This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer File: EdJ3EZBuQdC_164BvAo40-eeJgE.cer (raw, json) Hash identifier: fpjV7cx48OHeK5dLT4h+umX59Clu7eS5bMfZPs8pcHU= Subject key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6ECFB9CBF9B0D4002BC1325B4885C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201266 IP: 185.80.84.0/22 IP: 2a05:7bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:fb:9c:bf:9b:0d:40:02:bc:13:25:b4:88:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:ce:bf:79:d9:2e:28:c5:11:ef:07:61:8e: 63:47:bb:b7:96:bc:72:0e:e9:cd:e0:70:33:c3:85: 68:1b:8c:5e:77:51:f3:27:33:e3:d7:b2:66:26:c9: 42:fa:d1:7d:4f:e5:db:76:ce:a7:07:3d:9f:f5:a7: ca:27:8e:f5:93:c6:4b:7c:ec:64:ef:81:f1:ad:b5: 89:5d:ad:4a:bb:74:bf:f9:e4:34:37:33:ea:60:2b: 88:cd:36:49:5d:4c:eb:76:68:49:de:18:fd:22:a1: 78:d1:26:3f:a6:1a:08:f0:0a:84:80:5f:a4:45:d6: 6a:a3:47:8f:0f:1b:e5:77:96:ee:3c:99:74:4b:ca: a0:f7:2c:d7:44:27:ed:9e:fa:7f:61:78:c5:98:06: b6:e1:f0:d5:c6:a2:71:de:6b:1b:3b:10:08:9b:9b: 2a:1c:37:3f:f3:4e:f7:f1:5a:24:7b:7f:f9:9f:71: 17:cb:7f:c3:eb:9f:3e:08:9d:b6:71:f2:56:f9:77: 65:a0:70:50:15:2d:71:59:ce:26:3b:c6:5f:2c:db: 90:e3:18:57:3b:70:40:36:4f:90:a9:14:8e:fd:75: a0:1f:a2:02:6d:fc:34:7c:6b:9d:0d:8e:27:6e:04: 82:f8:b2:a0:c4:12:23:b7:80:d4:eb:3a:49:b1:bb: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.84.0/22 IPv6: 2a05:7bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201266 Signature Algorithm: sha256WithRSAEncryption 61:f6:b9:3a:fa:93:d4:53:71:dd:01:d8:fd:f6:5f:6c:53:ca: 57:36:b3:a5:62:1c:97:f5:65:01:56:ac:5d:d3:10:6a:64:30: 36:87:2d:79:c8:a0:43:f0:b4:d5:1b:4b:20:33:0e:c0:5b:ce: ed:6c:91:d8:b1:22:09:7e:da:97:b8:0f:55:3f:11:c4:d4:7a: 85:8c:5b:bf:9d:f0:f8:7a:d9:cf:7b:65:7a:1d:cd:9d:e5:23: 9a:e0:df:9c:58:75:20:99:66:9f:8e:98:aa:75:66:cc:87:17: 6f:db:43:90:f0:cc:68:bc:0d:6a:39:65:bf:00:1f:55:28:52: b1:b1:70:c1:45:3c:5e:50:57:f3:70:25:2d:d6:81:2b:30:ba: 7a:f7:e2:e6:f9:a7:c6:52:0a:50:d4:40:24:f4:1f:41:90:c7: 8f:a7:8c:1c:58:c0:51:1c:3c:16:aa:a4:44:dd:7d:c7:b6:7b: a9:55:49:e8:1f:59:4f:00:1f:e4:87:76:33:8a:a3:e9:8e:6e: 81:f5:2a:57:62:04:43:f9:9a:3d:6b:ff:7d:70:11:8c:76:46: b1:4c:80:54:94:d1:82:de:c1:17:30:c1:c4:f7:97:17:1f:9d: 10:c8:68:e0:0e:4d:7e:d0:6d:28:10:e3:1f:7d:5f:be:ca:0c: 10:e0:2b:ec -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xuz7nL+bDUACvBMltIhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQyNzcxMTkwNmU0MWQwYmZkN2FlMDFiYzBhMzhkM2U3OWUyNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw7Ov3nZLijFEe8HYY5jR7u3lrxy DunN4HAzw4VoG4xed1HzJzPj17JmJslC+tF9T+Xbds6nBz2f9afKJ471k8ZLfOxk 74HxrbWJXa1Ku3S/+eQ0NzPqYCuIzTZJXUzrdmhJ3hj9IqF40SY/phoI8AqEgF+k RdZqo0ePDxvld5buPJl0S8qg9yzXRCftnvp/YXjFmAa24fDVxqJx3msbOxAIm5sq HDc/80738Voke3/5n3EXy3/D658+CJ22cfJW+XdloHBQFS1xWc4mO8ZfLNuQ4xhX O3BANk+QqRSO/XWgH6ICbfw0fGudDY4nbgSC+LKgxBIjt4DU6zpJsbtlawIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBHSdxGQbkHQv9euAbwKONPnniYBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzc1YWQ2 Ny02ZjQ4LTQ5YzUtYmY0YS1mYWE3NDEyN2RjNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNzVhZDY3 LTZmNDgtNDljNS1iZjRhLWZhYTc0MTI3ZGM3OC8xL0VkSjNFWkJ1UWRDXzE2NEJ2 QW80MC1lZUpnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVBUMA0EAgACMAcDBQMqBXvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSMjANBgkqhkiG9w0BAQsFAAOCAQEAYfa5OvqT1FNx 3QHY/fZfbFPKVzazpWIcl/VlAVasXdMQamQwNoctecigQ/C01RtLIDMOwFvO7WyR 2LEiCX7al7gPVT8RxNR6hYxbv53w+HrZz3tleh3NneUjmuDfnFh1IJlmn46YqnVm zIcXb9tDkPDMaLwNajllvwAfVShSsbFwwUU8XlBX83AlLdaBKzC6evfi5vmnxlIK UNRAJPQfQZDHj6eMHFjAURw8FqqkRN19x7Z7qVVJ6B9ZTwAf5Id2M4qj6Y5ugfUq V2IEQ/maPWv/fXARjHZGsUyAVJTRgt7BFzDBxPeXFx+dEMho4A5NftBtKBDjH31f vsoMEOAr7A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:16 2026 by rpki-client