This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer (raw, json) Hash identifier: tiI5VhEPKnC6poLEGIlJUVtUDQTlpD/1TaQ3ZDjFQ2A= Subject key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2E1623ABE267AFF25E6541D1D4C67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35617 AS: 201518 IP: 85.204.42.0/24 IP: 86.104.135.0/24 IP: 109.239.240.0/20 IP: 178.132.88.0/21 IP: 185.59.132.0/22 IP: 185.72.40.0/22 IP: 185.225.128.0/22 IP: 212.81.60.0/22 IP: 2a04:e240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:62:3a:be:26:7a:ff:25:e6:54:1d:1d:4c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0842759a04fcfd9dd386486f04820e4a060397f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:6a:e0:fe:ef:d8:e4:f1:a5:06:e6:ce:27: 2a:9e:58:45:82:08:71:48:1a:09:3d:b2:03:4d:6e: c3:78:5f:d4:c0:ac:af:36:f3:85:b3:95:c5:ea:b1: c4:05:eb:a7:46:84:47:eb:53:5e:2a:5d:0c:75:ca: 37:a3:bd:41:fd:55:51:4d:9f:15:43:7e:f0:fd:39: ea:64:07:2f:51:0f:dc:43:51:46:6a:ee:3a:39:c5: 1f:33:02:db:87:f7:6c:e5:7b:5c:6a:54:97:c9:18: b7:d8:54:90:50:d1:d5:4d:2e:0d:bd:b9:5e:3b:bb: 6e:8c:33:69:92:c7:71:b2:b4:6e:d2:3f:80:ac:de: 97:33:f1:cb:7e:57:45:bd:95:56:c7:46:03:5c:d7: 0b:6e:b5:65:45:1f:c0:f3:b4:87:81:9b:90:23:26: bb:d6:b8:a0:28:7a:42:03:5e:ee:21:26:3c:3b:e2: c6:02:be:cf:1d:88:70:38:7f:ac:20:96:27:1c:a6: 78:82:5a:e0:e1:10:d8:3e:99:7b:82:1f:2e:2b:6e: 96:fb:1c:82:eb:aa:1a:e5:1a:cd:05:e8:9e:af:98: 84:a3:5c:a6:9b:f9:b8:34:41:b0:10:6a:ba:e0:26: ce:6d:0e:88:9c:86:90:e5:48:0d:c7:5a:85:07:09: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.42.0/24 86.104.135.0/24 109.239.240.0/20 178.132.88.0/21 185.59.132.0/22 185.72.40.0/22 185.225.128.0/22 212.81.60.0/22 IPv6: 2a04:e240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35617 201518 Signature Algorithm: sha256WithRSAEncryption 96:c7:1e:5e:1d:33:c6:85:34:22:81:a7:bf:ff:8e:50:9c:9b: 39:cf:20:d7:c2:c0:30:9c:f1:2a:f2:9c:ad:c8:6a:ec:fa:22: 66:e9:34:83:bb:dc:c8:a5:dc:98:d7:19:ef:15:d1:0c:4c:39: 6d:68:aa:2e:43:83:c3:83:4a:6e:b6:65:c6:fd:1d:41:ba:b3: d4:c8:24:ef:64:78:13:4d:e0:7d:00:a1:b4:84:fa:65:ff:c1: 16:66:85:d6:d2:57:ee:57:57:15:01:45:7c:35:6e:62:4f:0f: b0:ac:57:0a:06:d3:89:90:63:95:61:45:5f:ba:71:1f:88:ee: 9c:eb:05:32:00:a8:6a:de:bf:12:dd:30:09:04:9d:f2:d1:6f: d0:50:50:24:3b:1b:ff:6b:82:0a:7d:30:4f:ee:09:ee:95:ca: 3a:c7:cf:59:67:b6:37:63:11:14:83:00:47:8a:91:ea:ee:b6: 98:06:ad:57:f1:1c:3b:1e:f9:d1:eb:cb:20:15:70:89:bb:57: 12:48:72:58:b0:ef:1e:04:0f:86:78:0c:3b:83:cd:46:66:d2: 1a:fc:b1:f6:a1:3a:d9:32:04:86:74:ff:00:f1:ca:40:c5:a3: b3:3d:68:13:9f:0d:a8:e6:e0:64:42:91:44:72:38:04:24:f1: 73:61:8d:37 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt4ouFiOr4mev8l5lQdHUxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODQyNzU5YTA0ZmNmZDlkZDM4NjQ4NmYwNDgyMGU0YTA2MDM5N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5pq4P7v2OTxpQbmzicqnlhFgghx SBoJPbIDTW7DeF/UwKyvNvOFs5XF6rHEBeunRoRH61NeKl0Mdco3o71B/VVRTZ8V Q37w/TnqZAcvUQ/cQ1FGau46OcUfMwLbh/ds5XtcalSXyRi32FSQUNHVTS4Nvble O7tujDNpksdxsrRu0j+ArN6XM/HLfldFvZVWx0YDXNcLbrVlRR/A87SHgZuQIya7 1rigKHpCA17uISY8O+LGAr7PHYhwOH+sIJYnHKZ4glrg4RDYPpl7gh8uK26W+xyC 66oa5RrNBeier5iEo1ymm/m4NEGwEGq64CbObQ6InIaQ5UgNx1qFBwmm9QIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFAhCdZoE/P2d04ZIbwSCDkoGA5fyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzNkZmU3 Zi01N2FlLTQ1MGMtOTJlMS03MDI1ZTE4ODA2OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvM2RmZTdm LTU3YWUtNDUwYy05MmUxLTcwMjVlMTg4MDY4Yy8xL0NFSjFtZ1Q4X1ozVGhraHZC SUlPU2dZRGxfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQAVcwqAwQAVmiHAwQEbe/wAwQDsoRYAwQCuTuE AwQCuUgoAwQCueGAAwQC1FE8MA0EAgACMAcDBQMqBOJAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwCLIQIDAxMuMA0GCSqGSIb3DQEBCwUAA4IBAQCWxx5eHTPGhTQi gae//45QnJs5zyDXwsAwnPEq8pytyGrs+iJm6TSDu9zIpdyY1xnvFdEMTDltaKou Q4PDg0putmXG/R1BurPUyCTvZHgTTeB9AKG0hPpl/8EWZoXW0lfuV1cVAUV8NW5i Tw+wrFcKBtOJkGOVYUVfunEfiO6c6wUyAKhq3r8S3TAJBJ3y0W/QUFAkOxv/a4IK fTBP7gnulco6x89ZZ7Y3YxEUgwBHipHq7raYBq1X8Rw7HvnR68sgFXCJu1cSSHJY sO8eBA+GeAw7g81GZtIa/LH2oTrZMgSGdP8A8cpAxaOzPWgTnw2o5uBkQpFEcjgE JPFzYY03 -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:37 2026 by rpki-client