This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer File: eA-G0ESkoqIzMZQYqo2prYN8duo.cer (raw, json) Hash identifier: PGQsihTFgV5TJ6QGgBCXtqIW3jbi8pxuQ4v7I/1K+As= Subject key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B40926978955B26188401F0D6881 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209591 IP: 141.98.124.0/22 IP: 2a10:2980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b4:09:26:97:89:55:b2:61:88:40:1f:0d:68:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=780f86d044a4a2a233319418aa8da9ad837c76ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:ee:57:cd:5b:f7:8b:df:8c:a8:e0:dc:cf: dc:62:4b:8a:46:1e:88:5b:a2:f5:1c:61:5e:bb:ba: d6:fe:c5:2a:21:98:a2:b4:f7:1b:bf:24:b7:9c:fd: c7:3b:dc:7f:da:95:6a:8f:bc:60:d8:7e:ed:21:60: 65:2c:ed:67:65:b4:d8:36:8d:1b:be:a7:05:94:ac: 24:51:2d:d5:8f:7e:ce:cb:26:e7:d6:dc:2b:44:cf: 31:5c:1a:70:cf:8d:d7:86:30:f8:ed:f2:b1:60:02: 37:c4:a2:dd:2e:a5:71:05:fb:a8:a6:53:1a:f7:ca: 79:df:f1:1b:58:40:85:18:b1:1b:85:15:04:ae:29: 74:a1:97:60:0a:57:80:b8:b0:5d:f4:76:07:8b:ec: 58:f5:c7:26:e5:62:5d:2d:3f:0b:7e:a6:49:f1:70: 97:fd:9d:ae:c0:7c:b0:f0:20:32:06:67:33:31:eb: ae:c6:de:47:2a:62:a9:4b:7a:1f:0f:d3:f8:a1:cf: ba:fd:83:94:49:f4:40:bb:c3:b1:3e:fd:c1:1b:85: 55:42:58:f5:1a:b6:65:7a:97:62:28:13:89:06:06: fa:8d:ed:f5:f4:07:72:e7:ae:f5:e9:95:f5:1c:81: ff:7f:1b:8f:47:33:5e:15:53:3e:f0:9c:c8:67:54: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.124.0/22 IPv6: 2a10:2980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209591 Signature Algorithm: sha256WithRSAEncryption 9c:aa:29:ac:b2:f8:a5:10:24:3e:06:3f:c8:0d:c0:b0:73:58: 56:22:cf:68:e5:a7:99:03:4a:17:7a:15:82:94:95:b5:f9:40: ba:64:6c:ae:1b:06:4a:07:b8:ec:64:8d:93:77:2d:5f:ad:15: 61:9a:69:f4:ff:bb:34:56:fd:a3:3e:46:93:dd:75:8b:d1:ba: 52:d7:29:ed:2e:dc:4b:fc:ff:00:e1:c7:78:69:86:69:96:3d: 3f:04:f9:c2:82:6b:0c:06:34:b7:d2:56:d9:e7:11:6e:e8:35: dd:49:c6:92:97:5f:e8:11:e5:78:04:b1:e0:a7:cb:6b:91:4d: 47:83:0e:89:73:22:4e:25:27:b6:6b:0c:f8:d7:4d:d3:29:59: 7f:fd:35:44:e3:94:15:06:34:62:a0:35:fd:af:44:0b:24:b5: 76:44:93:00:1d:ab:c4:cf:af:cd:59:a3:30:3d:88:b9:e9:93: 98:57:bd:04:56:66:48:55:bb:1c:e0:4e:ba:da:c5:56:d8:cf: 7d:6b:55:32:4e:33:14:b7:17:d9:7d:c6:b2:03:3c:7b:68:69: 54:6e:9b:d5:4f:6a:17:98:1c:7d:d6:df:0e:df:b2:d6:29:f2: ad:d2:7a:4c:43:d6:2a:28:0f:c2:64:2c:bd:67:f9:68:07:76: 84:53:aa:53 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gLQJJpeJVbJhiEAfDWiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODBmODZkMDQ0YTRhMmEyMzMzMTk0MThhYThkYTlhZDgzN2M3NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhruV81b94vfjKjg3M/cYkuKRh6I W6L1HGFeu7rW/sUqIZiitPcbvyS3nP3HO9x/2pVqj7xg2H7tIWBlLO1nZbTYNo0b vqcFlKwkUS3Vj37Oyybn1twrRM8xXBpwz43XhjD47fKxYAI3xKLdLqVxBfuoplMa 98p53/EbWECFGLEbhRUEril0oZdgCleAuLBd9HYHi+xY9ccm5WJdLT8LfqZJ8XCX /Z2uwHyw8CAyBmczMeuuxt5HKmKpS3ofD9P4oc+6/YOUSfRAu8OxPv3BG4VVQlj1 GrZlepdiKBOJBgb6je319Ady56716ZX1HIH/fxuPRzNeFVM+8JzIZ1Tf6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHgPhtBEpKKiMzGUGKqNqa2DfHbqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzAzY2M0 Zi02MGMyLTQ3NWUtOWUwOS01MjQ4MDNlZTI5NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMDNjYzRm LTYwYzItNDc1ZS05ZTA5LTUyNDgwM2VlMjk0OS8xL2VBLUcwRVNrb3FJek1aUVlx bzJwcllOOGR1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCjWJ8MA0EAgACMAcDBQMqECmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMytzANBgkqhkiG9w0BAQsFAAOCAQEAnKoprLL4pRAk PgY/yA3AsHNYViLPaOWnmQNKF3oVgpSVtflAumRsrhsGSge47GSNk3ctX60VYZpp 9P+7NFb9oz5Gk911i9G6Utcp7S7cS/z/AOHHeGmGaZY9PwT5woJrDAY0t9JW2ecR bug13UnGkpdf6BHleASx4KfLa5FNR4MOiXMiTiUntmsM+NdN0ylZf/01ROOUFQY0 YqA1/a9ECyS1dkSTAB2rxM+vzVmjMD2IuemTmFe9BFZmSFW7HOBOutrFVtjPfWtV Mk4zFLcX2X3GsgM8e2hpVG6b1U9qF5gcfdbfDt+y1inyrdJ6TEPWKigPwmQsvWf5 aAd2hFOqUw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:41 2026 by rpki-client