This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer File: E-0n6_dEUSu3xDA_0v6LlORIYkI.cer (raw, json) Hash identifier: 0UbWb2jkL/609Wsnk3c7fwY9QJueS+qiT9q2hOZ4xzk= Subject key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC2FB3B237FA9EFB0A5E16C597445D923 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 18:46:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202335 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:fb:3b:23:7f:a9:ef:b0:a5:e1:6c:59:74:45:d9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 18:46:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:c5:3c:6b:44:4d:21:2f:ec:e0:54:3d:fd: e7:de:0f:fa:05:64:21:cd:bc:f3:b3:ad:68:41:8c: c4:9b:3f:8f:b0:27:74:67:1b:02:fb:18:44:30:29: 2e:88:99:7b:31:2e:a0:67:d0:b0:8b:c0:50:bc:16: 66:72:b3:59:f2:d0:e6:17:e9:47:9b:b4:fa:4a:3c: 6d:ec:24:9a:23:1e:90:e1:18:1e:2d:e3:94:35:a1: ed:77:0e:df:96:1a:fc:8c:db:d5:65:c0:a4:a6:d9: a3:34:99:55:df:5b:29:da:a6:be:1d:9a:93:d2:01: bd:ee:bb:50:7d:0f:12:92:34:69:74:e5:f0:c0:f9: ff:4e:68:b4:27:68:ba:3f:e5:51:59:2f:16:33:1a: 3a:52:0b:3b:9b:f8:0e:6e:8a:9a:41:07:54:9d:0c: ff:af:9f:bb:bc:3f:a8:c7:84:ca:e1:d5:9a:2d:37: 2c:1f:a4:79:9c:ae:33:51:61:19:e0:60:f4:82:34: 65:d8:7b:d1:dc:a8:81:86:bc:3a:04:6c:22:e1:99: 0c:71:02:38:39:77:18:aa:73:25:aa:73:63:69:46: 9c:85:03:8c:0e:dd:c6:4c:90:ae:3c:aa:b6:48:58: 19:41:49:c2:f2:5c:89:83:bc:67:ae:be:26:4d:6d: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202335 Signature Algorithm: sha256WithRSAEncryption 7d:40:c0:b4:b0:94:70:39:11:95:14:db:1c:56:52:0f:94:70: ab:c2:b0:77:24:f4:43:ee:24:9c:a6:3d:06:3b:5a:68:c7:e9: 49:2b:25:9f:04:91:a2:94:72:3a:84:9b:64:53:c6:ca:f9:0b: d2:9c:ff:27:d0:ff:bf:ff:53:32:ad:e5:a6:79:68:e4:22:48: 78:b2:b1:f5:53:d6:57:c1:60:d6:a4:c8:84:e6:ff:33:8b:da: 85:65:e2:72:6c:c7:c5:83:0c:80:5e:0f:f5:b3:b3:79:be:79: d6:5e:ad:ba:77:da:a5:fb:bd:70:e3:7e:7c:45:85:24:02:4b: 22:d2:c3:b4:f9:d4:69:fd:32:57:32:ac:f5:6d:4a:ae:e3:58: e2:14:69:24:f2:1b:ce:22:59:41:c4:36:dc:e4:83:9e:5e:1a: 4a:cb:14:8f:55:4b:18:0d:c1:4b:25:91:a8:10:97:fe:7e:87: 97:55:8d:8f:49:31:aa:b3:95:ea:b7:bb:07:e0:7d:8f:b5:94: 3a:77:ac:fe:1f:f0:4a:1c:da:b8:50:48:a4:29:e4:f6:28:ea: 2d:35:a2:63:c1:64:5c:68:53:48:0f:45:80:92:fa:45:03:be: 6c:2c:c3:55:1c:29:ad:f0:44:0d:09:eb:e2:3c:e8:c5:44:2a: dd:56:9f:54 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZvC+zsjf6nvsKXhbFl0RdkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTg0NjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VkMjdlYmY3NDQ1MTJiYjdjNDMwM2ZkMmZlOGI5NGU0NDg2MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAterFPGtETSEv7OBUPf3n3g/6BWQh zbzzs61oQYzEmz+PsCd0ZxsC+xhEMCkuiJl7MS6gZ9Cwi8BQvBZmcrNZ8tDmF+lH m7T6Sjxt7CSaIx6Q4RgeLeOUNaHtdw7flhr8jNvVZcCkptmjNJlV31sp2qa+HZqT 0gG97rtQfQ8SkjRpdOXwwPn/Tmi0J2i6P+VRWS8WMxo6Ugs7m/gOboqaQQdUnQz/ r5+7vD+ox4TK4dWaLTcsH6R5nK4zUWEZ4GD0gjRl2HvR3KiBhrw6BGwi4ZkMcQI4 OXcYqnMlqnNjaUachQOMDt3GTJCuPKq2SFgZQUnC8lyJg7xnrr4mTW25vQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBPtJ+v3RFErt8QwP9L+i5TkSGJCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQwY2Jh NjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDBj YmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAwZGM5LzAvMTNFRDI3RUJGNzQ0 NTEyQkI3QzQzMDNGRDJGRThCOTRFNDQ4NjI0Mi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFl8w DQYJKoZIhvcNAQELBQADggEBAH1AwLSwlHA5EZUU2xxWUg+UcKvCsHck9EPuJJym PQY7WmjH6UkrJZ8EkaKUcjqEm2RTxsr5C9Kc/yfQ/7//UzKt5aZ5aOQiSHiysfVT 1lfBYNakyITm/zOL2oVl4nJsx8WDDIBeD/Wzs3m+edZerbp32qX7vXDjfnxFhSQC SyLSw7T51Gn9MlcyrPVtSq7jWOIUaSTyG84iWUHENtzkg55eGkrLFI9VSxgNwUsl kagQl/5+h5dVjY9JMaqzleq3uwfgfY+1lDp3rP4f8Eoc2rhQSKQp5PYo6i01omPB ZFxoU0gPRYCS+kUDvmwsw1UcKa3wRA0J6+I86MVEKt1Wn1Q= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:50 2026 by rpki-client