This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer File: eBd1rflxcuL2j8kQUwnTdTuh9M0.cer (raw, json) Hash identifier: a897dd7Bk7bq7y5miJCMl7X0qNeJSfCEA1+zxsIX9Hk= Subject key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A24A01CF1CE93B25A55056E08854C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35181 IP: 85.239.0.0/19 IP: 2a0c:ca00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4a:01:cf:1c:e9:3b:25:a5:50:56:e0:88:54:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=781775adf97172e2f68fc9105309d3753ba1f4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:85:1c:b5:77:5d:3d:22:68:54:f4:4e:2a:01: 5a:cb:48:1c:8f:09:98:5f:75:d7:4a:0b:4a:06:d3: 9c:ea:07:91:89:ec:12:57:b7:7b:6a:c5:c8:e1:66: 48:6e:09:ea:24:f0:42:8b:60:0d:51:17:58:9e:05: 77:66:f6:04:64:c1:29:92:2a:18:50:9f:4e:db:09: b0:32:55:06:71:07:68:7f:10:67:7d:a1:84:2c:da: fe:a5:aa:3c:e4:a0:c5:b3:d2:6f:f1:89:6a:0c:e6: 23:44:91:96:60:d9:f5:51:81:d6:49:e0:6f:a2:84: d8:83:12:7f:0b:0c:07:df:0e:96:fa:da:93:f1:98: ad:f4:c8:44:7d:80:63:12:ad:db:05:89:1c:46:9b: 92:1e:49:25:11:ff:1d:42:81:cb:68:5e:97:1c:64: bb:12:4b:0d:93:9a:01:d5:72:da:60:f9:b8:8d:fb: 00:9d:7f:f5:82:13:46:51:91:f2:ae:6d:98:03:5f: 49:1c:55:f6:29:ea:d5:02:92:a3:09:64:78:3a:64: b9:be:75:04:09:ff:9a:6a:da:c7:b7:82:6f:2f:87: 1e:cb:71:24:20:0c:f2:f4:f7:8e:70:60:8e:6c:bf: 29:57:05:7a:d4:a2:e1:63:d5:19:32:28:f3:b1:d9: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.0.0/19 IPv6: 2a0c:ca00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35181 Signature Algorithm: sha256WithRSAEncryption 99:36:01:2d:b0:84:20:72:ed:2d:2e:42:d8:a9:31:b8:d6:5e: 2f:16:5b:f8:2c:68:4b:8c:64:79:85:1d:5e:76:c2:9a:9e:4e: ab:00:90:fb:fa:f2:20:4a:95:d7:0c:37:75:fa:55:9b:8d:8c: b7:fc:3a:b6:b9:78:37:b3:83:76:12:45:a7:16:43:8c:64:1b: 78:3a:06:31:fa:7d:a1:1b:f9:92:8d:35:e8:3e:78:7d:c2:c6: 57:51:58:28:0f:86:f7:56:5d:b1:31:ae:9b:24:52:a0:0a:aa: f8:ca:21:73:14:c3:19:f2:96:5f:5c:ca:fb:11:bb:28:71:60: 47:22:6f:ab:16:6d:2c:30:a0:80:c3:09:89:91:db:cc:8b:39: 95:0e:38:19:a6:80:8e:f7:82:0a:27:32:11:2e:13:a1:68:40: 79:62:9b:13:14:bd:6b:46:79:d2:c9:ed:db:0a:4f:18:94:2f: 17:08:e4:c1:06:a0:38:91:2a:de:33:db:ab:42:e3:1f:97:0b: e6:6d:ca:d6:8b:da:f6:fd:56:8e:a0:53:5c:f4:06:a5:38:3b: 3b:34:f2:85:a4:bb:0b:db:27:fc:72:e9:5b:64:2b:74:69:3a: 24:d0:12:20:64:5b:1f:e4:d5:be:50:ff:e0:c2:46:70:2a:3f: f3:e3:10:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4okoBzxzpOyWlUFbgiFTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE3NzVhZGY5NzE3MmUyZjY4ZmM5MTA1MzA5ZDM3NTNiYTFmNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84UctXddPSJoVPROKgFay0gcjwmY X3XXSgtKBtOc6geRiewSV7d7asXI4WZIbgnqJPBCi2ANURdYngV3ZvYEZMEpkioY UJ9O2wmwMlUGcQdofxBnfaGELNr+pao85KDFs9Jv8YlqDOYjRJGWYNn1UYHWSeBv ooTYgxJ/CwwH3w6W+tqT8Zit9MhEfYBjEq3bBYkcRpuSHkklEf8dQoHLaF6XHGS7 EksNk5oB1XLaYPm4jfsAnX/1ghNGUZHyrm2YA19JHFX2KerVApKjCWR4OmS5vnUE Cf+aatrHt4JvL4cey3EkIAzy9PeOcGCObL8pVwV61KLhY9UZMijzsdnw9QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHgXda35cXLi9o/JEFMJ03U7ofTNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzExNGQy NS1hMWFhLTRhMzMtYjdiNC01NjBlOWIwNTNkZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvMTE0ZDI1 LWExYWEtNGEzMy1iN2I0LTU2MGU5YjA1M2RkMS8xL2VCZDFyZmx4Y3VMMmo4a1FV d25UZFR1aDlNMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFVe8AMA0EAgACMAcDBQMqDMoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCJbTANBgkqhkiG9w0BAQsFAAOCAQEAmTYBLbCEIHLt LS5C2KkxuNZeLxZb+CxoS4xkeYUdXnbCmp5OqwCQ+/ryIEqV1ww3dfpVm42Mt/w6 trl4N7ODdhJFpxZDjGQbeDoGMfp9oRv5ko016D54fcLGV1FYKA+G91ZdsTGumyRS oAqq+MohcxTDGfKWX1zK+xG7KHFgRyJvqxZtLDCggMMJiZHbzIs5lQ44GaaAjveC CicyES4ToWhAeWKbExS9a0Z50snt2wpPGJQvFwjkwQagOJEq3jPbq0LjH5cL5m3K 1ova9v1WjqBTXPQGpTg7OzTyhaS7C9sn/HLpW2QrdGk6JNASIGRbH+TVvlD/4MJG cCo/8+MQRw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:05 2026 by rpki-client