This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer File: Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer (raw, json) Hash identifier: ciXE9v0z9UP61G3CprHmF/jMGZctTPKA1bbYv0cOhTg= Subject key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77FC335D47C24BD7A6650C24095C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210585 IP: 185.23.208.0/22 IP: 2a00:6e60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7f:c3:35:d4:7c:24:bd:7a:66:50:c2:40:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:09:96:81:b1:45:6e:ed:c0:05:54:30:d3: 9b:97:fd:a5:9a:99:49:6f:13:35:12:38:98:5f:56: 98:48:b0:79:58:d7:19:3a:6f:7f:27:00:41:33:ad: 05:46:0b:dd:4b:e7:68:6a:53:d0:8f:59:75:31:9f: dc:80:32:51:00:ad:b5:eb:68:ce:78:d0:c3:21:76: e2:df:4d:c3:08:31:87:e5:32:72:b7:34:38:07:07: 38:73:60:f2:8b:9c:bf:9f:7b:a0:1f:69:0a:f5:ae: 23:fc:0f:79:03:55:e6:6f:bd:0e:2c:43:5d:90:39: 50:31:dd:04:ba:aa:e7:4d:f0:f4:e1:5e:7f:fb:20: 3b:60:46:6c:68:cb:d4:4e:36:22:f7:08:a2:ee:a5: 83:d5:a0:69:84:79:a3:b0:07:fd:e7:32:66:ba:60: 7f:b1:79:6e:e6:a1:92:fb:33:95:ec:e3:d0:bd:1a: e4:5e:6a:47:64:7e:2a:59:89:35:dd:a5:f9:b1:7e: 08:64:16:7a:53:da:a9:46:28:7e:0e:64:1f:09:da: 96:43:9d:8d:4c:f4:13:86:fc:13:a8:56:f2:d0:b6: 4f:6d:79:05:ce:a7:be:94:55:6f:a6:07:f0:e0:11: 71:99:8e:96:06:46:e7:3a:de:4c:57:6b:f8:ef:25: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.208.0/22 IPv6: 2a00:6e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210585 Signature Algorithm: sha256WithRSAEncryption 4e:22:42:1d:55:51:83:fa:d3:e2:8f:4e:64:89:b1:f4:7a:d8: ef:fb:8f:45:15:da:47:b4:04:d0:01:3c:a5:57:b6:b3:1d:ae: 24:a3:f2:53:b7:f4:91:77:52:7b:fa:42:79:34:58:5c:f6:2a: ca:33:68:aa:b9:b6:e8:fc:2b:09:16:82:79:36:6a:cb:cb:49: 2e:77:e7:a4:df:67:e6:c0:8c:cc:e9:ed:ac:cc:ff:a3:a1:c2: 9e:d2:b1:cb:ca:aa:c5:7f:cf:5c:fb:31:4a:1f:1b:38:4a:dc: 46:21:ac:02:d9:78:d9:0f:d4:3f:92:75:41:b8:23:47:f2:f3: 0d:de:e2:63:f4:74:f5:44:03:ef:39:a1:08:5c:99:57:41:da: ce:3f:60:fa:b1:99:30:43:b8:00:65:e6:08:8a:1b:b7:c9:b4: 5f:25:c6:0c:ef:46:f4:38:68:e9:54:83:3b:d2:b9:88:42:f1: 3c:35:4a:5a:4f:c3:be:58:53:59:fc:6a:60:69:a9:8d:33:e5: 61:80:0a:dc:82:08:30:af:1d:a7:25:1a:78:10:ba:f3:68:a5: 4a:54:13:a7:f5:6e:74:c6:8f:40:ee:db:9e:e2:00:c4:e5:6b: 31:12:b6:55:08:d8:73:89:e4:fc:fa:c7:34:d5:9c:9a:f9:63: 06:70:5f:14 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x3/DNdR8JL16ZlDCQJXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNmNDU2ZDJiODJjYzZkODBiN2IxYWM1NzFiNDc4N2YxNTY5YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WEJloGxRW7twAVUMNObl/2lmplJ bxM1EjiYX1aYSLB5WNcZOm9/JwBBM60FRgvdS+doalPQj1l1MZ/cgDJRAK2162jO eNDDIXbi303DCDGH5TJytzQ4Bwc4c2Dyi5y/n3ugH2kK9a4j/A95A1Xmb70OLENd kDlQMd0EuqrnTfD04V5/+yA7YEZsaMvUTjYi9wii7qWD1aBphHmjsAf95zJmumB/ sXlu5qGS+zOV7OPQvRrkXmpHZH4qWYk13aX5sX4IZBZ6U9qpRih+DmQfCdqWQ52N TPQThvwTqFby0LZPbXkFzqe+lFVvpgfw4BFxmY6WBkbnOt5MV2v47yUsCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBM/RW0rgsxtgLexrFcbR4fxVptgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2QwMDIx MC1kNjg1LTQ4YjItOGU1My1iYjJmZGNhNzgyNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZDAwMjEw LWQ2ODUtNDhiMi04ZTUzLWJiMmZkY2E3ODI0NS8xL0V6OUZiU3VDekcyQXQ3R3NW eHRIaF9GV20yQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRfQMA0EAgACMAcDBQAqAG5gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2mTANBgkqhkiG9w0BAQsFAAOCAQEATiJCHVVRg/rT 4o9OZImx9HrY7/uPRRXaR7QE0AE8pVe2sx2uJKPyU7f0kXdSe/pCeTRYXPYqyjNo qrm26PwrCRaCeTZqy8tJLnfnpN9n5sCMzOntrMz/o6HCntKxy8qqxX/PXPsxSh8b OErcRiGsAtl42Q/UP5J1QbgjR/LzDd7iY/R09UQD7zmhCFyZV0Hazj9g+rGZMEO4 AGXmCIobt8m0XyXGDO9G9Dho6VSDO9K5iELxPDVKWk/DvlhTWfxqYGmpjTPlYYAK 3IIIMK8dpyUaeBC682ilSlQTp/VudMaPQO7bnuIAxOVrMRK2VQjYc4nk/PrHNNWc mvljBnBfFA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:45 2026 by rpki-client