This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer File: cEZO_kc3QepObM9sPFo3xm89oXk.cer (raw, json) Hash identifier: yWnkS/96kq1Lw164uD0sWv4nTFBIy7w8UwvPuAz8N6A= Subject key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9C73D51F3ED33F30C61ED8058C015B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:09:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.169.239.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c7:3d:51:f3:ed:33:f3:0c:61:ed:80:58:c0:15:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:09:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:59:4e:4b:d8:78:22:c7:72:49:f6:21:7b: ba:82:20:d9:b7:0f:21:b9:87:d0:08:02:af:43:90: 9f:9e:47:bb:99:16:c3:23:ff:7b:1e:a7:a8:a3:f7: e0:92:f6:12:11:d8:d7:b8:aa:7d:2c:0d:8a:9e:02: 4c:59:9a:fe:0b:ab:4d:ac:33:9d:7b:cb:9e:f2:02: 77:58:98:62:ba:78:98:b0:c0:9e:fa:77:b5:11:9d: 20:ac:b9:69:e6:2c:23:92:0f:45:b5:64:7d:f5:74: 55:ec:b2:06:bc:ef:f0:2c:83:47:3f:b0:f6:f7:2b: ab:11:74:a4:de:04:14:22:80:2f:0c:a9:fd:ed:7e: b7:49:d9:96:9c:ba:28:d7:1d:00:48:9c:ab:8e:ce: e2:d8:5b:d2:37:a3:bf:3d:db:c7:ab:cc:26:eb:8d: c1:dc:1f:88:0b:19:76:81:c8:cc:2e:af:78:7a:0f: ad:b6:a5:a2:b6:be:84:e4:c6:cd:bd:c2:7f:b9:8a: 8d:42:1d:9e:09:0e:c3:80:ba:9a:2f:e3:7a:85:aa: 80:4d:4b:5e:c1:aa:74:d8:ae:15:7d:bf:7c:50:cf: 44:7f:78:f0:14:d3:25:a1:83:8f:45:cb:7a:d0:42: 8b:fa:08:b7:be:34:31:a2:eb:7b:b6:78:91:11:31: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.239.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ca:b1:02:c4:61:00:c2:d6:b0:be:c4:c4:c0:94:36:5b:33: a9:20:dc:c4:3c:e0:4e:bf:69:25:0a:de:b9:fa:04:b2:59:d9: 12:35:61:c0:0f:6a:a9:59:45:cd:d1:1a:01:d1:bf:e6:09:f8: b2:ca:13:67:18:6e:8f:0c:e1:22:59:e9:78:2d:5b:90:b0:1d: ac:d8:3a:23:49:97:01:6b:6b:08:0e:1f:af:7b:ae:84:27:7f: 28:c2:4c:7f:f6:42:d8:dd:5f:1f:4a:94:75:19:90:ae:24:f8: 04:a0:cc:f9:7a:d3:ca:c6:b4:a1:87:71:91:d9:2f:9f:60:c5: ae:d6:c9:da:d2:c7:c8:91:c8:a4:47:af:ad:5d:de:f1:d7:a1: 8e:23:b9:77:dd:27:f3:74:bf:5e:0c:0a:93:f1:bb:ab:61:10: ee:80:97:34:21:85:ac:9a:2e:2f:63:6f:ac:44:99:c9:37:d9: 3c:c4:b3:2b:0e:b8:0f:42:5d:7a:49:5b:7e:e3:b1:5d:2f:85: 1b:57:1e:13:b8:9e:56:2b:3c:2f:5c:1f:da:d9:44:77:39:16: a0:6e:3d:8f:05:f8:f1:ad:68:a9:7d:b3:8c:b1:e2:57:eb:51: 49:6f:ba:0f:88:3a:9c:5c:dc:16:62:4d:96:00:9c:fe:6d:fe: 88:bb:55:e3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv5xz1R8+0z8wxh7YBYwBWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTAwOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDQ2NGVmZTQ3Mzc0MWVhNGU2Y2NmNmMzYzVhMzdjNjZmM2RhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9ZTkvYeCLHckn2IXu6giDZtw8h uYfQCAKvQ5Cfnke7mRbDI/97Hqeoo/fgkvYSEdjXuKp9LA2KngJMWZr+C6tNrDOd e8ue8gJ3WJhiuniYsMCe+ne1EZ0grLlp5iwjkg9FtWR99XRV7LIGvO/wLINHP7D2 9yurEXSk3gQUIoAvDKn97X63SdmWnLoo1x0ASJyrjs7i2FvSN6O/PdvHq8wm643B 3B+ICxl2gcjMLq94eg+ttqWitr6E5MbNvcJ/uYqNQh2eCQ7DgLqaL+N6haqATUte wap02K4Vfb98UM9Ef3jwFNMloYOPRct60EKL+gi3vjQxout7tniRETHDQwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHBGTv5HN0HqTmzPbDxaN8ZvPaF5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2VjNGI4 MC00NmVkLTQzYjUtOWNmYS05YjgwN2RlNjA5MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZWM0Yjgw LTQ2ZWQtNDNiNS05Y2ZhLTliODA3ZGU2MDkwMi8xL2NFWk9fa2MzUWVwT2JNOXNQ Rm8zeG04OW9Yay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwqnvMA0GCSqGSIb3DQEBCwUAA4IBAQCVyrEC xGEAwtawvsTEwJQ2WzOpINzEPOBOv2klCt65+gSyWdkSNWHAD2qpWUXN0RoB0b/m CfiyyhNnGG6PDOEiWel4LVuQsB2s2DojSZcBa2sIDh+ve66EJ38owkx/9kLY3V8f SpR1GZCuJPgEoMz5etPKxrShh3GR2S+fYMWu1sna0sfIkcikR6+tXd7x16GOI7l3 3SfzdL9eDAqT8burYRDugJc0IYWsmi4vY2+sRJnJN9k8xLMrDrgPQl16SVt+47Fd L4UbVx4TuJ5WKzwvXB/a2UR3ORagbj2PBfjxrWipfbOMseJX61FJb7oPiDqcXNwW Yk2WAJz+bf6Iu1Xj -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:17 2026 by rpki-client