This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer File: Ez7rn3q6GeA7E2basIg_NlP8A74.cer (raw, json) Hash identifier: GmImMeJnwrvxxCopnwKFEvV5MacFqQYExs84vvCcWVM= Subject key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D03D27B2F6B3CEBA4AAEF387CA70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212518 IP: 2001:678:e8c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d0:3d:27:b2:f6:b3:ce:ba:4a:ae:f3:87:ca:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:10:7c:2c:67:45:3e:23:17:ca:fe:9f:63: 03:d1:c9:6d:1a:3b:7b:4e:12:16:5a:a6:d6:b9:5f: 54:07:37:05:9f:38:43:98:00:53:b4:0b:cc:e1:53: 16:85:3a:16:a3:f1:cd:22:f9:13:68:bb:2a:dd:fb: 02:04:2b:45:c5:ae:b0:65:0e:59:e0:fc:b1:bd:6a: 5b:29:2b:7f:b1:19:8f:32:c9:a2:d4:e9:d3:86:25: 00:8d:c7:30:8a:44:c7:1c:93:51:3f:cf:8f:1d:8d: 38:0c:22:50:3d:3d:2a:8a:72:7e:73:04:9e:9f:cf: b8:1f:94:81:13:0b:84:6f:62:5a:4f:a9:d3:5e:dd: 82:63:4b:13:7b:f5:9b:a2:3d:97:f3:8a:ee:74:f7: 18:02:40:76:36:63:03:88:7f:b3:3c:74:b4:6b:0e: ef:7f:65:4e:31:2d:2f:30:8c:c7:06:5e:fe:5b:63: 53:87:8b:19:f8:ec:9b:11:ab:86:a5:31:e8:f0:de: 6a:38:f7:29:fe:c3:df:3c:e1:2b:73:ef:44:4c:f4: 7c:17:6a:6e:40:c2:81:87:54:a4:05:f4:29:b7:04: 55:99:8b:a4:5b:30:e4:d8:8a:4f:50:5e:9e:02:a5: 5a:6a:28:c6:0a:64:38:c0:67:60:f2:42:84:fb:f1: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e8c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212518 Signature Algorithm: sha256WithRSAEncryption 6f:f8:94:60:ff:b9:41:20:15:30:19:8b:9f:9a:18:d8:ea:cc: 99:a8:69:ad:19:d9:73:e0:88:6d:46:71:77:f3:70:25:3a:8c: 6e:31:42:18:34:df:96:1c:ed:79:c1:96:52:44:f3:32:b4:03: 0d:37:4b:31:6c:c0:1f:b5:0c:8b:b8:0d:31:97:a6:ab:7b:0a: 8d:78:6a:93:e5:31:b0:1b:08:38:01:45:0b:0a:73:9a:8a:dc: c5:45:cb:14:09:0c:37:16:5a:53:e4:85:01:b2:9b:2f:c4:1b: 5b:3d:87:26:7b:8a:e2:68:4e:d8:62:31:24:64:60:6a:98:e1: 04:1e:6b:91:55:e8:5a:2f:ea:fd:21:fe:c6:93:9d:11:15:b3: 54:17:73:52:57:aa:2d:10:7e:11:12:d0:18:2c:c3:d7:a9:85: 34:fd:d5:b7:96:0a:d8:3b:14:28:6a:96:a9:87:5c:6c:ae:6b: e9:63:09:18:e2:52:17:95:7a:fb:c6:0c:4c:a5:38:c3:c8:35: f8:bd:06:88:83:ad:24:4a:6e:48:ec:46:bc:f1:0d:09:1f:71: 53:a0:7c:fa:a2:4f:a2:55:e6:43:bf:58:37:74:a0:f8:8b:47: 9e:46:4a:00:65:71:ec:e4:a7:25:c9:ca:15:83:71:9d:9c:0e: 4c:25:35:ca -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3WNA9J7L2s866Sq7zh8pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNlZWI5ZjdhYmExOWUwM2IxMzY2ZGFiMDg4M2YzNjUzZmMwM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivIQfCxnRT4jF8r+n2MD0cltGjt7 ThIWWqbWuV9UBzcFnzhDmABTtAvM4VMWhToWo/HNIvkTaLsq3fsCBCtFxa6wZQ5Z 4PyxvWpbKSt/sRmPMsmi1OnThiUAjccwikTHHJNRP8+PHY04DCJQPT0qinJ+cwSe n8+4H5SBEwuEb2JaT6nTXt2CY0sTe/Wboj2X84rudPcYAkB2NmMDiH+zPHS0aw7v f2VOMS0vMIzHBl7+W2NTh4sZ+OybEauGpTHo8N5qOPcp/sPfPOErc+9ETPR8F2pu QMKBh1SkBfQptwRVmYukWzDk2IpPUF6eAqVaaijGCmQ4wGdg8kKE+/HwQQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFBM+6596uhngOxNm2rCIPzZT/AO+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzVlZjll MC03YTAwLTRmY2EtYmVhYS02NmI2MjRlYWU3OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvNWVmOWUw LTdhMDAtNGZjYS1iZWFhLTY2YjYyNGVhZTc4Yy8xL0V6N3JuM3E2R2VBN0UyYmFz SWdfTmxQOEE3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA6MMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM+JjANBgkqhkiG9w0BAQsFAAOCAQEAb/iUYP+5QSAVMBmLn5oY2OrMmahp rRnZc+CIbUZxd/NwJTqMbjFCGDTflhztecGWUkTzMrQDDTdLMWzAH7UMi7gNMZem q3sKjXhqk+UxsBsIOAFFCwpzmorcxUXLFAkMNxZaU+SFAbKbL8QbWz2HJnuK4mhO 2GIxJGRgapjhBB5rkVXoWi/q/SH+xpOdERWzVBdzUleqLRB+ERLQGCzD16mFNP3V t5YK2DsUKGqWqYdcbK5r6WMJGOJSF5V6+8YMTKU4w8g1+L0GiIOtJEpuSOxGvPEN CR9xU6B8+qJPolXmQ79YN3Sg+ItHnkZKAGVx7OSnJcnKFYNxnZwOTCU1yg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:20 2026 by rpki-client