This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer File: e-CvRatOV0VvWgpA36hPjYBhBmQ.cer (raw, json) Hash identifier: VWWPmNMLdWY84268eOGYbzwLKAPCfuTfCFmakY/dUFc= Subject key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5D38714059A38D27D0935DFF773A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59883 IP: 185.67.160.0/22 IP: 2a05:1100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:38:71:40:59:a3:8d:27:d0:93:5d:ff:77:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:aa:a5:ae:3b:c6:73:76:0f:ac:b8:9f:a0: 5b:54:8f:53:0b:55:3e:d3:95:f3:3d:73:3f:04:75: c5:89:3e:bc:ff:7f:ac:a6:37:a6:8c:e6:0d:21:92: 60:50:ef:a2:b7:06:13:00:bc:11:88:29:d2:2d:34: 06:95:c8:fe:1e:27:70:a9:2c:9b:da:4c:30:c4:79: 6e:37:29:61:a6:4b:8f:6f:84:29:8c:c3:bc:80:43: 4d:af:72:8f:9c:f4:ea:88:6c:df:63:6c:a9:46:91: d6:27:84:ba:19:6d:01:9a:69:61:89:30:20:82:1f: 76:77:ed:49:64:19:5c:66:8b:87:3e:36:f7:52:f8: 96:f5:c8:c7:2b:03:0f:87:74:58:6e:35:f5:61:10: 17:dc:dd:7f:ca:49:0b:73:83:4e:87:d6:5d:76:30: 0c:85:35:70:64:b7:f9:ac:64:b2:3f:6b:98:09:93: a2:c9:24:f4:72:9f:51:97:c7:04:d2:b9:b4:aa:24: df:15:95:09:73:54:25:b1:0b:a2:15:ae:12:c0:04: da:5a:80:7c:a9:59:d3:21:a0:44:5b:75:6f:df:cd: 93:9d:9b:3c:e5:93:a8:2c:6a:64:54:fc:19:8b:f0: bc:2a:c0:de:a9:9c:95:04:46:1e:62:93:89:d7:dc: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.160.0/22 IPv6: 2a05:1100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59883 Signature Algorithm: sha256WithRSAEncryption 14:73:34:79:ef:e9:e2:50:d1:56:c5:85:50:76:6b:0c:c1:58: 32:60:23:5b:70:8d:74:43:31:e5:81:c4:c2:42:fc:ff:87:38: 78:ee:fa:1b:35:41:33:a9:ac:f1:c9:a8:19:73:1d:32:3d:7e: f7:2e:da:ce:9d:35:d8:25:a3:56:b0:bd:bf:87:22:66:e1:6d: e4:cb:64:c6:56:12:bd:cb:19:be:f4:b9:4f:b1:56:74:87:7b: 4d:32:b2:1d:ae:24:c8:19:6a:e0:a5:5e:dc:77:95:10:0c:95: 73:46:a4:39:5c:d4:da:9a:47:c1:7e:f5:e6:b3:ca:73:64:62: c9:81:f6:19:bf:9f:16:f9:72:d7:55:40:57:64:e9:ec:e2:bf: 85:a0:54:b7:7a:3b:45:1c:81:e2:12:e2:b5:94:0e:10:19:01: 05:55:f3:aa:50:a6:a1:1e:30:23:8f:3f:32:68:72:6e:c9:d5: 86:96:94:81:fd:c1:24:92:75:f0:fe:ad:fd:20:d0:b9:94:f3: 03:51:a9:cc:2b:78:51:02:e1:99:9d:1c:0f:a6:2e:b8:f4:25: ab:92:2a:2d:dc:69:fb:74:02:3e:73:06:dc:cf:c2:0b:fd:5a: 6e:5b:73:02:d0:76:f9:0e:cc:4b:e8:5d:02:78:df:52:69:98: 1d:90:92:90 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9y104cUBZo40n0JNd/3c6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmUwYWY0NWFiNGU1NzQ1NmY1YTBhNDBkZmE4NGY4ZDgwNjEwNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl6qpa47xnN2D6y4n6BbVI9TC1U+ 05XzPXM/BHXFiT68/3+spjemjOYNIZJgUO+itwYTALwRiCnSLTQGlcj+HidwqSyb 2kwwxHluNylhpkuPb4QpjMO8gENNr3KPnPTqiGzfY2ypRpHWJ4S6GW0BmmlhiTAg gh92d+1JZBlcZouHPjb3UviW9cjHKwMPh3RYbjX1YRAX3N1/ykkLc4NOh9ZddjAM hTVwZLf5rGSyP2uYCZOiyST0cp9Rl8cE0rm0qiTfFZUJc1QlsQuiFa4SwATaWoB8 qVnTIaBEW3Vv382TnZs85ZOoLGpkVPwZi/C8KsDeqZyVBEYeYpOJ19wpBwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHvgr0WrTldFb1oKQN+oT42AYQZkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2FjMWZh OS00ZWM4LTQwMTYtOWFkZC00YzNiZTlhMjhkOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYWMxZmE5 LTRlYzgtNDAxNi05YWRkLTRjM2JlOWEyOGQ5My8xL2UtQ3ZSYXRPVjBWdldncEEz NmhQallCaEJtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUOgMA0EAgACMAcDBQMqBREAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDp6zANBgkqhkiG9w0BAQsFAAOCAQEAFHM0ee/p4lDR VsWFUHZrDMFYMmAjW3CNdEMx5YHEwkL8/4c4eO76GzVBM6ms8cmoGXMdMj1+9y7a zp012CWjVrC9v4ciZuFt5MtkxlYSvcsZvvS5T7FWdId7TTKyHa4kyBlq4KVe3HeV EAyVc0akOVzU2ppHwX715rPKc2RiyYH2Gb+fFvly11VAV2Tp7OK/haBUt3o7RRyB 4hLitZQOEBkBBVXzqlCmoR4wI48/MmhybsnVhpaUgf3BJJJ18P6t/SDQuZTzA1Gp zCt4UQLhmZ0cD6YuuPQlq5IqLdxp+3QCPnMG3M/CC/1abltzAtB2+Q7MS+hdAnjf UmmYHZCSkA== -----END CERTIFICATE-----Generated at Tue Feb 10 05:56:17 2026 by rpki-client