This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer File: E--253AYyTVaU4hW1OueUGl19TU.cer (raw, json) Hash identifier: IM532kUynIxVPO/pO76SOmDU7al6Wh+bnEeCgHhzOr8= Subject key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FC3128D68D31386ECFD6A0FB7753 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.138.88.0/24 IP: 195.78.40.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fc:31:28:d6:8d:31:38:6e:cf:d6:a0:fb:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13efb6e77018c9355a538856d4eb9e506975f535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:b3:54:2c:79:c2:57:3b:4a:58:a3:e8:8f: 67:aa:e0:ee:f9:cc:e0:72:95:ab:8c:7c:4c:b1:bc: fa:f8:0c:6f:da:5d:0e:d4:3b:c2:c8:d6:a7:c0:b7: d2:dc:59:ab:c0:e4:ea:89:1e:a0:a7:98:5e:7c:ab: 04:10:88:7d:9c:8b:b2:57:6b:84:d5:15:5b:bc:dc: f5:15:e4:94:21:ac:15:96:e0:c5:6c:66:97:4e:77: dc:21:83:31:a9:c0:37:e3:86:30:ae:64:5b:50:bd: 04:b8:42:b7:15:bf:ee:f9:9a:84:ec:e3:b6:87:cd: d7:f8:ad:91:96:b3:3f:fa:c8:0f:f8:1b:6c:53:d0: 20:b9:52:6a:b2:17:1f:e1:87:55:45:1b:ed:68:f0: 1e:5b:26:60:3c:f2:f7:5c:c4:13:f3:b8:8f:d7:a1: db:c6:57:83:0c:83:e0:3d:1c:44:21:21:95:99:a9: b9:9c:68:13:9e:00:54:0d:29:4c:40:4c:8d:81:25: 7f:35:3e:cd:16:59:04:47:62:9f:89:94:22:b2:f7: 44:4d:42:4d:b1:09:06:0a:a2:be:01:b4:e9:7e:e9: 86:41:a4:fb:e4:74:fc:a0:9c:b3:d0:4f:db:e7:4c: 4b:63:95:e5:e5:1d:30:c2:96:c7:52:1f:a6:22:59: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.88.0/24 195.78.40.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:eb:77:67:ae:d4:c8:f1:27:6a:31:a9:82:07:e7:ec:e9:ea: 62:1d:44:f7:b6:e1:f8:43:23:bf:10:81:3d:9f:f3:2b:7b:62: 33:bd:ef:4b:02:d7:f7:da:bc:51:15:b1:ac:e1:a5:c7:0e:7e: 33:ed:1f:fd:85:fa:fd:e0:01:d2:68:39:1a:b6:27:cb:c8:30: a5:25:6d:d7:b3:8a:f5:03:36:4a:3d:7b:1b:4f:9c:8b:b9:e1: b3:0f:4f:44:e2:d0:01:b6:56:8a:ea:c5:d2:60:73:b7:e0:74: e6:1f:dd:4d:60:c0:89:6c:a2:42:80:5c:36:68:e6:f9:ea:96: 66:5d:66:00:98:e2:8d:02:45:53:38:2f:24:91:0e:89:99:c0: bd:b7:66:4e:7d:7d:b9:72:87:c7:3e:b1:ff:ce:e1:37:af:73: 00:d1:57:6b:a1:30:ea:d0:da:4d:e0:98:7f:e8:83:ac:58:0d: 1b:ad:ea:55:2c:a9:22:0b:d5:06:1a:e6:fa:6f:b2:d5:97:f8: e4:c0:80:38:4c:6e:a5:be:df:cd:ee:93:a2:7c:39:29:b3:5d: 89:da:e1:4b:51:70:36:7b:4a:07:e7:6d:83:bb:ca:96:38:d8: 8f:61:34:70:eb:af:f3:45:f0:d6:89:be:67:f9:ae:26:01:8e: 31:5f:00:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt4NPwxKNaNMThuz9ag+3dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VmYjZlNzcwMThjOTM1NWE1Mzg4NTZkNGViOWU1MDY5NzVmNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlKzVCx5wlc7Slij6I9nquDu+czg cpWrjHxMsbz6+Axv2l0O1DvCyNanwLfS3FmrwOTqiR6gp5hefKsEEIh9nIuyV2uE 1RVbvNz1FeSUIawVluDFbGaXTnfcIYMxqcA344YwrmRbUL0EuEK3Fb/u+ZqE7OO2 h83X+K2RlrM/+sgP+BtsU9AguVJqshcf4YdVRRvtaPAeWyZgPPL3XMQT87iP16Hb xleDDIPgPRxEISGVmam5nGgTngBUDSlMQEyNgSV/NT7NFlkER2KfiZQisvdETUJN sQkGCqK+AbTpfumGQaT75HT8oJyz0E/b50xLY5Xl5R0wwpbHUh+mIlkYJQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBPvtudwGMk1WlOIVtTrnlBpdfU1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzkxYjJk Mi1kZmI5LTQ4ZDctODQzNi1lYmM1YjY3ODIzYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvOTFiMmQy LWRmYjktNDhkNy04NDM2LWViYzViNjc4MjNjNS8xL0UtLTI1M0FZeVRWYVU0aFcx T3VlVUdsMTlUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwYpYAwQBw04oMA0GCSqGSIb3DQEBCwUAA4IB AQBL63dnrtTI8SdqMamCB+fs6epiHUT3tuH4QyO/EIE9n/Mre2Izve9LAtf32rxR FbGs4aXHDn4z7R/9hfr94AHSaDkatifLyDClJW3Xs4r1AzZKPXsbT5yLueGzD09E 4tABtlaK6sXSYHO34HTmH91NYMCJbKJCgFw2aOb56pZmXWYAmOKNAkVTOC8kkQ6J mcC9t2ZOfX25cofHPrH/zuE3r3MA0VdroTDq0NpN4Jh/6IOsWA0brepVLKkiC9UG Gub6b7LVl/jkwIA4TG6lvt/N7pOifDkps12J2uFLUXA2e0oH522Du8qWONiPYTRw 66/zRfDWib5n+a4mAY4xXwB8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:35 2026 by rpki-client