This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer File: eD8ukq1ZxwyM3CiygCniKXBcbJE.cer (raw, json) Hash identifier: oIT+ye8EDh4EX3qDjtprym7Qj4t0EAp/fqG0M2q7gJ0= Subject key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11AD18B938961A7D0AB8452316576C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.224.0/22 IP: 2a06:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ad:18:b9:38:96:1a:7d:0a:b8:45:23:16:57:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:39:f6:b2:8c:de:bc:7f:ef:68:f8:46:fa: 6e:d1:6e:50:7c:09:b6:16:a8:d3:cb:f2:71:f5:64: 0e:54:66:d7:70:77:c8:0f:c2:64:d4:f1:d7:9f:ff: a9:e8:f7:75:c3:bd:51:62:11:54:7d:00:0a:0f:fa: e3:df:1b:a6:64:af:6b:b0:34:85:3f:59:cb:97:16: b1:e7:a4:b6:c7:11:76:66:8d:c3:2e:6e:72:b8:f0: c4:7d:46:92:18:8a:2f:6b:27:7f:f8:ac:eb:cf:aa: f6:7e:01:e2:bb:0d:04:84:46:90:fc:b0:90:20:15: 51:7e:7f:f2:77:23:a4:cb:aa:65:46:87:3d:2a:40: 14:54:56:f8:35:61:cf:1d:90:87:7a:da:f3:d9:ce: bc:fb:d0:d8:15:b6:88:67:bc:4f:46:db:4d:45:68: d9:d4:34:73:6e:fb:a0:8a:52:e2:f7:46:cb:f4:8d: 0d:10:7b:58:b6:48:ed:35:f8:db:f5:dc:d8:e9:59: c9:4b:63:63:90:46:e0:de:cb:b5:f4:6e:cd:3e:0e: 34:98:f8:e3:4d:fe:4e:6f:25:ce:81:ce:e7:ac:a2: 25:c3:79:ea:0d:00:55:f8:61:27:17:bc:91:cf:cd: ca:4e:f5:92:7b:9c:09:e9:82:dc:f7:87:c4:d6:cb: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.224.0/22 IPv6: 2a06:ca80::/29 Signature Algorithm: sha256WithRSAEncryption 45:c6:bf:c8:bd:90:00:a3:7f:0a:f9:a0:a1:fb:ea:ff:10:7a: 37:dc:82:35:b3:e7:33:a0:01:f9:af:b4:47:46:56:89:88:d7: 2a:75:f6:04:6f:63:9f:86:d9:14:62:65:f8:5e:8f:9d:18:18: bf:b7:35:b1:47:23:77:9d:7a:4d:30:72:22:b6:57:bf:f5:1c: 8e:e9:3f:dc:58:f4:5c:c1:ae:39:58:a6:c9:cf:bd:45:20:2a: 18:9a:68:29:73:e7:61:3a:6f:0e:30:7e:28:4a:26:5b:fb:05: 5a:4d:ae:a9:ee:58:4c:68:b4:2b:eb:05:da:91:f5:8a:25:50: de:9f:2b:43:8e:0f:7c:bd:d8:7f:ce:21:0c:c0:10:ee:1f:41: 95:d7:26:71:2d:e6:4a:9d:8f:69:1c:f3:7a:b4:35:07:0d:43: 71:52:c5:e0:7b:63:aa:e2:fd:d1:9c:85:f2:ac:43:06:e4:c4: bd:e1:17:69:1a:0c:68:af:f5:8c:d1:0b:73:f5:19:85:8a:b8: 90:e2:7e:64:98:ea:9d:03:9f:1a:ff:f8:51:51:6d:75:45:41: 5c:a1:bc:9b:f6:ff:a2:d9:cb:e4:8d:4d:50:ac:46:56:a2:21: 17:ac:cb:1e:2d:05:c0:23:8a:fa:49:89:5f:8b:77:eb:80:73: 52:a1:48:4f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8Ea0YuTiWGn0KuEUjFldsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODNmMmU5MmFkNTljNzBjOGNkYzI4YjI4MDI5ZTIyOTcwNWM2YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+o59rKM3rx/72j4Rvpu0W5QfAm2 FqjTy/Jx9WQOVGbXcHfID8Jk1PHXn/+p6Pd1w71RYhFUfQAKD/rj3xumZK9rsDSF P1nLlxax56S2xxF2Zo3DLm5yuPDEfUaSGIovayd/+Kzrz6r2fgHiuw0EhEaQ/LCQ IBVRfn/ydyOky6plRoc9KkAUVFb4NWHPHZCHetrz2c68+9DYFbaIZ7xPRttNRWjZ 1DRzbvugilLi90bL9I0NEHtYtkjtNfjb9dzY6VnJS2NjkEbg3su19G7NPg40mPjj Tf5ObyXOgc7nrKIlw3nqDQBV+GEnF7yRz83KTvWSe5wJ6YLc94fE1suN4QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHg/LpKtWccMjNwosoAp4ilwXGyRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzU3YjQx NC01MDkxLTQ2NTctYTliNC1lOWFmNTY2ZjJjMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNTdiNDE0 LTUwOTEtNDY1Ny1hOWI0LWU5YWY1NjZmMmMxNC8xL2VEOHVrcTFaeHd5TTNDaXln Q25pS1hCY2JKRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLY/gMA0EAgACMAcDBQMqBsqAMA0GCSqGSIb3 DQEBCwUAA4IBAQBFxr/IvZAAo38K+aCh++r/EHo33II1s+czoAH5r7RHRlaJiNcq dfYEb2OfhtkUYmX4Xo+dGBi/tzWxRyN3nXpNMHIitle/9RyO6T/cWPRcwa45WKbJ z71FICoYmmgpc+dhOm8OMH4oSiZb+wVaTa6p7lhMaLQr6wXakfWKJVDenytDjg98 vdh/ziEMwBDuH0GV1yZxLeZKnY9pHPN6tDUHDUNxUsXge2Oq4v3RnIXyrEMG5MS9 4RdpGgxor/WM0Qtz9RmFiriQ4n5kmOqdA58a//hRUW11RUFcobyb9v+i2cvkjU1Q rEZWoiEXrMseLQXAI4r6SYlfi3frgHNSoUhP -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:50 2026 by rpki-client