This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer File: eH0Q8i5f-ksg99W3goxVuVCal1k.cer (raw, json) Hash identifier: D48vfoh0h4MnCE8iV3K9PzxTNjRegGSq6BtZmBooE94= Subject key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C68552CD6503B5FB96FFD446D31B63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203540 IP: 45.142.132.0/22 IP: 91.204.248.0/22 IP: 2a0e:d140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:52:cd:65:03:b5:fb:96:ff:d4:46:d3:1b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:83:12:9e:9c:f2:d2:61:28:b2:21:3b:78: 9c:f9:f7:0a:76:b7:04:4b:b2:7f:f3:55:3e:c9:5a: 7f:35:da:fb:0b:d0:36:bf:7d:3a:6c:9d:e3:b8:f8: 11:ef:af:de:de:32:d4:fc:29:b2:b2:c7:5b:45:f6: 46:9a:eb:3d:f7:7e:de:01:6c:c0:ea:c5:4c:95:cb: ce:bc:0b:18:01:e0:bb:54:0e:74:fc:63:98:c6:76: be:ba:1c:02:c2:88:21:0a:a4:ac:84:5c:24:63:59: 40:4b:30:87:92:d1:07:36:4b:ad:f4:1b:3a:ec:41: e6:a0:11:64:69:8b:cb:48:b6:78:b5:d5:48:e5:8f: 19:c1:ec:04:de:ee:64:71:95:5b:39:5f:3d:29:8a: bd:8f:cf:56:4b:94:d8:e8:46:3d:b5:bc:24:46:94: fe:ad:a4:4d:00:51:b3:a6:c9:f7:8c:93:74:f8:c6: f8:af:1d:9e:bd:45:a4:5d:c6:51:07:2f:ec:5f:84: ad:3d:25:dc:d9:bf:c6:11:eb:04:dc:81:e7:3f:4b: e8:cc:68:21:6d:fe:d2:d6:8c:5c:84:7c:ec:44:b7: 3c:62:14:39:ba:00:93:13:f9:03:09:2f:f7:bd:6f: 49:5c:72:50:94:11:2d:c8:6f:73:f1:74:2c:47:af: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.132.0/22 91.204.248.0/22 IPv6: 2a0e:d140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203540 Signature Algorithm: sha256WithRSAEncryption 22:84:bd:cf:0f:cf:0d:fb:6d:e0:9d:40:4f:e7:48:2d:b7:99: 48:6f:40:74:8d:ab:36:b9:47:70:21:cb:63:bf:25:d2:45:2f: 03:17:16:56:8f:0c:f2:c4:8c:88:0f:cf:a5:16:ca:06:28:ec: d7:c9:72:66:8c:77:50:9e:d4:b7:d8:a0:ab:7f:7f:ca:5a:3d: e4:0d:53:fc:b5:5b:67:b8:60:cc:b9:f0:a9:08:b1:52:fb:0e: 5f:61:f4:0e:6b:5e:fc:e9:5e:66:d6:84:78:2c:c2:e0:0d:13: 2c:86:23:dc:51:1a:2b:82:f2:d7:fe:dc:93:1a:1e:b1:f7:0d: 03:6f:82:e2:70:af:a7:94:da:64:1c:51:d9:33:1b:c2:f6:ab: 4e:64:5f:6d:f9:86:04:59:b5:0a:0f:bc:88:4b:2c:5f:3f:4f: b9:fe:6d:80:4e:a4:5b:d8:82:db:2c:eb:8d:0b:b7:56:fd:cc: c2:5d:5e:db:a7:e8:af:fc:e3:47:12:71:ca:43:ea:93:df:77: 71:87:62:11:af:41:19:f9:21:21:d4:d2:83:20:07:14:a0:38: 35:39:ee:1a:44:e2:a7:ab:3a:ad:0d:a9:6f:f1:69:16:76:78: dc:bd:7e:be:9e:19:bc:e2:c7:30:b2:29:57:4c:f9:87:46:b2: cd:63:57:90 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xoVSzWUDtfuW/9RG0xtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdkMTBmMjJlNWZmYTRiMjBmN2Q1Yjc4MjhjNTViOTUwOWE5NzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKyDEp6c8tJhKLIhO3ic+fcKdrcE S7J/81U+yVp/Ndr7C9A2v306bJ3juPgR76/e3jLU/CmyssdbRfZGmus9937eAWzA 6sVMlcvOvAsYAeC7VA50/GOYxna+uhwCwoghCqSshFwkY1lASzCHktEHNkut9Bs6 7EHmoBFkaYvLSLZ4tdVI5Y8ZwewE3u5kcZVbOV89KYq9j89WS5TY6EY9tbwkRpT+ raRNAFGzpsn3jJN0+Mb4rx2evUWkXcZRBy/sX4StPSXc2b/GEesE3IHnP0vozGgh bf7S1oxchHzsRLc8YhQ5ugCTE/kDCS/3vW9JXHJQlBEtyG9z8XQsR6976wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHh9EPIuX/pLIPfVt4KMVblQmpdZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2FiODA1 NS0zODljLTQzZWQtYWJkZS1iZjBkZTJiYjFjM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYWI4MDU1 LTM4OWMtNDNlZC1hYmRlLWJmMGRlMmJiMWMzYy8xL2VIMFE4aTVmLWtzZzk5VzNn b3hWdVZDYWwxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLY6EAwQCW8z4MA0EAgACMAcDBQMqDtFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbFDANBgkqhkiG9w0BAQsFAAOCAQEAIoS9 zw/PDftt4J1AT+dILbeZSG9AdI2rNrlHcCHLY78l0kUvAxcWVo8M8sSMiA/PpRbK Bijs18lyZox3UJ7Ut9igq39/ylo95A1T/LVbZ7hgzLnwqQixUvsOX2H0Dmte/Ole ZtaEeCzC4A0TLIYj3FEaK4Ly1/7ckxoesfcNA2+C4nCvp5TaZBxR2TMbwvarTmRf bfmGBFm1Cg+8iEssXz9Puf5tgE6kW9iC2yzrjQu3Vv3Mwl1e26for/zjRxJxykPq k993cYdiEa9BGfkhIdTSgyAHFKA4NTnuGkTip6s6rQ2pb/FpFnZ43L1+vp4ZvOLH MLIpV0z5h0ayzWNXkA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:28 2026 by rpki-client