This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer File: Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer (raw, json) Hash identifier: xw9jo59KoJDlQFv0XWbOEgI3mJJYM3SqnbFbt09ER/E= Subject key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37DB72151D602EF3C4166F7F786454 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215245 IP: 31.22.72.0/21 IP: 31.25.11.0/24 IP: 46.247.108.0/23 IP: 62.169.152.0/23 IP: 84.252.120.0/22 IP: 86.54.4.0/23 IP: 89.36.32.0/22 IP: 95.175.150.0/24 IP: 109.175.211.0/24 IP: 185.79.19.0/24 IP: 185.121.132.0/22 IP: 185.144.70.0/23 IP: 185.230.160.0/22 IP: 192.40.69.0/24 IP: 194.46.60.0/24 IP: 194.117.224.0/23 IP: 195.234.126.0/24 IP: 212.232.18.0/23 IP: 2a09:6301::/32 IP: 2a0c:2500::/29 IP: 2a14:6780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:db:72:15:1d:60:2e:f3:c4:16:6f:7f:78:64:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:c4:13:dd:aa:f7:f1:e1:07:80:9b:2c:3d: 43:44:d7:93:93:93:cc:71:db:e0:6d:ff:c4:fb:b3: 8a:30:18:5a:b4:e5:6c:f8:ec:a9:dc:f2:cc:4f:77: 67:80:f3:51:0a:8b:66:06:46:be:ee:28:1d:8d:32: 9d:1e:b5:66:b2:22:13:2f:5d:75:4a:38:6c:03:4f: c1:28:c3:c9:b1:32:77:c4:87:55:c3:e4:ae:77:6e: db:42:34:a5:12:2a:68:cc:45:57:53:d8:98:ef:93: 0b:6c:eb:e8:d5:fd:7c:04:42:07:68:28:fa:1c:b6: c0:5b:6a:57:08:a6:40:0b:d0:e2:80:53:17:67:bd: ee:13:3d:4e:db:ea:96:b0:e2:b9:d8:c3:d0:60:53: ed:21:3c:11:53:07:18:86:ed:d5:9e:2e:6d:a3:52: a9:de:ab:28:48:7a:3a:97:5e:9f:03:fd:6f:18:46: f7:7b:3f:b1:be:2c:61:27:1b:27:0c:71:32:15:7b: c5:8a:40:7e:7d:2d:0e:2b:61:26:b4:a9:86:ac:fc: c7:36:4b:f2:50:17:d1:48:96:e6:f3:f8:dc:27:8d: 99:83:81:01:6a:97:13:5d:fb:8e:fc:12:67:fc:f6: b1:ea:86:9a:bd:dd:08:9a:73:f1:a4:9a:d8:23:01: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.72.0/21 31.25.11.0/24 46.247.108.0/23 62.169.152.0/23 84.252.120.0/22 86.54.4.0/23 89.36.32.0/22 95.175.150.0/24 109.175.211.0/24 185.79.19.0/24 185.121.132.0/22 185.144.70.0/23 185.230.160.0/22 192.40.69.0/24 194.46.60.0/24 194.117.224.0/23 195.234.126.0/24 212.232.18.0/23 IPv6: 2a09:6301::/32 2a0c:2500::/29 2a14:6780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215245 Signature Algorithm: sha256WithRSAEncryption 29:b6:c9:bf:da:45:1a:23:db:1f:f2:65:81:9c:d3:41:35:eb: a4:5c:2c:24:5e:e5:41:64:e4:76:a1:29:de:e8:7a:31:4a:d4: 72:ff:30:ec:7a:b8:8c:b0:49:93:21:25:88:fd:7c:2c:78:1c: 00:68:74:74:60:aa:b3:0e:24:7d:e4:6b:06:d5:fe:83:26:ec: 83:b7:02:2f:af:db:7d:5d:bb:d6:8e:fe:e6:aa:dd:02:5b:88: be:c0:70:30:01:65:80:fd:be:78:0e:2a:90:ea:f9:de:ed:87: 2c:7a:66:bb:84:f0:ce:b8:b9:34:a9:9c:be:48:d0:ba:02:00: 0e:c3:f2:df:35:da:f1:84:79:00:70:c2:2e:53:b0:91:83:93: 0d:a3:f8:15:8f:95:72:80:f5:5a:42:9a:f1:79:15:e4:69:c4: 6c:ce:6c:e6:f2:5e:ac:27:45:b3:b6:c8:66:fc:be:50:ef:72: b0:ab:63:c5:dd:67:d9:0c:f4:1d:0e:23:25:ad:13:f2:6b:6b: 54:7a:71:05:fc:6f:0e:b9:f1:a3:f1:6b:85:46:50:00:c9:a0: cc:11:79:83:d8:c1:d9:e4:66:f5:49:95:55:75:78:2c:4d:9c: 28:96:47:88:3a:11:01:22:97:ac:21:67:29:b6:33:df:97:df: 65:34:fb:88 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISAZt+N9tyFR1gLvPEFm9/eGRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmJlMjljOTU2ODk0YzQ5YzZkNGJlMGVkOTg4ODJiOTBkMWJjNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHvEE92q9/HhB4CbLD1DRNeTk5PM cdvgbf/E+7OKMBhatOVs+Oyp3PLMT3dngPNRCotmBka+7igdjTKdHrVmsiITL111 SjhsA0/BKMPJsTJ3xIdVw+Sud27bQjSlEipozEVXU9iY75MLbOvo1f18BEIHaCj6 HLbAW2pXCKZAC9DigFMXZ73uEz1O2+qWsOK52MPQYFPtITwRUwcYhu3Vni5to1Kp 3qsoSHo6l16fA/1vGEb3ez+xvixhJxsnDHEyFXvFikB+fS0OK2EmtKmGrPzHNkvy UBfRSJbm8/jcJ42Zg4EBapcTXfuO/BJn/Pax6oaavd0ImnPxpJrYIwHcvwIDAQAB o4IDJjCCAyIwHQYDVR0OBBYEFBK+KclWiUxJxtS+DtmIgrkNG8d/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2MyNzg4 Zi04YzhjLTQ3YmItYjkyMi1hYTZlZDRkYWZiM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvYzI3ODhm LThjOGMtNDdiYi1iOTIyLWFhNmVkNGRhZmIzYi8xL0VyNHB5VmFKVEVuRzFMNE8y WWlDdVEwYngzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGkBggrBgEF BQcBBwEB/wSBlDCBkTByBAIAATBsAwQDHxZIAwQAHxkLAwQBLvdsAwQBPqmYAwQC VPx4AwQBVjYEAwQCWSQgAwQAX6+WAwQAba/TAwQAuU8TAwQCuXmEAwQBuZBGAwQC ueagAwQAwChFAwQAwi48AwQBwnXgAwQAw+p+AwQB1OgSMBsEAgACMBUDBQAqCWMB AwUDKgwlAAMFAyoUZ4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0jNMA0GCSqG SIb3DQEBCwUAA4IBAQAptsm/2kUaI9sf8mWBnNNBNeukXCwkXuVBZOR2oSne6Hox StRy/zDseriMsEmTISWI/XwseBwAaHR0YKqzDiR95GsG1f6DJuyDtwIvr9t9XbvW jv7mqt0CW4i+wHAwAWWA/b54DiqQ6vne7Ycsema7hPDOuLk0qZy+SNC6AgAOw/Lf NdrxhHkAcMIuU7CRg5MNo/gVj5VygPVaQprxeRXkacRszmzm8l6sJ0Wztshm/L5Q 73Kwq2PF3WfZDPQdDiMlrRPya2tUenEF/G8OufGj8WuFRlAAyaDMEXmD2MHZ5Gb1 SZVVdXgsTZwolkeIOhEBIpesIWcptjPfl99lNPuI -----END CERTIFICATE-----Generated at Wed Jan 21 10:52:03 2026 by rpki-client