This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer File: Es84yOexki9uvz_TQHNc2wQjFBg.cer (raw, json) Hash identifier: rjy0U8ZAVRF7XZQ2zzgVN3n/NrwI0NUvQopo26u3OD4= Subject key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8F30110EEC1D0122632B34B083B8D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16350 IP: 185.6.160.0/22 IP: 217.119.224.0/20 IP: 2a02:1398::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f3:01:10:ee:c1:d0:12:26:32:b3:4b:08:3b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:5f:d5:5b:1b:03:84:ee:9b:48:95:d1:52: 52:24:44:fa:97:70:9b:7f:40:92:19:1e:60:2a:3f: 8c:b9:3d:ed:62:11:8c:6c:7c:34:31:c6:d2:80:57: 4d:3c:43:ad:3a:d2:53:19:53:0d:ef:29:ab:e2:48: 71:3b:d7:88:5c:47:ea:b2:57:76:11:da:4b:ea:87: 1c:a5:90:a5:43:53:a9:15:91:c4:86:53:24:44:62: 76:16:a1:84:35:c5:d2:79:f0:4a:af:17:8c:f1:eb: f4:62:7a:d3:f6:ff:ce:2c:08:25:43:0f:12:7b:84: 0b:8f:55:ed:d7:d0:9f:1c:0c:f3:ef:57:ae:52:0d: c7:c2:e3:dc:3e:55:66:29:ad:35:90:7c:c6:8a:93: 27:db:12:e4:cf:dd:7d:a4:f5:72:42:1b:7c:be:70: e3:db:fe:86:3d:c1:24:0e:1d:9b:80:69:43:a2:f5: 8d:c8:03:86:55:06:e6:6f:ba:7e:b6:6a:43:d9:2d: 11:be:bd:c6:14:48:5e:5b:58:94:5d:38:a6:07:e4: 79:c5:f2:4b:36:dc:aa:2c:4f:90:0e:0b:25:51:98: 86:54:7d:61:78:8d:31:30:fa:ea:5d:0d:34:35:dc: 24:92:8a:8a:3d:5f:05:47:59:79:01:74:57:03:fa: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.160.0/22 217.119.224.0/20 IPv6: 2a02:1398::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16350 Signature Algorithm: sha256WithRSAEncryption 5f:d4:3b:a1:72:37:8e:66:62:d3:b7:75:d4:48:8e:17:90:5f: c3:d9:1d:a2:2a:e5:28:dd:d4:ae:31:a2:70:aa:1d:dd:cd:17: 6f:1e:cb:d9:0a:14:62:0d:15:50:e7:0b:25:56:e9:88:63:3e: be:78:01:da:58:3a:80:54:15:43:6e:30:7c:fc:8c:1e:73:a9: cc:8f:f4:7a:c6:b7:9b:37:a5:b7:8d:ec:f4:f7:d9:cb:ad:19: 25:2c:3c:8c:68:d3:81:a7:2e:d2:c1:e3:3f:95:5d:ce:44:da: d2:b5:04:f9:a5:5e:b4:67:c8:d5:7a:85:37:b8:d9:5b:89:e4: 97:7a:1f:43:16:ea:d1:eb:14:d3:0e:da:d0:a9:dd:36:9f:59: c6:52:3e:eb:b8:c5:cd:cb:8e:7f:51:0e:7c:21:84:fd:5a:4b: b6:bf:ef:9f:a1:32:84:a5:f9:57:e6:ae:79:a8:38:d1:f2:e2: 2f:97:d4:96:07:94:9c:97:cf:19:39:1b:ef:52:ff:6e:f5:36: c8:71:58:b3:66:1c:7e:a2:61:21:f7:bb:5b:a2:e9:24:b4:4f: 62:4a:e0:0d:f1:f4:7b:bc:5e:56:2e:c4:e0:b9:dd:62:87:3c: a6:2d:a4:ea:9d:ae:8a:9b:9b:ae:16:3a:d8:3a:81:7a:1f:1a: 05:b8:91:3c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt6yPMBEO7B0BImMrNLCDuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmNmMzhjOGU3YjE5MjJmNmViZjNmZDM0MDczNWNkYjA0MjMxNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlONf1VsbA4Tum0iV0VJSJET6l3Cb f0CSGR5gKj+MuT3tYhGMbHw0McbSgFdNPEOtOtJTGVMN7ymr4khxO9eIXEfqsld2 EdpL6occpZClQ1OpFZHEhlMkRGJ2FqGENcXSefBKrxeM8ev0YnrT9v/OLAglQw8S e4QLj1Xt19CfHAzz71euUg3HwuPcPlVmKa01kHzGipMn2xLkz919pPVyQht8vnDj 2/6GPcEkDh2bgGlDovWNyAOGVQbmb7p+tmpD2S0Rvr3GFEheW1iUXTimB+R5xfJL NtyqLE+QDgslUZiGVH1heI0xMPrqXQ00NdwkkoqKPV8FR1l5AXRXA/qIWwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFBLPOMjnsZIvbr8/00BzXNsEIxQYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzdmZDZi NC1hNzdkLTRkZWMtYTAzYy1iZTBiYWZiNzgyZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvN2ZkNmI0 LWE3N2QtNGRlYy1hMDNjLWJlMGJhZmI3ODJlZS8xL0VzODR5T2V4a2k5dXZ6X1RR SE5jMndRakZCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuQagAwQE2XfgMA0EAgACMAcDBQAqAhOYMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj/eMA0GCSqGSIb3DQEBCwUAA4IBAQBf1Duh cjeOZmLTt3XUSI4XkF/D2R2iKuUo3dSuMaJwqh3dzRdvHsvZChRiDRVQ5wslVumI Yz6+eAHaWDqAVBVDbjB8/Iwec6nMj/R6xrebN6W3jez099nLrRklLDyMaNOBpy7S weM/lV3ORNrStQT5pV60Z8jVeoU3uNlbieSXeh9DFurR6xTTDtrQqd02n1nGUj7r uMXNy45/UQ58IYT9Wku2v++foTKEpflX5q55qDjR8uIvl9SWB5Scl88ZORvvUv9u 9TbIcVizZhx+omEh97tboukktE9iSuAN8fR7vF5WLsTgud1ihzymLaTqna6Km5uu FjrYOoF6HxoFuJE8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:17 2026 by rpki-client