This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer File: E_ZReahVuwpt3lZiFisrW6l0hxA.cer (raw, json) Hash identifier: TlDpDEFc3FpXt0vz7/M8DhbBxftX7WEIvEaOt+HaONc= Subject key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECECC3831653E414163E03DB118050 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210063 IP: 2.58.212.0/24 IP: 212.111.77.0 -- 212.111.78.255 IP: 212.111.83.0/24 IP: 212.111.91.0/24 IP: 2a0e:3440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ec:c3:83:16:53:e4:14:16:3e:03:db:11:80:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13f65179a855bb0a6dde5662162b2b5ba9748710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:d5:f0:10:47:30:c1:17:c2:31:c4:2e:60: 01:a6:85:3f:4f:55:20:a6:eb:66:40:bb:52:a7:82: 07:36:9e:09:55:e0:bc:a1:ba:e8:9b:ce:9b:c7:ff: 41:64:08:bb:e7:8a:83:5e:30:1d:38:80:f3:f1:93: 31:56:c0:75:f6:41:dc:77:1e:5f:83:db:2a:c5:45: ee:9b:98:94:ac:89:86:47:da:78:06:cf:75:4e:e5: f1:f2:b8:33:51:6c:a3:15:33:1d:3d:b1:df:26:88: 1b:b7:86:fb:fc:a8:6f:a4:18:14:4e:e5:f4:a8:ee: c5:15:3e:9a:d5:4d:cf:ed:46:38:f8:59:51:5c:a7: 38:81:d2:ea:3f:75:52:68:77:44:29:a1:20:87:55: 05:f8:09:99:76:f3:c0:97:6e:f8:a6:cb:28:d0:5c: 6b:8b:06:74:f7:70:39:86:e8:fe:d1:15:b0:d5:d0: 34:0b:01:7e:7f:a7:41:6f:15:ff:8a:10:ee:e4:dc: f5:eb:0b:d0:68:78:15:be:68:04:eb:13:fc:db:fa: d8:fc:58:3b:76:84:7f:89:fd:6d:14:e5:70:95:0b: 07:67:cc:53:81:2a:32:0b:5f:5e:ce:ef:4c:db:df: b6:de:2b:8a:c4:56:2a:cc:35:46:4d:c8:02:59:84: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.212.0/24 212.111.77.0-212.111.78.255 212.111.83.0/24 212.111.91.0/24 IPv6: 2a0e:3440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210063 Signature Algorithm: sha256WithRSAEncryption 98:88:a1:89:c6:12:80:d5:a1:2f:11:33:96:40:be:48:be:52: 41:3b:61:c9:6a:c0:06:ce:8e:a4:2f:4e:0e:ea:d9:ad:4e:45: 6a:87:dd:f3:8e:23:22:40:95:17:cd:af:c0:e4:79:70:51:df: 13:ee:2e:6d:be:ec:b3:a0:c8:77:46:ea:b0:73:52:ac:f9:55: dd:ae:7d:4b:47:8e:8c:06:c6:3a:65:73:85:80:64:51:2c:91: 5e:88:cf:4b:a8:9b:6a:a4:a9:90:cd:b2:8e:5c:24:24:36:00: 0c:f7:44:ec:37:87:bc:d8:9f:2c:8f:57:cc:91:1e:b7:62:ca: 56:3d:a8:ef:30:fe:64:c9:c5:f9:37:3f:ff:7c:bf:ee:21:47: ba:62:b4:2c:a7:cb:a4:ad:74:df:f1:e4:0d:b7:4b:23:75:66: 1d:77:0b:f5:5d:f6:d5:0f:89:85:fd:82:40:39:af:cb:71:9b: d0:26:ec:11:1c:92:e7:0b:07:25:95:e6:58:02:7a:ab:9d:51: d1:16:66:73:72:22:1b:e9:44:5a:ea:ca:8a:1d:5c:6f:44:db: f8:dd:1b:0b:5e:b6:c0:86:3d:25:5d:02:b5:3e:73:f7:83:87: 32:21:41:0a:fd:20:9f:db:b4:6e:aa:a6:f1:93:ae:71:9b:19: 21:8f:81:9f -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt57OzDgxZT5BQWPgPbEYBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2Y2NTE3OWE4NTViYjBhNmRkZTU2NjIxNjJiMmI1YmE5NzQ4NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZLV8BBHMMEXwjHELmABpoU/T1Ug putmQLtSp4IHNp4JVeC8obrom86bx/9BZAi754qDXjAdOIDz8ZMxVsB19kHcdx5f g9sqxUXum5iUrImGR9p4Bs91TuXx8rgzUWyjFTMdPbHfJogbt4b7/KhvpBgUTuX0 qO7FFT6a1U3P7UY4+FlRXKc4gdLqP3VSaHdEKaEgh1UF+AmZdvPAl274psso0Fxr iwZ093A5huj+0RWw1dA0CwF+f6dBbxX/ihDu5Nz16wvQaHgVvmgE6xP82/rY/Fg7 doR/if1tFOVwlQsHZ8xTgSoyC19ezu9M29+23iuKxFYqzDVGTcgCWYTZZQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFBP2UXmoVbsKbd5WYhYrK1updIcQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzVlMzg5 Mi1lYTg4LTQwNTgtYjk5Zi0yMWZkZmEzNjA3YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNWUzODky LWVhODgtNDA1OC1iOTlmLTIxZmRmYTM2MDdjOS8xL0VfWlJlYWhWdXdwdDNsWmlG aXNyVzZsMGh4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQAAjrUMAwDBADUb00DBADUb04DBADUb1MDBADU b1swDQQCAAIwBwMFAyoONEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzSPMA0G CSqGSIb3DQEBCwUAA4IBAQCYiKGJxhKA1aEvETOWQL5IvlJBO2HJasAGzo6kL04O 6tmtTkVqh93zjiMiQJUXza/A5HlwUd8T7i5tvuyzoMh3Ruqwc1Ks+VXdrn1LR46M BsY6ZXOFgGRRLJFeiM9LqJtqpKmQzbKOXCQkNgAM90TsN4e82J8sj1fMkR63YspW PajvMP5kycX5Nz//fL/uIUe6YrQsp8ukrXTf8eQNt0sjdWYddwv1XfbVD4mF/YJA Oa/LcZvQJuwRHJLnCwclleZYAnqrnVHRFmZzciIb6URa6sqKHVxvRNv43RsLXrbA hj0lXQK1PnP3g4cyIUEK/SCf27Ruqqbxk65xmxkhj4Gf -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:16 2026 by rpki-client