This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer (raw, json) Hash identifier: 21hfL62WzVDF6uJ8SSFfG0jgI/TDn2wINM5jNAhSJlw= Subject key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B359D98023AA153E0F75513B9BD014E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.70.0.0/16 IP: 192.109.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9d:98:02:3a:a1:53:e0:f7:55:13:b9:bd:01:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:ca:82:d0:01:5c:6a:67:f8:4f:df:19:15: 14:42:0c:ef:94:7d:da:bb:23:8b:89:4c:15:16:59: e2:af:cb:2b:25:10:ff:0d:70:8a:2d:55:7c:91:aa: 90:e5:0d:56:63:7d:bd:bb:10:db:5c:c4:e0:45:07: 0d:5b:a8:10:82:7c:d0:65:ad:49:05:a7:9e:23:63: 39:f8:7f:f2:28:ae:17:de:47:33:c7:77:b4:7b:77: b7:f5:96:01:60:83:77:d0:3c:64:88:51:be:d7:36: 32:45:3d:4a:78:1f:06:37:36:e5:de:c4:0c:02:84: 07:65:f2:ce:47:2f:c0:98:78:33:82:b7:11:c1:90: 77:ce:8f:f8:dd:6c:73:68:f2:d7:0a:f2:0d:5a:58: 70:1c:ee:8d:5a:68:1b:23:52:42:c2:7b:c6:3c:8c: 9b:6d:5a:35:11:8a:a3:4d:eb:58:9f:39:7f:4c:25: 8b:b8:24:5c:b5:aa:09:3f:80:a5:fd:fb:75:a2:bd: 82:88:14:69:fe:05:2e:94:15:5b:f3:6a:25:43:0e: ff:e5:2f:44:a4:8f:1b:30:8e:77:02:06:99:81:40: de:8e:57:89:6c:95:0c:51:39:1f:70:9e:26:bc:d5: 41:18:34:1d:af:55:7e:4a:7d:b1:bc:38:0a:42:ed: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.70.0.0/16 192.109.134.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2b:a2:5b:ab:8b:f4:27:76:e1:38:80:1d:10:a6:db:93:ea: ce:fb:8d:39:21:b0:85:7e:0f:5e:13:b0:43:85:e3:a9:73:be: 5b:1b:d7:0d:53:56:a3:cf:bf:dc:f0:6f:fe:c2:cc:cf:c1:7c: ef:4b:8e:ba:6f:d6:3d:61:97:3d:92:66:18:b4:d9:d1:21:bf: 84:5a:df:19:e7:cd:03:a0:d3:70:a6:53:4d:8a:c8:5f:47:25: 7f:e5:3f:7b:96:24:4f:bc:81:68:dd:00:2b:40:4d:8f:39:ed: 99:c3:c9:ed:37:5f:04:1e:ec:06:d3:75:61:b9:4c:64:39:f5: 93:2a:64:f7:df:d6:fd:aa:9b:e4:5a:0b:40:16:bc:8f:7c:45: 11:91:68:f2:2f:63:44:36:87:5b:0a:a1:69:91:68:35:ab:d5: b0:98:d7:8e:18:6b:4c:f8:a4:91:b9:37:e0:d1:42:c9:b6:66: 89:55:a1:55:8a:32:a9:67:d9:37:1d:1e:d9:31:88:7a:13:4a: 01:88:dc:b0:fd:0b:ea:e1:8e:48:14:d6:6c:28:77:62:f6:e2: 6a:8d:46:54:2f:02:c7:84:93:87:4c:e5:0d:8a:c8:53:5c:43: b8:cb:f5:a5:9f:63:11:19:e6:d3:9d:8a:db:ad:a9:0d:69:06: b9:ad:15:6f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt7NZ2YAjqhU+D3VRO5vQFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQ0NzkxMmVmZDQwOWE0NmY3Y2Q0Mjc0MTgwNGM3ZDRmNWUxYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPKgtABXGpn+E/fGRUUQgzvlH3a uyOLiUwVFlnir8srJRD/DXCKLVV8kaqQ5Q1WY329uxDbXMTgRQcNW6gQgnzQZa1J BaeeI2M5+H/yKK4X3kczx3e0e3e39ZYBYIN30DxkiFG+1zYyRT1KeB8GNzbl3sQM AoQHZfLORy/AmHgzgrcRwZB3zo/43WxzaPLXCvINWlhwHO6NWmgbI1JCwnvGPIyb bVo1EYqjTetYnzl/TCWLuCRctaoJP4Cl/ft1or2CiBRp/gUulBVb82olQw7/5S9E pI8bMI53AgaZgUDejleJbJUMUTkfcJ4mvNVBGDQdr1V+Sn2xvDgKQu2gsQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFBHUeRLv1Amkb3zUJ0GATH1PXhrVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzgwMjVm Ni01ZjM4LTRkZGYtOTE3ZC0xMTRjMjQwMGMzZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvODAyNWY2 LTVmMzgtNGRkZi05MTdkLTExNGMyNDAwYzNlMy8xL0VkUjVFdV9VQ2FSdmZOUW5R WUJNZlU5ZUd0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAgUYDBADAbYYwDQYJKoZIhvcNAQELBQADggEB ACcroluri/QnduE4gB0QptuT6s77jTkhsIV+D14TsEOF46lzvlsb1w1TVqPPv9zw b/7CzM/BfO9Ljrpv1j1hlz2SZhi02dEhv4Ra3xnnzQOg03CmU02KyF9HJX/lP3uW JE+8gWjdACtATY857ZnDye03XwQe7AbTdWG5TGQ59ZMqZPff1v2qm+RaC0AWvI98 RRGRaPIvY0Q2h1sKoWmRaDWr1bCY144Ya0z4pJG5N+DRQsm2ZolVoVWKMqln2Tcd HtkxiHoTSgGI3LD9C+rhjkgU1mwod2L24mqNRlQvAseEk4dM5Q2KyFNcQ7jL9aWf YxEZ5tOditutqQ1pBrmtFW8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:34 2026 by rpki-client