This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer (raw, json) Hash identifier: wN3q+uMF4fd+yEYocpiyvWJbjdawAQxYuKkesHNdJj8= Subject key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF6E58126B4466A8FCCAEFFB9058F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.251.0.0/16 IP: 192.148.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f6:e5:81:26:b4:46:6a:8f:cc:ae:ff:b9:05:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:46:50:fd:a3:c3:ac:1b:24:c4:c5:b8:c9: fc:34:f7:18:09:6b:a8:ad:6c:53:db:44:87:0b:73: 29:2c:e0:16:11:df:c4:8d:17:9f:d2:1a:9c:1d:b7: c6:e7:e0:f8:a0:a4:77:41:15:4e:90:d3:c9:ed:53: 80:47:c6:09:72:cf:b7:0d:06:6b:95:f9:39:66:21: 51:6d:14:6f:78:fd:f1:99:29:2c:65:6b:c3:87:14: 76:c0:88:09:d0:b9:e8:9b:e4:e7:a1:99:b1:28:08: 2d:df:2c:8e:90:0a:f5:9d:aa:a1:a5:1e:62:0b:41: 0d:78:b7:79:e7:ff:ff:fe:e2:46:fb:fd:2e:9e:7f: d9:37:37:05:c1:fe:bc:cc:3e:51:07:8e:65:55:3b: 43:24:3f:40:70:98:db:16:ac:56:c5:af:6b:b8:1b: 32:fa:27:6f:2d:ba:74:aa:25:0e:fb:53:08:63:44: 25:5b:94:47:79:5d:42:8d:8c:aa:5d:b4:cf:e1:83: d2:b7:07:61:46:a0:e4:e3:ff:ea:5f:9a:13:15:ff: b7:de:20:ee:52:01:2a:c0:1a:b7:9c:f7:21:23:7a: 96:e3:21:80:d6:8c:5c:2a:52:74:b4:8c:b7:58:fc: 7c:a1:6b:a8:58:cb:5f:06:29:9e:7b:ba:53:5a:b4: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.251.0.0/16 192.148.193.0/24 Signature Algorithm: sha256WithRSAEncryption 73:42:77:7b:73:53:af:38:c1:ec:5a:e7:4b:5b:5a:01:60:12: b8:40:44:89:81:61:06:fd:73:ab:e5:3d:f4:38:ea:17:df:ee: 0b:ee:43:09:e1:76:7a:75:c8:f7:7b:d4:19:8f:1b:a4:8a:56: 7a:5f:0d:41:a9:81:93:66:1f:51:f7:cd:63:11:ea:70:e1:2a: 9e:c7:ba:45:6e:8f:a0:8b:ab:0c:24:49:5b:e3:b2:d3:a2:55: 37:16:5e:73:02:ec:a4:07:df:cc:f7:b3:16:0d:43:c6:4e:a1: 7a:8f:7d:4c:a8:68:01:af:c0:92:6c:5d:9a:f4:a6:23:3d:9a: 2d:55:44:84:a0:43:e0:b5:db:fa:f2:66:77:5c:11:be:bc:17: 71:74:10:53:59:37:87:0a:86:16:b8:88:45:ef:b2:5b:6e:68: 05:2c:2c:9f:ac:7e:68:56:04:4d:8d:6c:8d:4f:c7:ed:48:9a: 2d:85:3c:79:b3:89:85:03:9f:37:ee:47:c6:69:a5:ca:e4:2c: e2:d9:48:7a:47:78:fb:66:ec:8d:4d:bd:18:d0:6b:f3:66:c2: 4c:90:f9:84:aa:a2:00:25:a4:22:10:bb:3b:f8:ee:c0:52:a8: a9:c7:da:03:2b:17:d7:3c:d5:35:a4:48:3d:ef:f4:8b:eb:40: 69:91:36:45 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt8f/blgSa0RmqPzK7/uQWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzUxNTVjZWJmOWRlMGNiNzNlNDBhMGZhMGExYWI0ZGNmMWQwOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4dGUP2jw6wbJMTFuMn8NPcYCWuo rWxT20SHC3MpLOAWEd/EjRef0hqcHbfG5+D4oKR3QRVOkNPJ7VOAR8YJcs+3DQZr lfk5ZiFRbRRveP3xmSksZWvDhxR2wIgJ0Lnom+TnoZmxKAgt3yyOkAr1naqhpR5i C0ENeLd55////uJG+/0unn/ZNzcFwf68zD5RB45lVTtDJD9AcJjbFqxWxa9ruBsy +idvLbp0qiUO+1MIY0QlW5RHeV1CjYyqXbTP4YPStwdhRqDk4//qX5oTFf+33iDu UgEqwBq3nPchI3qW4yGA1oxcKlJ0tIy3WPx8oWuoWMtfBimee7pTWrRf4wIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFBNRVc6/neDLc+QKD6Chq03PHQnKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzY3MDgw ZC1jYWUwLTQ4YzEtYTMzOC0zOGY1ZDk2MzIyMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvNjcwODBk LWNhZTAtNDhjMS1hMzM4LTM4ZjVkOTYzMjIyYy8xL0UxRlZ6ci1kNE10ejVBb1Bv S0dyVGM4ZENjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAgvsDBADAlMEwDQYJKoZIhvcNAQELBQADggEB AHNCd3tzU684wexa50tbWgFgErhARImBYQb9c6vlPfQ46hff7gvuQwnhdnp1yPd7 1BmPG6SKVnpfDUGpgZNmH1H3zWMR6nDhKp7HukVuj6CLqwwkSVvjstOiVTcWXnMC 7KQH38z3sxYNQ8ZOoXqPfUyoaAGvwJJsXZr0piM9mi1VRISgQ+C12/ryZndcEb68 F3F0EFNZN4cKhha4iEXvsltuaAUsLJ+sfmhWBE2NbI1Px+1Imi2FPHmziYUDnzfu R8ZppcrkLOLZSHpHePtm7I1NvRjQa/NmwkyQ+YSqogAlpCIQuzv47sBSqKnH2gMr F9c81TWkSD3v9IvrQGmRNkU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:24 2026 by rpki-client