This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer File: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer (raw, json) Hash identifier: kZhiVRL2ujXNjb96ockNVolsxYEktJ6321qv4hMQkVU= Subject key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C638AA4C1848ED5B3D91B3F7A3959 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47193 IP: 91.203.208.0/22 IP: 2001:67c:22d8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:63:8a:a4:c1:84:8e:d5:b3:d9:1b:3f:7a:39:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:e4:3b:2f:48:ba:d5:13:4a:29:05:d6:b9: b0:9e:7b:ee:65:52:5f:8d:67:b4:88:09:d0:28:97: 56:7c:37:f5:a8:6f:ae:c7:37:68:73:f3:f7:2b:d4: 09:7a:08:4e:91:d6:b6:b7:50:39:90:d1:5e:3a:37: ab:54:cf:80:af:24:6f:1d:26:e0:b2:ef:2f:f0:c5: f4:11:b4:97:a6:2f:77:3d:d2:f1:5f:57:11:21:00: b0:62:e9:66:11:26:1b:9c:cb:11:6a:4b:05:ef:28: a0:e1:0f:24:bc:08:8a:bb:34:bd:8d:15:32:75:74: e6:6c:f8:37:24:d3:91:52:ce:9b:40:09:f2:02:15: a8:b8:3f:e1:e7:15:dc:a3:32:7e:ca:78:f1:40:a0: 5d:91:dc:1b:24:38:16:cf:37:e3:ab:ec:04:25:e6: ef:1e:6b:ca:41:a1:02:66:ec:4a:79:f1:46:1c:46: 98:ca:df:51:b2:dd:b0:b3:b1:fd:f3:d6:4f:f7:74: d5:1b:74:2b:8e:96:e1:9b:cd:40:a8:db:64:91:b9: b1:8f:68:c7:24:58:f3:a3:fe:58:88:10:e2:27:c6: d4:7f:ee:c3:80:fc:90:30:8c:8b:79:f7:a5:85:59: f4:ea:1a:64:84:5c:4c:52:fa:77:b7:9d:a7:c2:c7: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.208.0/22 IPv6: 2001:67c:22d8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47193 Signature Algorithm: sha256WithRSAEncryption 68:b4:c5:b1:97:46:a9:c6:40:28:3d:e9:ad:64:b5:9f:74:ae: b8:18:fc:11:67:ce:1a:f2:28:7b:8f:f2:3b:fc:76:90:24:60: 5a:91:fc:9e:09:70:2c:3e:6a:3b:0d:d3:2d:b0:51:27:c6:9e: 63:b5:ea:44:cf:d0:89:dc:b0:af:71:2e:7d:1a:91:f2:ce:51: 08:1f:1b:4c:26:1f:04:42:6d:9a:26:cf:10:95:43:60:39:a8: 34:f3:f2:9b:49:f2:4d:68:e3:0b:29:a0:45:1b:8a:69:30:7a: dc:bd:36:0b:d8:81:dd:93:db:0e:e6:83:c1:b9:98:62:cf:f6: 87:c1:e4:8a:ea:63:d5:d2:e7:a6:0d:23:83:ee:86:4f:22:40: 7e:e4:bb:5a:bb:9e:44:b0:51:31:13:e3:eb:e3:29:e3:73:29: 2f:6b:0b:a3:0a:ad:22:d7:72:2e:88:a2:f5:a0:fe:cc:04:e1: 2d:79:cb:00:ed:b4:31:e8:72:d9:07:f1:cf:90:99:15:7c:8f: 32:58:bf:e8:31:dc:0f:7a:35:cf:f3:04:eb:6c:68:90:94:3d: f6:47:fb:33:7b:0e:93:64:9f:fa:f9:20:bf:63:46:04:3b:f5: e1:e4:36:09:ce:ed:cf:cc:9d:ba:ed:88:f4:2b:97:95:7a:80: 3d:7d:cd:24 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9XGOKpMGEjtWz2Rs/ejlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhiN2U0YzA0NWNkYWU3OGI1YmY0M2YyYzUzZjFhOTRkOWUxNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTkOy9IutUTSikF1rmwnnvuZVJf jWe0iAnQKJdWfDf1qG+uxzdoc/P3K9QJeghOkda2t1A5kNFeOjerVM+AryRvHSbg su8v8MX0EbSXpi93PdLxX1cRIQCwYulmESYbnMsRaksF7yig4Q8kvAiKuzS9jRUy dXTmbPg3JNORUs6bQAnyAhWouD/h5xXcozJ+ynjxQKBdkdwbJDgWzzfjq+wEJebv HmvKQaECZuxKefFGHEaYyt9Rst2ws7H989ZP93TVG3Qrjpbhm81AqNtkkbmxj2jH JFjzo/5YiBDiJ8bUf+7DgPyQMIyLefelhVn06hpkhFxMUvp3t52nwsc+mwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHiLfkwEXNrni1v0PyxT8alNnhWeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzc2MTNi ZC0wMzQ5LTQyMGQtODgwOC0wYTI2ZTZlNTdmMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzYxM2Jk LTAzNDktNDIwZC04ODA4LTBhMjZlNmU1N2YyMC8xL2VJdC1UQVJjMnVlTFdfUV9M RlB4cVUyZUZaNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW8vQMA8EAgACMAkDBwAgAQZ8ItgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDALhZMA0GCSqGSIb3DQEBCwUAA4IBAQBotMWxl0ap xkAoPemtZLWfdK64GPwRZ84a8ih7j/I7/HaQJGBakfyeCXAsPmo7DdMtsFEnxp5j tepEz9CJ3LCvcS59GpHyzlEIHxtMJh8EQm2aJs8QlUNgOag08/KbSfJNaOMLKaBF G4ppMHrcvTYL2IHdk9sO5oPBuZhiz/aHweSK6mPV0uemDSOD7oZPIkB+5Ltau55E sFExE+Pr4ynjcykvawujCq0i13IuiKL1oP7MBOEtecsA7bQx6HLZB/HPkJkVfI8y WL/oMdwPejXP8wTrbGiQlD32R/szew6TZJ/6+SC/Y0YEO/Xh5DYJzu3PzJ267Yj0 K5eVeoA9fc0k -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:27 2026 by rpki-client