This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer File: _edsqF6WVBpa3Tysrx5eEU-qR-8.cer (raw, json) Hash identifier: 6EwXFfLoWw1WprjKH2eyvwM8g7lytvBLUVcztIBEKWM= Subject key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F28106D8F7F85753108DE8EF72FE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43370 AS: 209665 IP: 37.46.48.0/22 IP: 37.77.128.0/24 IP: 37.221.202.0/24 IP: 37.221.207.0/24 IP: 46.34.130.0/23 IP: 46.34.146.0/23 IP: 62.32.78.0/24 IP: 62.32.84.0/23 IP: 62.32.92.0/23 IP: 79.142.93.0 -- 79.142.95.255 IP: 95.161.184.0/22 IP: 95.161.196.0/22 IP: 95.161.224.0/22 IP: 178.16.157.0/24 IP: 185.244.132.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:28:10:6d:8f:7f:85:75:31:08:de:8e:f7:2f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:c1:09:76:4f:9f:e4:d4:2a:90:28:97:81: d5:8f:52:39:13:95:53:31:66:45:7c:12:ff:d2:3b: 0a:51:51:30:97:e5:68:19:a0:b8:af:7e:ef:22:de: 47:ca:d5:10:25:c5:cb:1b:68:4d:7c:2f:92:b2:7b: e8:db:da:a7:d0:28:52:c8:3e:67:5a:3e:22:b7:63: 53:4c:5f:a7:d6:52:fe:db:1d:88:fb:7f:7e:e6:7b: 55:4e:e8:a1:60:23:b3:27:28:79:c7:50:5f:6e:a0: 04:92:0a:f6:60:02:fa:7a:b3:1b:ca:7f:db:0f:82: 7e:d3:08:ad:b3:19:c1:97:b4:31:6e:ec:d7:a7:cf: 22:66:b8:e7:78:44:e1:0b:e5:0d:bc:6c:23:07:25: 84:b6:94:36:fe:fe:15:97:7d:54:9d:02:1f:8b:cb: 94:04:5e:40:20:db:27:bb:b7:6d:50:de:04:0b:ca: 71:ce:5a:0d:75:21:78:78:38:3b:e1:80:b1:29:40: 04:93:aa:a3:60:bc:10:d2:b9:32:eb:3f:39:4e:12: 0b:fc:70:a2:05:f5:ed:1f:12:91:53:a5:83:2e:04: 71:b0:73:e4:ba:41:c8:4d:d8:50:1e:6e:af:c7:e3: 3c:5d:98:50:3f:41:d1:64:c3:fc:9b:78:f3:43:a7: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.48.0/22 37.77.128.0/24 37.221.202.0/24 37.221.207.0/24 46.34.130.0/23 46.34.146.0/23 62.32.78.0/24 62.32.84.0/23 62.32.92.0/23 79.142.93.0-79.142.95.255 95.161.184.0/22 95.161.196.0/22 95.161.224.0/22 178.16.157.0/24 185.244.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43370 209665 Signature Algorithm: sha256WithRSAEncryption 18:4b:48:85:47:59:59:8e:90:b2:d3:47:63:85:55:46:cf:c7: 53:a1:be:25:1a:42:1a:88:d6:2f:09:36:03:36:54:8f:ca:f5: d4:3e:19:ee:53:37:46:d3:3e:2f:ba:6f:8b:02:ae:14:71:59: 46:a4:75:d4:7b:7b:84:88:27:4c:45:dc:05:8a:c0:73:b9:ed: 59:14:1a:eb:df:65:24:e2:11:38:72:a3:72:06:26:cc:6e:c7: cb:7c:bf:ff:0f:6d:3c:61:61:f6:b7:03:b1:36:f1:ba:90:ce: 1e:8c:ac:4d:b0:a0:a5:fa:25:31:ca:98:5f:60:4b:9f:67:81: 75:15:f3:57:54:fe:81:8d:67:69:75:35:9a:b1:e3:86:eb:45: c3:3e:d5:b4:b0:f9:59:23:ff:c8:e9:d9:66:1c:bf:79:d9:2e: 5a:74:31:da:a3:71:64:52:28:4f:cc:53:94:8e:db:c4:55:94: 79:19:5f:f0:d6:6a:b8:ad:56:26:62:98:00:de:94:2b:63:88: 62:d6:36:2f:9d:f8:d1:ef:70:eb:ac:e7:ff:17:3e:e4:54:04: 88:c7:68:e2:e8:ba:c9:0d:29:04:3a:a6:8f:e2:b0:68:87:51: 78:52:d6:e5:6f:d2:76:a9:4e:56:32:3b:37:41:3d:80:43:7a: 07:8c:08:6d -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZt8fygQbY9/hXUxCN6O9y/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGU3NmNhODVlOTY1NDFhNWFkZDNjYWNhZjFlNWUxMTRmYWE0N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubTBCXZPn+TUKpAol4HVj1I5E5VT MWZFfBL/0jsKUVEwl+VoGaC4r37vIt5HytUQJcXLG2hNfC+Ssnvo29qn0ChSyD5n Wj4it2NTTF+n1lL+2x2I+39+5ntVTuihYCOzJyh5x1BfbqAEkgr2YAL6erMbyn/b D4J+0witsxnBl7QxbuzXp88iZrjneEThC+UNvGwjByWEtpQ2/v4Vl31UnQIfi8uU BF5AINsnu7dtUN4EC8pxzloNdSF4eDg74YCxKUAEk6qjYLwQ0rky6z85ThIL/HCi BfXtHxKRU6WDLgRxsHPkukHITdhQHm6vx+M8XZhQP0HRZMP8m3jzQ6d1CwIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFP3nbKhellQaWt08rK8eXhFPqkfvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2Y4NTJh Yy05ZTk4LTQ1YjctODc3Zi0yMjllMmNiMGY2NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZjg1MmFj LTllOTgtNDViNy04NzdmLTIyOWUyY2IwZjY2Yy8xL19lZHNxRjZXVkJwYTNUeXNy eDVlRVUtcVItOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHsGCCsGAQUF BwEHAQH/BGwwajBoBAIAATBiAwQCJS4wAwQAJU2AAwQAJd3KAwQAJd3PAwQBLiKC AwQBLiKSAwQAPiBOAwQBPiBUAwQBPiBcMAwDBABPjl0DBAVPjkADBAJfobgDBAJf ocQDBAJfoeADBACyEJ0DBAK59IQwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKlq AgMDMwEwDQYJKoZIhvcNAQELBQADggEBABhLSIVHWVmOkLLTR2OFVUbPx1OhviUa QhqI1i8JNgM2VI/K9dQ+Ge5TN0bTPi+6b4sCrhRxWUakddR7e4SIJ0xF3AWKwHO5 7VkUGuvfZSTiEThyo3IGJsxux8t8v/8PbTxhYfa3A7E28bqQzh6MrE2woKX6JTHK mF9gS59ngXUV81dU/oGNZ2l1NZqx44brRcM+1bSw+Vkj/8jp2WYcv3nZLlp0Mdqj cWRSKE/MU5SO28RVlHkZX/DWaritViZimADelCtjiGLWNi+d+NHvcOus5/8XPuRU BIjHaOLouskNKQQ6po/isGiHUXhS1uVv0napTlYyOzdBPYBDegeMCG0= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:44 2026 by rpki-client