This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer File: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer (raw, json) Hash identifier: RcDD+SjeNFs1eF2qNsQnOSDmCq1MGx11/DUaOVdzN0c= Subject key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83530B914702AE3B023288C2ACF758 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57507 IP: 158.255.192.0/20 IP: 185.152.40.0/22 IP: 2a03:ef80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:53:0b:91:47:02:ae:3b:02:32:88:c2:ac:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=102a93b92f5845be62a6241f23cfadb14cb16994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:bf:d4:55:95:8d:68:dd:31:22:f6:4b:b7: a1:cf:e4:eb:09:4d:83:4a:e1:11:23:10:f3:13:cb: cd:2d:8a:af:a7:38:5d:b9:65:32:3e:69:be:7c:07: c2:c0:66:2d:a9:34:11:be:b1:bb:44:ac:c5:92:e2: 01:47:95:7f:f1:f0:be:6f:94:f1:35:53:2c:94:04: 32:2a:dd:a4:ac:f9:0a:72:51:a3:ab:e6:e2:a7:d0: d5:62:03:85:c5:89:7e:47:cc:2e:f1:30:a5:a8:83: c5:a7:0d:95:7e:4a:70:fa:fa:a3:7b:f8:17:1c:43: e5:9e:8f:8e:80:fd:9e:df:08:89:54:f8:b7:8e:20: f6:27:93:76:02:fc:4a:6c:58:08:be:a0:19:40:9c: 73:cd:09:33:77:c8:7f:49:7b:2a:df:03:26:06:09: 56:a8:e5:41:97:5a:38:ac:5c:3f:1d:9d:3e:22:41: c3:3c:77:02:4e:5c:b0:de:d2:87:50:ed:7f:e9:eb: dc:f0:41:73:d6:d5:72:9d:7e:d0:53:7d:69:bc:4d: 32:f0:98:1b:2a:e6:07:f1:29:20:15:6b:e0:d3:26: 35:95:d4:14:b0:40:84:a9:c6:f5:ed:2e:3c:fd:10: 75:c5:f6:76:33:24:f0:4d:cb:09:5c:9d:30:3f:b0: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.255.192.0/20 185.152.40.0/22 IPv6: 2a03:ef80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57507 Signature Algorithm: sha256WithRSAEncryption 99:28:20:35:b5:30:b6:f9:30:2b:45:40:81:0e:cc:5e:32:eb: c5:38:e0:99:15:df:eb:ce:5a:e0:fb:4e:c7:6f:66:d2:3a:d2: 57:bb:77:1d:f5:dc:11:3a:0a:7a:b2:1d:0c:a1:74:6c:70:81: 49:9b:06:38:93:0b:d4:7b:74:1e:4e:97:97:f3:1c:7f:9c:0b: 8b:50:0d:dd:40:8b:34:07:6f:c1:1a:31:2b:37:9b:97:70:b3: 83:b8:77:ca:59:dd:20:3c:72:cd:98:d6:0d:ef:8a:88:6c:b1: 94:ab:1c:d9:61:a7:44:a3:60:06:60:92:aa:02:92:7b:ec:aa: 1a:a7:1f:38:e2:ef:5c:61:f4:46:56:65:fc:d3:81:91:d6:13: 65:5c:dc:72:a8:78:1c:d8:51:10:d7:b1:23:8a:0f:a7:f6:05: 12:5e:0a:7f:ef:8a:ab:af:4f:c7:37:a2:5e:00:2b:e8:7b:8d: fd:8b:59:0e:29:96:80:76:51:99:69:82:86:37:2a:73:94:94: 44:26:11:bc:e8:b5:0d:15:b4:e6:ac:a1:bc:5d:d1:2b:ab:91: d7:1b:0a:88:70:47:05:a7:01:44:1d:fb:bc:f4:f6:2b:76:3a: be:ca:f8:43:7a:41:c8:44:b5:2a:6c:c1:21:b7:a9:33:7b:ea: 3d:af:88:58 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/g1MLkUcCrjsCMojCrPdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJhOTNiOTJmNTg0NWJlNjJhNjI0MWYyM2NmYWRiMTRjYjE2OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/G/1FWVjWjdMSL2S7ehz+TrCU2D SuERIxDzE8vNLYqvpzhduWUyPmm+fAfCwGYtqTQRvrG7RKzFkuIBR5V/8fC+b5Tx NVMslAQyKt2krPkKclGjq+bip9DVYgOFxYl+R8wu8TClqIPFpw2Vfkpw+vqje/gX HEPlno+OgP2e3wiJVPi3jiD2J5N2AvxKbFgIvqAZQJxzzQkzd8h/SXsq3wMmBglW qOVBl1o4rFw/HZ0+IkHDPHcCTlyw3tKHUO1/6evc8EFz1tVynX7QU31pvE0y8Jgb KuYH8SkgFWvg0yY1ldQUsECEqcb17S48/RB1xfZ2MyTwTcsJXJ0wP7BeywIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBAqk7kvWEW+YqYkHyPPrbFMsWmUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2YxYjQx Zi1hNDRjLTQ0ZTEtYjhkMi0zN2NiOGE1NzA4N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZjFiNDFm LWE0NGMtNDRlMS1iOGQyLTM3Y2I4YTU3MDg3Yi8xL0VDcVR1UzlZUmI1aXBpUWZJ OC10c1V5eGFaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEnv/AAwQCuZgoMA0EAgACMAcDBQAqA++AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgozANBgkqhkiG9w0BAQsFAAOCAQEAmSgg NbUwtvkwK0VAgQ7MXjLrxTjgmRXf685a4PtOx29m0jrSV7t3HfXcEToKerIdDKF0 bHCBSZsGOJML1Ht0Hk6Xl/Mcf5wLi1AN3UCLNAdvwRoxKzebl3Czg7h3ylndIDxy zZjWDe+KiGyxlKsc2WGnRKNgBmCSqgKSe+yqGqcfOOLvXGH0RlZl/NOBkdYTZVzc cqh4HNhRENexI4oPp/YFEl4Kf++Kq69PxzeiXgAr6HuN/YtZDimWgHZRmWmChjcq c5SURCYRvOi1DRW05qyhvF3RK6uR1xsKiHBHBacBRB37vPT2K3Y6vsr4Q3pByES1 KmzBIbepM3vqPa+IWA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:30 2026 by rpki-client