This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer File: EagjxkJx95aUakaCWW5zKDXMTsg.cer (raw, json) Hash identifier: W4qmzVyH7LvPqKU9i/j2Yn0jFxRU7mfOuEsbO8VFJWg= Subject key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA17D23A7152136024924D4EA11C28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49410 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:17:d2:3a:71:52:13:60:24:92:4d:4e:a1:1c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11a823c64271f796946a4682596e732835cc4ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:2e:dc:d1:0b:ab:20:08:40:0d:cf:74:92: 60:3b:f2:48:10:b8:10:54:34:14:fd:ed:b2:aa:7d: 6d:ae:2d:c7:7b:4a:d0:6a:fd:18:f1:b8:b2:84:e9: 1a:0f:cf:95:0d:ba:c9:18:d4:da:73:d9:44:7e:cf: ff:fd:08:d8:3e:ee:e4:17:b9:7a:15:ec:2c:03:6f: cb:e3:f7:44:29:ab:4b:e2:37:5d:dc:4b:e0:ad:17: ea:ef:11:fe:ed:ad:72:63:b4:f4:31:7b:ff:5a:55: 20:92:b4:f5:a0:51:d6:9a:6a:d7:8f:0f:47:1c:c0: b1:16:20:cb:b2:23:13:b8:07:fd:c2:01:55:b7:f8: 9f:23:1e:f8:37:c2:23:62:2b:36:69:f6:9e:b6:98: 92:ca:5e:2e:83:1e:ae:74:57:2b:c1:01:41:34:4a: a5:e0:5b:b0:c3:b6:e5:74:e6:75:a4:04:28:b0:af: 64:be:66:0c:4a:fc:03:7e:a8:2f:13:3a:d1:91:34: 70:b0:39:ca:57:52:cf:ad:58:4d:fc:5c:92:64:de: 46:3d:c4:5c:21:5f:94:4e:b9:5b:25:b7:72:6a:80: 43:38:bb:2d:47:4d:5a:6f:ba:d6:19:13:23:ce:2c: ce:7f:8d:7f:83:f1:5b:3c:e9:51:7e:63:b1:9d:6c: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49410 Signature Algorithm: sha256WithRSAEncryption 6c:f0:61:0a:44:81:a9:39:f0:87:71:39:fa:ed:47:82:4d:0d: a8:22:fd:f0:ef:a2:9b:de:10:42:3e:13:aa:cc:76:8d:e3:86: aa:1d:12:63:39:89:f2:64:c5:20:5a:9b:1f:79:88:45:b2:9a: ff:1a:53:45:cc:36:25:83:c4:21:a1:42:ae:e7:f3:31:3a:3e: 5f:0f:5f:71:57:ab:fe:d3:25:2a:8a:5f:22:ef:01:09:bd:13: 01:51:53:a9:bc:8c:09:cc:71:c2:8c:9d:42:1e:9f:9e:76:40: c3:56:b5:f2:64:3b:be:f3:a6:81:26:e8:67:63:86:8e:7f:81: 20:d2:83:7e:34:ed:0d:a1:d0:7a:3a:25:b7:a4:cb:1b:dc:27: 9c:92:ff:56:b1:1c:4f:bd:0f:1c:2b:62:34:33:0f:1a:5d:5c: 12:b1:f6:ea:f4:a5:d4:30:88:02:01:82:35:02:5b:4c:c7:18: be:2c:05:62:a7:44:13:89:ad:d4:1e:3b:82:30:d1:5f:8e:11: da:bd:3f:65:50:72:76:44:e6:2c:1b:12:a2:2f:99:8e:d8:33: 2a:57:8b:86:d7:ba:a8:ce:ad:9d:83:44:cc:1c:a2:d9:8f:a7: 7c:45:55:d8:da:85:88:00:b2:e0:70:68:9d:8e:b4:d5:d5:fb: 88:f8:97:c9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yhfSOnFSE2Akkk1OoRwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWE4MjNjNjQyNzFmNzk2OTQ2YTQ2ODI1OTZlNzMyODM1Y2M0ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho0u3NELqyAIQA3PdJJgO/JIELgQ VDQU/e2yqn1tri3He0rQav0Y8biyhOkaD8+VDbrJGNTac9lEfs///QjYPu7kF7l6 FewsA2/L4/dEKatL4jdd3EvgrRfq7xH+7a1yY7T0MXv/WlUgkrT1oFHWmmrXjw9H HMCxFiDLsiMTuAf9wgFVt/ifIx74N8IjYis2afaetpiSyl4ugx6udFcrwQFBNEql 4Fuww7bldOZ1pAQosK9kvmYMSvwDfqgvEzrRkTRwsDnKV1LPrVhN/FySZN5GPcRc IV+UTrlbJbdyaoBDOLstR01ab7rWGRMjzizOf41/g/FbPOlRfmOxnWxfwQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBGoI8ZCcfeWlGpGgllucyg1zE7IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzIzZGRk Yy1hZDRhLTRlMzItOTljMC0yNGZiMjRiNWFlNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMjNkZGRj LWFkNGEtNGUzMi05OWMwLTI0ZmIyNGI1YWU1Yi8xL0VhZ2p4a0p4OTVhVWFrYUNX VzV6S0RYTVRzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDBAjANBgkqhkiG9w0BAQsFAAOCAQEAbPBhCkSBqTnw h3E5+u1Hgk0NqCL98O+im94QQj4Tqsx2jeOGqh0SYzmJ8mTFIFqbH3mIRbKa/xpT Rcw2JYPEIaFCrufzMTo+Xw9fcVer/tMlKopfIu8BCb0TAVFTqbyMCcxxwoydQh6f nnZAw1a18mQ7vvOmgSboZ2OGjn+BINKDfjTtDaHQejolt6TLG9wnnJL/VrEcT70P HCtiNDMPGl1cErH26vSl1DCIAgGCNQJbTMcYviwFYqdEE4mt1B47gjDRX44R2r0/ ZVBydkTmLBsSoi+ZjtgzKleLhte6qM6tnYNEzByi2Y+nfEVV2NqFiACy4HBonY60 1dX7iPiXyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:06 2026 by rpki-client