This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer File: ERxtryd8JzXN7koMheNshcJdPD0.cer (raw, json) Hash identifier: DtQTFp0AMpj4a4CpUMRoApA6bMrbYNiankvycaMfAiI= Subject key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BAFBBB669465531B2FCE18F8CABE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216289 IP: 2a14:f300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:af:bb:b6:69:46:55:31:b2:fc:e1:8f:8c:ab:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:7d:d8:99:f4:2a:f9:9b:ff:c9:db:a3:75: 3d:d9:4b:6a:d6:28:ac:59:15:dd:18:4a:3e:2a:d3: de:0d:12:04:96:d7:2a:1b:c6:af:09:30:6b:2e:13: e9:76:4e:ff:77:8b:fe:bb:e2:89:26:2b:f3:0f:52: 19:9e:f3:ac:7c:60:f7:a6:3d:84:08:65:8c:7c:80: f3:f0:4d:6b:cd:5d:3d:66:a5:f0:44:78:aa:2f:c0: d9:2f:03:aa:08:d4:7d:4e:12:31:2b:c0:8d:e2:34: 9f:e9:4a:f8:e0:54:e7:ac:65:2d:b5:4c:a2:73:3d: ba:dd:65:5a:3a:ab:a8:cf:8d:5a:39:bb:97:ba:1b: a3:6b:b0:87:b7:49:8a:c3:77:a4:f1:1c:e9:c1:0a: 4c:5b:e5:b4:fe:ed:f6:81:66:16:91:e2:c0:45:7f: 26:bb:74:c9:85:5f:07:78:6c:83:55:1e:66:61:cb: 43:31:dd:5b:2f:50:19:b0:af:b2:54:b9:0a:c7:0b: d0:e4:ce:93:ea:03:28:65:0f:dc:de:7e:05:e6:c7: ba:9c:a5:95:1e:19:4e:06:74:d3:87:31:6b:7e:b6: 2d:81:0b:80:a0:8b:70:81:b4:27:5f:81:8d:8b:5d: 4f:11:cd:1c:5f:9e:20:da:07:94:89:48:b0:f1:17: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216289 Signature Algorithm: sha256WithRSAEncryption 65:69:a8:46:84:90:62:55:1c:45:51:34:61:ad:c8:59:cf:44: 3b:c5:4c:38:1c:fa:57:26:81:55:9e:3b:5e:1a:13:da:77:95: b4:41:4a:20:a1:2e:0f:a0:15:42:09:c4:a1:17:56:00:f9:41: 3d:cb:d1:b2:e3:12:30:02:52:0f:ca:5f:38:b3:21:16:b3:3b: b8:b7:ec:bd:63:ba:31:0e:10:81:ac:fc:db:c3:e5:21:a3:67: 90:e8:dc:36:5e:a8:e4:7e:a1:5d:69:b5:8c:19:af:95:fe:c1: 9a:c8:9c:ef:b3:ce:ef:99:91:20:a1:1a:94:ef:38:c7:45:ec: 2c:cf:52:7d:2e:8c:41:a4:18:5f:06:fb:1a:f8:c9:cd:d0:b9: c9:05:f9:4f:57:f5:1f:46:ec:13:53:9b:49:b1:8b:79:73:b8: 19:c6:a0:75:0e:3a:80:e6:71:8d:81:34:bb:fe:89:b6:f0:5c: fb:a9:5d:3d:ed:5a:57:a3:3b:d3:20:87:2d:1e:e6:c9:1e:be: ad:76:8c:40:1d:95:2b:11:9e:64:bb:e3:88:f0:12:0e:17:02: f9:ca:06:ff:0a:c0:c5:ee:d9:5c:a8:95:fa:a0:49:2c:4a:1d: 4c:51:19:d1:32:c5:e5:e7:14:c6:77:8f:33:80:95:28:d4:ff: f9:a5:b4:c2 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9W6+7tmlGVTGy/OGPjKvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTFjNmRhZjI3N2MyNzM1Y2RlZTRhMGM4NWUzNmM4NWMyNWQzYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNV92Jn0Kvmb/8nbo3U92Utq1iis WRXdGEo+KtPeDRIEltcqG8avCTBrLhPpdk7/d4v+u+KJJivzD1IZnvOsfGD3pj2E CGWMfIDz8E1rzV09ZqXwRHiqL8DZLwOqCNR9ThIxK8CN4jSf6Ur44FTnrGUttUyi cz263WVaOquoz41aObuXuhuja7CHt0mKw3ek8RzpwQpMW+W0/u32gWYWkeLARX8m u3TJhV8HeGyDVR5mYctDMd1bL1AZsK+yVLkKxwvQ5M6T6gMoZQ/c3n4F5se6nKWV HhlOBnTThzFrfrYtgQuAoItwgbQnX4GNi11PEc0cX54g2geUiUiw8Rf3sQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBEcba8nfCc1ze5KDIXjbIXCXTw9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2JhNDc2 Ni03YjNmLTRlNTctODNkZS0zN2JmY2I4MGY2MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYmE0NzY2 LTdiM2YtNGU1Ny04M2RlLTM3YmZjYjgwZjYxOC8xL0VSeHRyeWQ4SnpYTjdrb01o ZU5zaGNKZFBEMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTzADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDTOEwDQYJKoZIhvcNAQELBQADggEBAGVpqEaEkGJVHEVRNGGtyFnPRDvFTDgc +lcmgVWeO14aE9p3lbRBSiChLg+gFUIJxKEXVgD5QT3L0bLjEjACUg/KXzizIRaz O7i37L1jujEOEIGs/NvD5SGjZ5Do3DZeqOR+oV1ptYwZr5X+wZrInO+zzu+ZkSCh GpTvOMdF7CzPUn0ujEGkGF8G+xr4yc3QuckF+U9X9R9G7BNTm0mxi3lzuBnGoHUO OoDmcY2BNLv+ibbwXPupXT3tWlejO9Mghy0e5skevq12jEAdlSsRnmS744jwEg4X AvnKBv8KwMXu2VyolfqgSSxKHUxRGdEyxeXnFMZ3jzOAlSjU//mltMI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:20 2026 by rpki-client