This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer File: El8g0e9f8vAdgiSGvZ7or01la38.cer (raw, json) Hash identifier: mjpCDNrLxltJzofmFpFm9gwkydUXRYnO9zWrZU2or7g= Subject key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5130C500EC480515BAC0304098CB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49667 IP: 91.213.106.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:13:0c:50:0e:c4:80:51:5b:ac:03:04:09:8c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:ac:3c:a3:2f:99:75:4a:d2:3a:23:8b:fc: a0:06:e6:41:dd:8a:1e:8e:64:f6:85:39:2f:97:d7: 0e:a3:cc:c0:f2:f0:ad:d8:47:2f:98:8b:67:ca:6a: 19:17:88:06:91:9d:de:90:51:ab:73:07:cc:9d:99: 4f:dc:e6:48:04:7e:93:c3:bb:8d:b8:9d:fb:11:99: b4:2b:17:b0:5f:3d:bf:d0:2c:e0:d4:6f:2b:25:db: 5e:c8:53:a3:4f:37:17:60:eb:3a:c6:af:7d:f3:e0: 2c:0f:ca:a4:16:bf:ca:eb:50:4c:e7:76:41:40:b6: f2:69:28:67:47:8a:66:02:a4:65:57:ba:91:95:15: 49:1f:6e:1b:0e:af:83:0d:c6:91:fe:f6:07:c1:36: 6b:25:ae:ce:83:d6:81:ed:63:07:5a:94:50:02:a7: a6:f3:e3:2e:1e:23:c6:39:96:0a:4b:2b:86:72:d6: 0b:bc:6a:e2:96:c6:f2:50:9a:74:d1:3c:2c:d6:d9: 8c:68:9d:84:72:a5:39:59:19:fc:7d:db:ad:6b:51: 01:33:b3:b7:37:59:7e:5e:90:56:c1:0e:40:80:04: 74:25:40:42:3e:ab:63:c5:c9:50:82:50:d1:81:b8: c3:1d:47:e2:23:d1:52:f5:9a:51:ac:c3:72:63:7e: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.106.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49667 Signature Algorithm: sha256WithRSAEncryption a2:08:5a:93:8b:6d:64:3b:9e:bc:90:06:90:e0:77:6d:3b:cc: 76:96:c1:9b:ac:78:ae:ac:00:23:72:d0:be:67:95:37:cd:55: 59:6f:98:ec:bc:3e:b7:0c:28:bc:4f:3a:8b:b1:da:0f:97:38: 1b:6d:89:ea:5e:fe:2c:2e:39:e4:1d:d1:af:38:48:c6:15:e3: c3:73:45:6e:cd:38:2a:77:2d:ae:ff:1b:c6:6b:ad:5a:b0:ad: ca:2e:f8:ec:16:15:d6:20:6d:cf:f1:b8:1c:ed:a1:84:65:46: 5f:d6:1a:15:bc:c0:96:e4:31:ad:67:46:a2:87:20:88:80:0d: 8e:08:16:f3:c3:ce:eb:49:37:12:60:2e:c9:da:fe:56:72:47: f9:94:dd:8b:66:af:1d:be:d1:2c:4f:bb:1c:b9:d4:46:ed:93: 62:8d:7b:b1:43:ca:43:50:53:8b:af:c7:ad:e1:86:64:ab:f9: de:93:76:dc:12:d7:67:64:18:4f:5e:3b:1b:ba:3e:37:5a:14: 94:04:1c:82:bc:6e:82:ed:52:64:ac:6b:3f:4f:65:5a:47:70: 6d:d9:b6:f6:db:73:c7:2d:3f:47:58:93:8a:0c:0f:73:1a:0e: be:38:ef:bc:74:09:d4:2e:cf:b7:86:98:b6:a6:94:fb:d5:7c: a2:fb:d3:8e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pRMMUA7EgFFbrAMECYywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjVmMjBkMWVmNWZmMmYwMWQ4MjI0ODZiZDllZThhZjRkNjU2YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdqsPKMvmXVK0joji/ygBuZB3Yoe jmT2hTkvl9cOo8zA8vCt2EcvmItnymoZF4gGkZ3ekFGrcwfMnZlP3OZIBH6Tw7uN uJ37EZm0KxewXz2/0Czg1G8rJdteyFOjTzcXYOs6xq998+AsD8qkFr/K61BM53ZB QLbyaShnR4pmAqRlV7qRlRVJH24bDq+DDcaR/vYHwTZrJa7Og9aB7WMHWpRQAqem 8+MuHiPGOZYKSyuGctYLvGrilsbyUJp00Tws1tmMaJ2EcqU5WRn8fduta1EBM7O3 N1l+XpBWwQ5AgAR0JUBCPqtjxclQglDRgbjDHUfiI9FS9ZpRrMNyY37bywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBJfINHvX/LwHYIkhr2e6K9NZWt/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzJkYzRk Ny1iYzM0LTQ1ODQtYjBmOS1mZTlhMDY0MTgxYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMmRjNGQ3 LWJjMzQtNDU4NC1iMGY5LWZlOWEwNjQxODFiMi8xL0VsOGcwZTlmOHZBZGdpU0d2 WjdvcjAxbGEzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDCAzANBgkqhkiG9w0BAQsFAAOCAQEAoghak4ttZDuevJAGkOB3bTvMdpbBm6x4 rqwAI3LQvmeVN81VWW+Y7Lw+twwovE86i7HaD5c4G22J6l7+LC455B3RrzhIxhXj w3NFbs04Knctrv8bxmutWrCtyi747BYV1iBtz/G4HO2hhGVGX9YaFbzAluQxrWdG oocgiIANjggW88PO60k3EmAuydr+VnJH+ZTdi2avHb7RLE+7HLnURu2TYo17sUPK Q1BTi6/HreGGZKv53pN23BLXZ2QYT147G7o+N1oUlAQcgrxugu1SZKxrP09lWkdw bdm29ttzxy0/R1iTigwPcxoOvjjvvHQJ1C7Pt4aYtqaU+9V8ovvTjg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:47 2026 by rpki-client