This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer (raw, json) Hash identifier: RAqbGPu92xP5eH9USFWyWlQG9imj5kbm3eET+BvtLaI= Subject key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5B3D1D7633E1BDB5AC2C708F4E54 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207187 IP: 45.130.248.0/22 IP: 185.163.180.0/22 IP: 213.194.212.0 -- 213.194.255.255 IP: 2a0a:1c00::/29 IP: 2a0e:59c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5b:3d:1d:76:33:e1:bd:b5:ac:2c:70:8f:4e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=113eaf2521dcbf764242431a781f68d0dd551402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2f:cc:db:3b:09:b6:82:44:d2:13:e0:36:77: 77:a8:8b:48:b5:65:06:94:9e:4d:a3:49:3d:f2:e6: 46:7d:b6:84:64:fe:6c:12:d2:e9:4c:68:48:12:21: 71:3a:e7:e9:f3:08:31:aa:e7:f9:ae:31:a8:d4:d6: 16:d4:c1:68:8c:2c:28:dc:84:ad:c6:65:a8:8d:76: 6e:9f:44:2c:2e:23:4b:20:95:5b:1e:98:52:d2:77: 1b:d3:27:37:5a:8c:40:a9:84:0b:b3:b2:81:03:f5: d9:0a:90:05:ae:3f:42:db:c8:98:9a:39:e5:3b:1e: c5:52:a9:f4:bd:e9:0e:67:8e:43:d9:6b:98:77:63: 39:cf:31:de:c6:90:3d:1a:36:4b:1d:17:14:40:9e: ed:e7:47:ba:40:5f:16:b3:b0:c1:62:29:54:6e:14: f7:8e:2f:ca:e5:1e:c9:4d:33:95:19:f7:a3:fd:8b: bc:81:d1:b1:35:ea:b2:76:fa:cb:4f:df:ba:00:80: 6f:a1:24:74:10:d8:05:13:61:4c:71:54:09:30:a0: 24:92:90:6a:20:bb:bb:be:98:f8:cb:6e:ce:7a:12: db:98:7f:0d:e4:d3:fe:70:a7:6a:1f:7d:6f:f8:b9: 59:67:16:fb:4e:e6:28:ee:f2:d4:03:81:47:95:2f: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.248.0/22 185.163.180.0/22 213.194.212.0-213.194.255.255 IPv6: 2a0a:1c00::/29 2a0e:59c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207187 Signature Algorithm: sha256WithRSAEncryption 18:bc:50:48:8e:19:cc:ee:c2:d5:ef:e7:1d:4f:7c:6b:96:34: 8c:88:c9:f9:36:ef:aa:3e:00:e2:1f:d2:24:bb:7d:f7:aa:b3: cb:ed:7e:8e:98:87:71:29:f9:e7:4f:4b:58:2f:a2:e7:83:9e: 5d:34:4b:21:9f:9c:3c:e1:e6:98:13:8d:ae:fe:c8:7b:ae:a2: e5:cc:39:ca:ff:dd:f4:cf:a0:6a:fe:24:09:04:94:b3:ae:0e: 6b:4f:b9:24:9f:49:5e:6f:77:0e:4a:a5:21:38:39:08:41:1e: e2:78:04:87:e7:dc:2e:95:38:f7:18:4c:85:fd:d9:71:aa:d3: 74:0b:a2:71:4d:c4:b5:94:e0:67:db:44:ea:7d:81:f7:27:07: 92:a4:7b:c7:45:18:0c:72:1d:90:2f:65:96:61:f5:42:a6:12: 7a:f7:59:07:67:c3:05:fd:62:15:6f:d8:8d:81:24:23:6f:27: 7d:06:7e:3e:ee:9a:08:43:6e:a5:4a:8f:ab:ad:45:86:d9:1b: 18:a5:d4:34:38:04:a4:48:9b:51:96:1f:ee:24:75:96:bf:fd: a6:fd:cc:45:4a:62:55:33:15:4e:49:35:4a:64:9b:3b:fb:4d: 45:59:1d:98:61:c8:29:18:6e:af:50:80:0e:fa:02:2e:9c:be: e4:fe:24:8d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt261s9HXYz4b21rCxwj05UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTNlYWYyNTIxZGNiZjc2NDI0MjQzMWE3ODFmNjhkMGRkNTUxNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S/M2zsJtoJE0hPgNnd3qItItWUG lJ5No0k98uZGfbaEZP5sEtLpTGhIEiFxOufp8wgxquf5rjGo1NYW1MFojCwo3ISt xmWojXZun0QsLiNLIJVbHphS0ncb0yc3WoxAqYQLs7KBA/XZCpAFrj9C28iYmjnl Ox7FUqn0vekOZ45D2WuYd2M5zzHexpA9GjZLHRcUQJ7t50e6QF8Ws7DBYilUbhT3 ji/K5R7JTTOVGfej/Yu8gdGxNeqydvrLT9+6AIBvoSR0ENgFE2FMcVQJMKAkkpBq ILu7vpj4y27OehLbmH8N5NP+cKdqH31v+LlZZxb7TuYo7vLUA4FHlS/QXwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFBE+ryUh3L92QkJDGngfaNDdVRQCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzg3MzU0 OS00ZTg4LTRjNTEtODcxNy0xYTVkOGY1MDUxOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvODczNTQ5 LTRlODgtNGM1MS04NzE3LTFhNWQ4ZjUwNTE4Zi8xL0VUNnZKU0hjdjNaQ1FrTWFl QjlvME4xVkZBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAfBAIAATAZAwQCLYL4AwQCuaO0MAsDBALVwtQDAwDVwjAUBAIA AjAOAwUDKgocAAMFAyoOWcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAylTMA0G CSqGSIb3DQEBCwUAA4IBAQAYvFBIjhnM7sLV7+cdT3xrljSMiMn5Nu+qPgDiH9Ik u333qrPL7X6OmIdxKfnnT0tYL6Lng55dNEshn5w84eaYE42u/sh7rqLlzDnK/930 z6Bq/iQJBJSzrg5rT7kkn0leb3cOSqUhODkIQR7ieASH59wulTj3GEyF/dlxqtN0 C6JxTcS1lOBn20TqfYH3JweSpHvHRRgMch2QL2WWYfVCphJ691kHZ8MF/WIVb9iN gSQjbyd9Bn4+7poIQ26lSo+rrUWG2RsYpdQ0OASkSJtRlh/uJHWWv/2m/cxFSmJV MxVOSTVKZJs7+01FWR2YYcgpGG6vUIAO+gIunL7k/iSN -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:38 2026 by rpki-client