This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer File: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer (raw, json) Hash identifier: ek7VDj2afWm223rBRs6iOxeCfTwQQraOV8wcjfnyCC8= Subject key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA4E9A757FC55F5E39BDD5DC573A3AEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:36:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.28.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:4e:9a:75:7f:c5:5f:5e:39:bd:d5:dc:57:3a:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:36:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:76:a5:20:24:3f:45:bc:36:d2:fd:ea:0e: f1:a9:0f:1e:4c:7d:c0:d9:98:2b:13:27:56:59:0f: 1a:16:c2:07:c8:c0:7a:cd:95:8c:30:92:f4:13:97: 60:a1:01:81:c7:4c:8e:42:b1:d4:9f:2a:17:4d:56: 32:81:65:e6:57:6c:a1:55:d1:d5:91:ee:18:53:b6: 81:44:99:98:5b:c3:a5:12:b2:a7:06:78:67:05:49: ba:86:5c:eb:5e:d3:a1:79:d9:b5:df:e8:21:10:cc: c8:d6:da:19:f2:c9:a8:f4:a3:1f:fe:73:11:93:6d: 6b:7a:1b:71:4e:2c:ac:10:0a:71:f0:33:fa:c2:b1: 66:ed:62:f4:90:85:3e:06:38:0c:1e:07:35:a6:95: bc:54:50:75:95:87:42:a3:ae:97:d3:79:59:38:01: 60:de:f0:f0:36:06:d8:49:db:ef:37:f5:d9:47:0e: 35:ae:5b:f1:8e:32:45:d1:51:94:be:30:83:7d:63: 5e:fb:93:6a:f3:36:88:5a:5f:7f:0e:aa:d6:c4:de: 00:77:c9:f0:a2:fc:50:5a:ad:ff:5a:fe:86:64:3d: 4a:ac:14:49:b3:fe:c2:8a:22:c5:39:9c:bd:bb:e4: e0:69:f4:a7:82:b6:4e:db:a0:cf:3d:a0:88:ba:b9: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.80.0/22 Signature Algorithm: sha256WithRSAEncryption 93:89:ae:f8:3b:ed:13:fe:30:61:e2:29:e6:8f:ff:28:41:b1: 44:27:4a:ac:09:6a:bd:a9:2d:ae:c2:3c:05:5b:f3:c5:7c:98: 81:48:78:60:35:9a:fe:95:80:f0:bc:3b:d7:21:d2:32:7a:b2: b5:bb:05:22:f0:bf:b4:d4:c1:5e:1f:63:45:d8:fb:3e:00:5f: 03:1f:2b:cb:20:3f:7a:92:42:48:44:57:4a:d1:a6:97:32:a2: 66:54:d8:54:aa:02:7d:7b:64:96:7a:1c:22:5a:dc:15:96:10: 3e:ea:b8:76:87:ae:0f:8c:7c:4f:0b:37:b9:dc:b9:b2:9c:9d: 3e:4b:04:79:9c:8a:a4:d0:f2:83:ac:4d:53:94:84:59:2b:4c: 9b:b5:ad:8a:f4:1b:ba:a8:8d:83:61:d0:9a:e3:3b:6c:2b:2f: 66:58:93:12:da:9f:b6:4e:e1:b7:af:c0:61:14:bb:a4:a8:04: a3:f4:e7:73:bb:a7:d1:76:fb:11:68:d9:76:9b:64:55:48:4d: e1:fd:d9:ea:47:62:ff:a9:9a:f5:2e:55:5f:a5:cf:29:ad:aa: 6f:81:f2:15:a2:db:4c:65:a2:39:b6:cd:40:6c:87:7d:62:9f: c3:42:1c:d9:3a:9d:6c:45:ed:b3:37:60:ed:4d:0c:ce:13:42: a2:a7:5e:06 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6Tpp1f8VfXjm91dxXOjrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIzNjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmQ5YWQ1ZGI4OTllN2U3ZTNjZmVjZjk3YmM0MmQzOGI3MjYyNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRF2pSAkP0W8NtL96g7xqQ8eTH3A 2ZgrEydWWQ8aFsIHyMB6zZWMMJL0E5dgoQGBx0yOQrHUnyoXTVYygWXmV2yhVdHV ke4YU7aBRJmYW8OlErKnBnhnBUm6hlzrXtOhedm13+ghEMzI1toZ8smo9KMf/nMR k21rehtxTiysEApx8DP6wrFm7WL0kIU+BjgMHgc1ppW8VFB1lYdCo66X03lZOAFg 3vDwNgbYSdvvN/XZRw41rlvxjjJF0VGUvjCDfWNe+5Nq8zaIWl9/DqrWxN4Ad8nw ovxQWq3/Wv6GZD1KrBRJs/7CiiLFOZy9u+TgafSngrZO26DPPaCIurmPuwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBLZrV24mefn48/s+XvELTi3JieaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2FiZjZh ZS1mNmFkLTQzNDEtYmRlMC1lNTQ1MmYxY2Y2YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYWJmNmFl LWY2YWQtNDM0MS1iZGUwLWU1NDUyZjFjZjZhMi8xL0V0bXRYYmlaNS1manotejVl OFF0T0xjbUo1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwRxQMA0GCSqGSIb3DQEBCwUAA4IBAQCTia74 O+0T/jBh4inmj/8oQbFEJ0qsCWq9qS2uwjwFW/PFfJiBSHhgNZr+lYDwvDvXIdIy erK1uwUi8L+01MFeH2NF2Ps+AF8DHyvLID96kkJIRFdK0aaXMqJmVNhUqgJ9e2SW ehwiWtwVlhA+6rh2h64PjHxPCze53LmynJ0+SwR5nIqk0PKDrE1TlIRZK0ybta2K 9Bu6qI2DYdCa4ztsKy9mWJMS2p+2TuG3r8BhFLukqASj9Odzu6fRdvsRaNl2m2RV SE3h/dnqR2L/qZr1LlVfpc8prapvgfIVottMZaI5ts1AbId9Yp/DQhzZOp1sRe2z N2DtTQzOE0Kip14G -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client