This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer (raw, json) Hash identifier: 7t3FGOOLgxw1qbp9IrSJ+yzNDEuHVPrjrkXS6ek5A/0= Subject key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF2F48F391DD75B7F02D609BA3F76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.28.228.0/22 IP: 2a00:96e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f2:f4:8f:39:1d:d7:5b:7f:02:d6:09:ba:3f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:68:10:8d:5b:ed:25:b9:bb:07:36:5e:54: 02:66:06:ed:31:d3:34:fc:c9:5c:77:54:31:0b:c5: 31:f4:93:50:2e:fa:15:e1:af:74:42:69:f2:19:43: 40:6c:4a:f0:83:3f:79:28:0d:d9:5d:cf:2a:82:2d: 6d:a8:a8:7a:b9:a6:27:ef:c2:e6:26:6e:2b:ee:57: 0c:ca:fe:88:7d:74:99:b7:ab:42:55:13:b2:5b:7f: 8d:57:ec:60:86:13:51:79:18:63:b2:63:b8:ea:5d: 9c:1a:ee:64:b8:4d:77:fc:5e:6b:06:b6:9f:78:fa: 76:03:d7:b9:75:4b:ad:40:74:1d:b8:e8:62:6a:0d: f8:1e:13:38:e1:3f:0d:48:2c:3f:7d:07:d7:74:c5: d0:ed:b9:86:48:f9:34:df:c6:64:f0:df:26:b0:ef: 22:7b:51:6c:1b:5b:d8:af:b2:b8:55:61:8e:ce:9d: d5:86:33:d3:20:65:51:f6:7a:86:ed:c9:98:f3:6c: 99:05:e5:ed:7a:49:e8:e5:22:b3:f1:b5:1f:f0:7e: 4a:57:bf:16:d3:7f:f7:4f:de:9c:cd:c9:2d:46:05: 8b:e7:d3:49:35:3e:cf:a0:79:13:e8:e0:c5:8a:cf: dd:7c:eb:71:a8:5e:2e:78:a3:46:af:47:f1:02:5c: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.228.0/22 IPv6: 2a00:96e0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:b7:be:d0:23:96:6c:e9:99:9b:60:85:13:c7:72:1b:a2:86: f4:42:0c:b2:4e:8e:43:8d:29:01:31:7e:1a:7c:a4:c1:06:e9: e2:3f:78:ab:3c:6a:09:af:a7:fd:f4:4b:c3:72:f6:dc:59:50: 84:db:78:5e:85:04:e9:bd:a0:3a:b7:6e:42:21:51:0e:f5:58: 1d:bc:e3:c2:da:ca:76:10:0b:67:d1:b3:d6:ed:99:9b:10:cf: f6:84:a3:91:40:94:5a:b9:f7:59:4d:f4:a2:d6:ec:44:a5:32: d2:0f:1a:d0:29:00:0c:1c:e0:4c:92:72:9b:ac:be:47:67:14: c8:2f:5c:1d:9c:d4:e8:e0:be:52:a2:3c:1d:a1:33:ad:82:79: 30:db:bd:f6:d0:57:09:02:2f:bc:65:f6:54:2a:40:d0:57:e2: ab:37:23:f9:8c:24:13:0c:a7:63:ea:2c:8a:9a:74:49:54:bd: 77:c8:12:b6:5d:12:ea:54:3e:b7:0a:22:ce:a5:60:50:69:1c: d8:a3:da:f6:77:c0:f7:e3:6b:45:d9:18:ad:68:7b:4a:ea:6f: 8c:83:9e:4b:e5:d8:0e:51:53:5b:9c:db:ae:13:e3:24:cd:f9: a5:42:ad:e9:f5:b9:ce:52:21:2f:56:56:ca:2d:1a:5c:d4:32: 74:1c:cb:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fvL0jzkd11t/AtYJuj92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTBmMDUzYTZkYjU0YjFiZjM5NmY4NTA2M2E2ZmNjYTBhMzQ2ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCJoEI1b7SW5uwc2XlQCZgbtMdM0 /Mlcd1QxC8Ux9JNQLvoV4a90QmnyGUNAbErwgz95KA3ZXc8qgi1tqKh6uaYn78Lm Jm4r7lcMyv6IfXSZt6tCVROyW3+NV+xghhNReRhjsmO46l2cGu5kuE13/F5rBraf ePp2A9e5dUutQHQduOhiag34HhM44T8NSCw/fQfXdMXQ7bmGSPk038Zk8N8msO8i e1FsG1vYr7K4VWGOzp3VhjPTIGVR9nqG7cmY82yZBeXtekno5SKz8bUf8H5KV78W 03/3T96czcktRgWL59NJNT7PoHkT6ODFis/dfOtxqF4ueKNGr0fxAlzMqQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBEPBTpttUsb85b4UGOm/MoKNG7DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzUzZDE4 ZS1jYWNlLTRlYTQtOWEwOC0zOGJmYmQzNDc5OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNTNkMThl LWNhY2UtNGVhNC05YTA4LTM4YmZiZDM0Nzk5ZS8xL0VROEZPbTIxU3h2emx2aFFZ NmI4eWdvMGJzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRzkMA0EAgACMAcDBQAqAJbgMA0GCSqGSIb3 DQEBCwUAA4IBAQANt77QI5Zs6ZmbYIUTx3Iboob0QgyyTo5DjSkBMX4afKTBBuni P3irPGoJr6f99EvDcvbcWVCE23hehQTpvaA6t25CIVEO9VgdvOPC2sp2EAtn0bPW 7ZmbEM/2hKORQJRaufdZTfSi1uxEpTLSDxrQKQAMHOBMknKbrL5HZxTIL1wdnNTo 4L5SojwdoTOtgnkw27320FcJAi+8ZfZUKkDQV+KrNyP5jCQTDKdj6iyKmnRJVL13 yBK2XRLqVD63CiLOpWBQaRzYo9r2d8D342tF2RitaHtK6m+Mg55L5dgOUVNbnNuu E+MkzfmlQq3p9bnOUiEvVlbKLRpc1DJ0HMtX -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:07 2026 by rpki-client