This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EST0oQ141Lq7esUlnCG3Pv5XetA.cer File: EST0oQ141Lq7esUlnCG3Pv5XetA.cer (raw, json) Hash identifier: P3yXQ9ApURYhlXphwHifnJ8CcibuAyOw2vsr16hACZ0= Subject key identifier: 11:24:F4:A1:0D:78:D4:BA:BB:7A:C5:25:9C:21:B7:3E:FE:57:7A:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDB9DA4A32C55B9A4D8F5EF546F66A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215476 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b9:da:4a:32:c5:5b:9a:4d:8f:5e:f5:46:f6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1124f4a10d78d4babb7ac5259c21b73efe577ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:35:db:c6:0d:e2:5c:1b:df:f1:cc:86:2a: 48:64:e3:10:72:ca:34:c9:a4:45:84:98:6a:e9:d3: 1a:a7:5e:52:46:70:bd:22:ce:0e:4f:8e:c0:25:bf: 9c:09:b5:55:b3:bd:61:f4:eb:be:05:a3:f4:88:1e: e4:ed:07:88:34:08:e4:d0:89:15:fd:d4:78:90:10: 68:a8:7d:60:b3:95:75:56:5a:a2:98:c8:9d:78:15: 8b:96:b6:a8:77:2c:b0:b2:92:9f:2e:3c:24:d2:2f: 8c:bd:41:72:e6:ac:1e:b2:d3:73:90:ef:43:75:6f: cf:d6:ac:9e:02:42:28:dd:a9:f2:ed:9e:15:cf:2c: 25:36:58:b3:52:39:db:49:5a:99:03:37:e7:59:9d: 1a:06:42:30:ec:26:2b:db:b4:d1:67:e3:77:63:df: 48:b4:7a:96:e0:02:a9:df:5e:ac:90:9c:8d:45:85: 79:23:0a:a2:48:f2:ee:24:56:96:c6:53:1e:b0:f0: 00:a4:75:16:25:e1:d2:2b:62:f1:e0:c7:e3:26:f6: 29:cc:16:22:5c:15:f0:f3:51:2f:6d:94:c8:ff:e4: f6:e7:02:58:a6:fe:eb:a2:34:9b:b9:32:d1:53:56: ab:d0:59:9c:06:09:93:a6:01:30:a8:0c:e6:26:35: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:24:F4:A1:0D:78:D4:BA:BB:7A:C5:25:9C:21:B7:3E:FE:57:7A:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be46d4-1172-4b4b-b9f8-3dc306cea591/1/EST0oQ141Lq7esUlnCG3Pv5XetA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215476 Signature Algorithm: sha256WithRSAEncryption 7e:42:90:7c:88:1d:2f:76:a4:c5:b0:05:cf:af:6d:2e:55:10: 59:c1:3d:ea:14:18:67:94:54:73:9a:d9:7d:7a:2c:8e:5a:c2: 04:58:2a:e4:26:29:18:d6:bd:89:1a:47:2c:3a:95:fb:13:f5: 00:66:a1:d3:55:2c:a1:ec:fb:b6:af:ba:6e:a5:6b:29:a1:bd: 5f:f2:f9:1c:c7:6c:54:93:75:34:2f:e6:7d:54:c0:77:84:51: f9:6a:b0:87:d1:25:32:24:39:69:68:40:f9:bb:c0:ca:13:30: bd:d7:12:6e:9c:5a:12:44:9c:cc:6f:67:ac:2a:d4:7c:69:98: b9:47:78:01:7a:96:bb:03:5b:0a:5f:ba:ae:0f:ba:6d:18:75: 16:02:96:77:ed:83:e5:67:26:27:77:aa:db:b2:86:9a:5e:ce: 35:64:35:22:ac:ce:9f:40:5b:14:e2:ea:bf:3b:23:4d:cc:ae: 60:a3:8f:d6:c8:01:24:0b:af:64:c2:a1:5a:86:1e:2e:14:b2: be:d5:fd:24:3a:5d:a1:6e:5c:9d:fd:cd:a9:d6:41:a3:c8:b8: 64:19:f6:16:70:03:4c:58:81:de:7d:e5:f5:e2:7f:4f:08:29: 95:b0:de:23:d6:5a:90:af:0c:d1:4e:76:7b:e9:bf:f1:51:cf: bd:19:d4:77 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87bnaSjLFW5pNj171RvZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTI0ZjRhMTBkNzhkNGJhYmI3YWM1MjU5YzIxYjczZWZlNTc3YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG0128YN4lwb3/HMhipIZOMQcso0 yaRFhJhq6dMap15SRnC9Is4OT47AJb+cCbVVs71h9Ou+BaP0iB7k7QeINAjk0IkV /dR4kBBoqH1gs5V1VlqimMideBWLlraodyywspKfLjwk0i+MvUFy5qwestNzkO9D dW/P1qyeAkIo3any7Z4VzywlNlizUjnbSVqZAzfnWZ0aBkIw7CYr27TRZ+N3Y99I tHqW4AKp316skJyNRYV5IwqiSPLuJFaWxlMesPAApHUWJeHSK2Lx4MfjJvYpzBYi XBXw81EvbZTI/+T25wJYpv7rojSbuTLRU1ar0FmcBgmTpgEwqAzmJjXCeQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBEk9KENeNS6u3rFJZwhtz7+V3rQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2JlNDZk NC0xMTcyLTRiNGItYjlmOC0zZGMzMDZjZWE1OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYmU0NmQ0 LTExNzItNGI0Yi1iOWY4LTNkYzMwNmNlYTU5MS8xL0VTVDBvUTE0MUxxN2VzVWxu Q0czUHY1WGV0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJtDANBgkqhkiG9w0BAQsFAAOCAQEAfkKQfIgdL3ak xbAFz69tLlUQWcE96hQYZ5RUc5rZfXosjlrCBFgq5CYpGNa9iRpHLDqV+xP1AGah 01Usoez7tq+6bqVrKaG9X/L5HMdsVJN1NC/mfVTAd4RR+Wqwh9ElMiQ5aWhA+bvA yhMwvdcSbpxaEkSczG9nrCrUfGmYuUd4AXqWuwNbCl+6rg+6bRh1FgKWd+2D5Wcm J3eq27KGml7ONWQ1IqzOn0BbFOLqvzsjTcyuYKOP1sgBJAuvZMKhWoYeLhSyvtX9 JDpdoW5cnf3NqdZBo8i4ZBn2FnADTFiB3n3l9eJ/TwgplbDeI9ZakK8M0U52e+m/ 8VHPvRnUdw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:18 2026 by rpki-client