b9:5c:b7:9d:1d:76:a8:76:96:e3:6a:86:52:5a: 8a:a4:dc:96 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9Wv1IEjzxlpwg4MbTKj+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWUyODNjY2JmMTE2OThiNmYyMmVjMTdiNWY2M2UzYTUzZTQxMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7vmUCVQ/kImEZqjuaT8gXk18BXn r8ukWNlNYdARp9zUhgjPwBlQzDxAA+GKBWiKGOUHH2JKQUlwbLTpfgNuTvEg4If8 QEOyde5bmWNpFwojo8NysEu9lLO/k7SGO4nob2E8u9oP+BMQOyhiaEdBw0t+Rm5h iwRklq/LFDWtgeZucDxhJ+xrnBbbhIgnH6q3dtj2e5XAHUMjopsuFiYDpi74e+jZ xbYWW50Z+eQcn4eXiCoUMI2ubd5cbPxNm5kCcYFvFDbCS4HadAboLhLZhnuGhIRU NTF8ssq0D65mPGt7CCr/maMfPiR3U/fBjo/t+31WfM+X3cWmPTP89EtccwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNXig8y/EWmLbyLsF7X2PjpT5BEgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzZkYWJk MC01NTY1LTQ5MjUtYTcwMi0wZjYyYmJkOWI1NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvNmRhYmQw LTU1NjUtNDkyNS1hNzAyLTBmNjJiYmQ5YjU2OC8xLzFlS0R6TDhSYVl0dkl1d1h0 ZlktT2xQa0VTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBWSMkAwQDshdgAwQCuSfUMA0EAgACMAcDBQMq BH9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCXDANBgkqhkiG9w0BAQsFAAOC AQEAm9mgXaJJuehGfOoSHgx3VAOHjEp1ChapCG01Y8GCKf0APrIzr+ajxj/HERQZ F4GNB0zlLN6YcENxRAaBGXQ0DYZ1/J3nexa3WnpSWCNIM3wgp9Ie50/Cg+FPvG4u HOYcITc4qyiZD7KapyW9LnzrzDgq52GeTjTNE+/nwEPAHdX97oPIa+jLA5cEp1sl LPLlRLiAL3I4g4xhPtewOEwdwWzhdJ4dnFRJkGoeuXnvuSfoSttUUKy65yeurO4B MxUQ4qZMd3UdKQOX0h6r9NE8MqIl15150XMpUA8th5Ql3wMGzCPI/5zLKB9FShIl Mblct50ddqh2luNqhlJaiqTclg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:10 2026 by rpki-client