This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer (raw, json) Hash identifier: MjGh8G0KrvLkEt+zzogR1+BrDiK4yBApoDMBkdLMt3A= Subject key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126DE8212C2FAF719A5D4126BC2F62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.231.60.0/22 IP: 2a0c:4300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:e8:21:2c:2f:af:71:9a:5d:41:26:bc:2f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:a8:1b:4e:2c:58:1d:ff:27:62:2f:d7:e8: 57:b6:cb:b5:9b:72:05:c3:e2:63:b7:b1:7e:d0:e4: cc:d7:e0:55:36:c2:c7:e1:56:c8:60:df:43:3b:50: f4:44:c9:ed:2d:2d:6e:c3:5f:61:a2:d1:04:9b:04: 73:88:32:17:31:32:15:1a:54:29:e1:d8:40:bf:e8: 0f:92:fb:d9:a1:a3:c5:7b:c1:01:ee:c3:74:ef:ac: 9b:66:71:3b:3c:8c:49:bc:db:66:3d:68:88:cc:f1: c4:6f:94:f1:02:76:0c:b1:37:34:d0:b3:ea:92:77: aa:2b:76:d5:ed:39:0a:2c:e8:78:3e:df:f8:f3:97: 12:cf:84:37:95:65:8f:ad:e1:9d:8e:c1:99:01:2b: ae:e5:1f:90:1d:fb:b5:88:40:df:b7:6c:51:0b:11: 0f:98:a9:82:c4:79:e7:de:ed:34:3b:70:1f:18:45: 14:a2:c0:3f:ca:dc:8f:b1:68:7d:d3:f1:d9:db:5d: 0c:b1:75:ba:fc:11:bf:6c:06:03:88:da:5b:c5:0b: 19:44:a7:30:86:35:fa:47:36:ca:ca:b1:6b:6a:6a: 47:68:e6:d0:95:b0:c0:fe:f9:4a:25:d1:5e:7e:dd: 82:cf:dc:a3:20:33:84:3e:42:db:f2:37:2a:6a:fe: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.60.0/22 IPv6: 2a0c:4300::/32 Signature Algorithm: sha256WithRSAEncryption 49:f9:c6:d9:7f:ab:e6:f8:15:62:13:2a:36:50:7c:1c:a7:8c: fb:f9:42:81:14:7b:0a:83:1f:b1:42:28:3b:ea:ec:3d:66:90: a5:25:26:e3:98:b7:0e:6e:2b:a5:1d:bb:23:f7:3d:a0:50:cb: fd:b2:1b:60:3f:86:ef:8f:14:35:d1:06:d9:b7:cd:ee:3e:55: fb:81:1d:f7:6a:6c:8e:50:a7:a4:b9:c5:e9:52:c4:b3:19:1f: f3:c9:4c:3d:2f:26:88:33:ae:a3:22:3b:21:4d:a3:6e:0c:20: 36:98:6e:a6:74:f8:e4:32:36:d5:19:39:24:84:d4:3f:19:56: 00:16:4f:e7:a9:e3:6c:6a:23:e0:cd:16:0f:6d:c7:c4:09:69: 30:88:e7:51:0b:cd:42:19:45:65:2c:03:fd:c4:9a:1d:7a:ec: fb:58:bf:cc:f9:fe:65:db:17:cf:da:49:9b:11:71:c3:26:7d: 4c:f3:e9:bb:5b:8d:97:0d:01:7b:92:a3:92:5b:ef:99:26:06: 4c:9c:22:89:fb:28:33:c0:03:d2:87:84:ea:2a:79:3f:98:e2: a1:00:bd:db:34:70:bd:77:37:f5:5d:02:a6:e2:ec:ed:ca:58: 1e:a6:e6:7e:9b:0c:42:b4:37:5a:ec:53:d7:ec:b7:a2:8e:7e: 2c:bd:36:1a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8Em3oISwvr3GaXUEmvC9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODU5NjY5YzJiN2MwYjI1YzA3ZTc5MzJiOGExZjk4YjBiYmVkYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNioG04sWB3/J2Iv1+hXtsu1m3IF w+Jjt7F+0OTM1+BVNsLH4VbIYN9DO1D0RMntLS1uw19hotEEmwRziDIXMTIVGlQp 4dhAv+gPkvvZoaPFe8EB7sN076ybZnE7PIxJvNtmPWiIzPHEb5TxAnYMsTc00LPq kneqK3bV7TkKLOh4Pt/485cSz4Q3lWWPreGdjsGZASuu5R+QHfu1iEDft2xRCxEP mKmCxHnn3u00O3AfGEUUosA/ytyPsWh90/HZ210MsXW6/BG/bAYDiNpbxQsZRKcw hjX6RzbKyrFrampHaObQlbDA/vlKJdFeft2Cz9yjIDOEPkLb8jcqav7LxwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHhZZpwrfAslwH55Mrih+YsLvtxMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzRiNTQ5 NS0xMDcyLTRlZjMtODY2OS1mYzM1NTk2OTYyNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNGI1NDk1 LTEwNzItNGVmMy04NjY5LWZjMzU1OTY5NjI0Ni8xL2VGbG1uQ3Q4Q3lYQWZua3l1 S0g1aXd1LTNFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuec8MA0EAgACMAcDBQAqDEMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJ+cbZf6vm+BViEyo2UHwcp4z7+UKBFHsKgx+xQig76uw9ZpCl JSbjmLcObiulHbsj9z2gUMv9shtgP4bvjxQ10QbZt83uPlX7gR33amyOUKekucXp UsSzGR/zyUw9LyaIM66jIjshTaNuDCA2mG6mdPjkMjbVGTkkhNQ/GVYAFk/nqeNs aiPgzRYPbcfECWkwiOdRC81CGUVlLAP9xJodeuz7WL/M+f5l2xfP2kmbEXHDJn1M 8+m7W42XDQF7kqOSW++ZJgZMnCKJ+ygzwAPSh4TqKnk/mOKhAL3bNHC9dzf1XQKm 4uztylgepuZ+mwxCtDda7FPX7Leijn4svTYa -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:51 2026 by rpki-client