This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer (raw, json) Hash identifier: vY6jYU7dbnlGPesaRP4XFFyP0vizutixhItTCkBlb9o= Subject key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67544CF30705280361AE09BA19F79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.205.152.0/21 IP: 185.6.132.0/22 IP: 2a00:1b20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:75:44:cf:30:70:52:80:36:1a:e0:9b:a1:9f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:4e:bc:d1:32:43:92:9a:75:cf:6e:ff:21: 2c:c0:6e:8c:3e:78:01:51:5d:d9:3b:a5:1a:98:72: 24:31:7c:51:96:b8:69:ee:73:58:f1:16:56:4b:ee: cc:1e:8a:a3:4c:a8:61:10:fd:24:59:e8:09:f2:f0: a1:45:f6:1c:b5:a3:72:5b:14:5c:ad:ba:df:1e:61: 5f:04:44:a1:94:4e:c6:c7:08:4e:6e:2b:dc:1e:ce: 7a:2d:4a:1e:44:a2:88:21:5b:b4:ad:a0:3a:e3:59: 39:34:7e:99:d0:83:f3:c3:bc:87:4f:77:cd:10:0a: 2b:9e:00:8f:d6:29:8e:7a:bf:ee:1e:eb:d2:a2:b0: f2:d7:54:49:60:2d:b4:31:08:5e:33:5f:97:e0:f2: cf:0f:9f:04:eb:40:8e:d8:47:cb:ea:36:f4:f5:56: cd:dc:c0:82:52:7c:7d:92:36:94:29:32:f2:00:b1: ef:8c:55:c1:70:68:95:dc:f0:a3:5f:01:57:55:7a: 85:8e:85:6d:35:28:95:a8:81:6c:5d:37:42:c4:ed: 96:02:a8:f9:13:19:78:d5:6c:a4:b7:a7:a7:5d:eb: 93:18:28:67:ba:90:52:31:b3:95:63:22:d3:bc:47: fa:1a:cd:e5:0b:5d:5c:3d:19:9b:da:b6:87:41:e7: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.152.0/21 185.6.132.0/22 IPv6: 2a00:1b20::/32 Signature Algorithm: sha256WithRSAEncryption 54:44:90:57:c8:95:f2:b1:7e:cb:80:f5:f4:40:f4:3f:52:92: f5:da:4a:72:f8:cd:34:b2:4d:9d:46:9f:cf:9b:f6:6b:a7:47: 58:1a:16:14:f8:a9:99:87:69:45:5e:93:02:6c:98:b7:5d:9f: 76:f4:5c:7e:86:fe:8a:ad:4a:1e:a0:bc:fa:92:0f:11:94:9c: 64:af:96:3c:39:aa:b9:ce:96:d6:de:f9:f8:8f:5d:bf:ef:66: a8:d3:17:9b:8f:92:c4:a6:e3:d9:5f:c3:38:ea:90:9a:72:08: 70:68:b5:a0:5a:12:72:e8:76:9b:8d:12:17:c7:6b:ce:c1:51: 38:f8:90:9a:19:9a:9f:27:19:e8:11:09:7d:25:a5:cc:1a:37: d8:b8:f9:31:95:aa:44:a3:e9:3b:9d:98:f6:b8:c4:30:77:54: 9a:59:a8:c2:32:db:04:74:5c:ac:1d:81:0a:23:9e:d6:cd:ab: 5f:a8:74:f1:28:1e:58:87:47:af:e9:73:a3:64:9c:e7:f9:10: a1:b0:b1:0e:cd:95:12:05:bc:5a:2f:91:0a:c6:f1:0e:ae:d6: 73:0c:ce:4b:39:3d:8d:f9:3f:a7:3c:1c:06:b7:64:35:a8:73: 84:65:bd:f3:a6:c0:52:d8:e8:04:93:12:e2:a2:30:06:99:19: f0:be:9d:cf -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt3xnVEzzBwUoA2GuCboZ95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjU1MTZhZjRiNzRhMTE0MmJlZjEzYzNmZDcwNzA1OWU2MWE2Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ylOvNEyQ5Kadc9u/yEswG6MPngB UV3ZO6UamHIkMXxRlrhp7nNY8RZWS+7MHoqjTKhhEP0kWegJ8vChRfYctaNyWxRc rbrfHmFfBEShlE7GxwhObivcHs56LUoeRKKIIVu0raA641k5NH6Z0IPzw7yHT3fN EAorngCP1imOer/uHuvSorDy11RJYC20MQheM1+X4PLPD58E60CO2EfL6jb09VbN 3MCCUnx9kjaUKTLyALHvjFXBcGiV3PCjXwFXVXqFjoVtNSiVqIFsXTdCxO2WAqj5 Exl41Wykt6enXeuTGChnupBSMbOVYyLTvEf6Gs3lC11cPRmb2raHQef3bQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2RjOGUx My02ZGQzLTQ0ZjktOTBmNi03Y2QxZjY1MmQ5MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvZGM4ZTEz LTZkZDMtNDRmOS05MGY2LTdjZDFmNjUyZDkyNS8xL2UxVVdyMHQwb1JRcjd4UERf WEJ3V2VZYWE1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbc2YAwQCuQaEMA0EAgACMAcDBQAqABsgMA0G CSqGSIb3DQEBCwUAA4IBAQBURJBXyJXysX7LgPX0QPQ/UpL12kpy+M00sk2dRp/P m/Zrp0dYGhYU+KmZh2lFXpMCbJi3XZ929Fx+hv6KrUoeoLz6kg8RlJxkr5Y8Oaq5 zpbW3vn4j12/72ao0xebj5LEpuPZX8M46pCacghwaLWgWhJy6HabjRIXx2vOwVE4 +JCaGZqfJxnoEQl9JaXMGjfYuPkxlapEo+k7nZj2uMQwd1SaWajCMtsEdFysHYEK I57WzatfqHTxKB5Yh0ev6XOjZJzn+RChsLEOzZUSBbxaL5EKxvEOrtZzDM5LOT2N +T+nPBwGt2Q1qHOEZb3zpsBS2OgEkxLiojAGmRnwvp3P -----END CERTIFICATE-----Generated at Sun Feb 1 09:47:43 2026 by rpki-client