This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer File: EsMFQE6AtaTXDSHauG_FtrgBqLg.cer (raw, json) Hash identifier: VrlA4sbsk2jkJjrH/EYV+LlTXCM5nKgrLSeMbtPCFWY= Subject key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37FC588CCE7A739336CC8BC06487CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24594 IP: 93.95.120.0/21 IP: 185.120.52.0/22 IP: 2a00:d68::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fc:58:8c:ce:7a:73:93:36:cc:8b:c0:64:87:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:2e:a2:c3:8a:3c:a8:e0:5a:d1:94:53:7b: 46:29:8d:c0:47:d0:24:33:b2:47:b2:a0:00:19:73: 82:e3:f6:67:21:46:e0:61:8c:bb:9d:38:bb:d8:88: 26:c2:fb:4a:21:29:53:41:60:d8:cb:5c:3e:e9:ea: f6:df:8d:3f:1a:bf:e3:de:ec:dd:56:9a:36:e3:69: 34:bd:e6:87:54:ad:85:32:1d:61:d3:9a:18:b7:7a: a3:33:bc:f6:6e:23:71:9a:13:8e:05:00:60:d9:ea: c9:60:f5:cd:2f:fa:82:c1:5d:78:47:b8:f8:70:7e: 41:00:ad:2b:32:66:f1:55:d2:cb:e8:6e:7a:25:28: 71:c3:3c:2a:79:2a:5d:7a:ed:96:5f:41:6f:b5:05: 7b:8e:d8:56:82:e0:9d:c7:33:f3:5a:86:71:fa:68: 39:74:5b:fb:8d:ca:90:c2:c5:71:06:f2:10:4d:7d: 87:b2:f0:c9:a4:d2:bc:95:e2:a3:cd:31:07:b6:b9: 64:18:7c:a7:75:c4:ac:da:54:b7:32:b5:ef:59:10: 6c:17:5b:43:36:39:00:ef:98:30:64:6f:da:33:52: 3d:3d:46:54:86:c7:6b:2f:f8:35:fe:6f:2d:e6:46: 18:83:ae:4f:8d:5a:8f:e2:ec:5a:9b:be:7e:b3:6b: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.120.0/21 185.120.52.0/22 IPv6: 2a00:d68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24594 Signature Algorithm: sha256WithRSAEncryption a7:e8:91:3b:90:da:9b:d3:70:e1:a5:a7:59:9d:0f:b5:a3:fc: 46:67:2f:4c:f6:df:49:cc:44:80:ec:36:96:4f:c2:ac:c0:9f: 79:ae:43:c1:b6:93:3a:ac:4c:50:a2:d7:cc:af:50:7f:f8:7d: aa:f9:84:69:4b:ea:6e:65:92:2b:4c:fc:68:da:72:bd:f7:9a: 92:b4:f6:36:d4:aa:a6:1c:47:ca:72:61:96:95:ea:b7:06:25: f1:b6:f1:bb:22:3e:af:11:f8:e4:31:18:1a:70:80:29:6a:8d: 24:a8:83:24:ed:54:85:7b:58:93:2b:0a:ff:ef:2c:e4:e8:6b: cf:4a:e2:10:c8:12:66:bd:41:96:91:3d:f4:97:a2:68:15:9a: 8a:7d:7a:f3:0c:f0:af:16:c5:f7:e0:2d:7b:17:05:e5:61:ac: e8:f9:27:56:d2:c4:fe:d2:94:68:6f:b3:26:35:b0:7a:5d:29: 64:3e:aa:df:9b:cf:40:e2:7a:a4:d9:2d:a1:f0:2b:32:f8:55: 51:82:ed:38:0e:92:3c:e5:7d:5d:af:31:0a:5b:54:00:37:14: 56:76:8d:be:9b:ac:35:c8:c1:0d:d0:eb:63:5c:70:97:f1:18: f9:fe:ba:90:c3:8f:4e:0d:f1:f6:3b:41:ac:bd:67:5f:6d:10: aa:e9:c0:1f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+N/xYjM56c5M2zIvAZIfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmMzMDU0MDRlODBiNWE0ZDcwZDIxZGFiODZmYzViNmI4MDFhOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQkuosOKPKjgWtGUU3tGKY3AR9Ak M7JHsqAAGXOC4/ZnIUbgYYy7nTi72IgmwvtKISlTQWDYy1w+6er2340/Gr/j3uzd Vpo242k0veaHVK2FMh1h05oYt3qjM7z2biNxmhOOBQBg2erJYPXNL/qCwV14R7j4 cH5BAK0rMmbxVdLL6G56JShxwzwqeSpdeu2WX0FvtQV7jthWguCdxzPzWoZx+mg5 dFv7jcqQwsVxBvIQTX2HsvDJpNK8leKjzTEHtrlkGHyndcSs2lS3MrXvWRBsF1tD NjkA75gwZG/aM1I9PUZUhsdrL/g1/m8t5kYYg65PjVqP4uxam75+s2sahQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFBLDBUBOgLWk1w0h2rhvxba4Aai4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzdjN2U5 MC1jNzgxLTQyYWItOTY5MS1jZTkyM2QxOTUwOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvN2M3ZTkw LWM3ODEtNDJhYi05NjkxLWNlOTIzZDE5NTA4Zi8xL0VzTUZRRTZBdGFUWERTSGF1 R19GdHJnQnFMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXV94AwQCuXg0MA0EAgACMAcDBQAqAA1oMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmASMA0GCSqGSIb3DQEBCwUAA4IBAQCn6JE7 kNqb03DhpadZnQ+1o/xGZy9M9t9JzESA7DaWT8KswJ95rkPBtpM6rExQotfMr1B/ +H2q+YRpS+puZZIrTPxo2nK995qStPY21KqmHEfKcmGWleq3BiXxtvG7Ij6vEfjk MRgacIApao0kqIMk7VSFe1iTKwr/7yzk6GvPSuIQyBJmvUGWkT30l6JoFZqKfXrz DPCvFsX34C17FwXlYazo+SdW0sT+0pRob7MmNbB6XSlkPqrfm89A4nqk2S2h8Csy +FVRgu04DpI85X1drzEKW1QANxRWdo2+m6w1yMEN0OtjXHCX8Rj5/rqQw49ODfH2 O0GsvWdfbRCq6cAf -----END CERTIFICATE-----Generated at Mon Jan 26 21:21:59 2026 by rpki-client