This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer File: eMceZc96PS4vwrjMPUPUXSs1DfM.cer (raw, json) Hash identifier: B+XyY5luxCc6uMrkEQhNqjnC3o1JBsOCcWo5g30nwuw= Subject key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7304D28D7881585467161CB9D2321 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8592 IP: 45.147.80.0/22 IP: 212.16.0.0/19 IP: 2a02:24f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:30:4d:28:d7:88:15:85:46:71:61:cb:9d:23:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:2e:ad:d9:08:7a:42:d5:aa:91:88:03:3c: b7:1f:c3:5b:75:25:04:2e:21:8d:27:f8:40:18:79: 09:0b:b8:3b:39:3e:a1:16:8c:60:53:7b:3e:31:ed: 22:f9:ff:c9:7d:57:54:ea:5e:38:5b:10:8b:68:42: 81:ea:e3:08:40:3b:9e:03:63:d2:09:bd:2f:07:d3: 63:a6:0c:6e:c0:b4:9f:2e:4c:3f:22:e0:b9:fe:de: fa:f7:ab:b0:e4:75:ed:41:bf:c7:7d:03:a2:2d:75: b6:c9:d1:a6:54:4e:73:5c:52:da:4b:8e:a6:9d:ab: 22:bf:01:33:39:f0:f6:2a:6d:47:ba:72:9a:ca:e4: 64:e2:61:b4:2c:42:75:27:08:55:91:25:07:cc:6d: fd:ed:cc:2e:08:41:37:7c:82:4b:22:e1:6a:7a:f1: 28:d1:78:2f:06:58:86:31:22:06:79:b2:b5:d3:4e: 25:53:9c:08:72:8e:6a:34:09:7a:5b:fe:a7:b4:22: d5:43:f7:bb:77:31:ff:ba:73:d7:81:bc:aa:79:7b: b9:a9:59:ac:1c:9a:de:4e:e4:3a:91:83:fd:f6:e7: fc:78:0e:94:d8:79:d6:d7:81:ee:5a:4c:6d:e4:91: e5:36:d3:a5:f6:09:02:73:7d:9c:e1:2f:ee:1b:6f: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.80.0/22 212.16.0.0/19 IPv6: 2a02:24f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8592 Signature Algorithm: sha256WithRSAEncryption 50:dc:c9:35:5c:f5:01:72:32:de:02:0c:c3:95:1d:25:c5:6c: e9:f3:d5:da:f0:21:25:3b:81:07:96:db:ab:1d:16:70:e9:2a: 4f:ea:03:6c:8e:63:0a:fc:08:af:dd:b5:2e:83:fb:94:60:2a: 32:a7:5b:fb:ea:98:4c:49:20:1d:36:4a:04:92:89:4b:db:35: a5:c9:8e:49:93:28:14:9e:ef:6f:59:10:7c:4f:4f:c3:59:87: e2:58:00:83:c6:47:2c:a7:f5:a2:e6:46:c2:31:2d:b9:da:a5: 52:00:f2:28:5a:e8:79:b2:fe:35:20:21:2e:6d:78:ac:85:58: a6:cc:0e:d2:91:0e:1c:60:4b:a7:76:aa:0d:9b:86:11:ce:ce: 25:d8:5a:15:4e:37:50:43:06:52:dd:62:aa:93:fb:4f:de:3c: f0:75:08:11:af:c4:23:03:5b:79:86:d1:94:fb:22:a2:ef:a5: c0:70:2e:fd:7b:2a:09:2d:12:81:b2:d7:6b:a6:71:f6:f6:75: 22:07:8f:1b:58:46:f3:40:26:07:c8:c0:b9:d4:55:fd:c8:a6: 27:fd:c2:be:1c:8c:82:1f:42:27:90:2d:28:99:c8:ea:8a:01: 64:ae:1e:48:c9:1e:9c:e1:22:b9:74:da:c6:62:84:df:72:d7: 5c:9f:c7:a0 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+pzBNKNeIFYVGcWHLnSMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGM3MWU2NWNmN2EzZDJlMmZjMmI4Y2MzZDQzZDQ1ZDJiMzUwZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFQurdkIekLVqpGIAzy3H8NbdSUE LiGNJ/hAGHkJC7g7OT6hFoxgU3s+Me0i+f/JfVdU6l44WxCLaEKB6uMIQDueA2PS Cb0vB9NjpgxuwLSfLkw/IuC5/t7696uw5HXtQb/HfQOiLXW2ydGmVE5zXFLaS46m nasivwEzOfD2Km1HunKayuRk4mG0LEJ1JwhVkSUHzG397cwuCEE3fIJLIuFqevEo 0XgvBliGMSIGebK1004lU5wIco5qNAl6W/6ntCLVQ/e7dzH/unPXgbyqeXu5qVms HJreTuQ6kYP99uf8eA6U2HnW14HuWkxt5JHlNtOl9gkCc32c4S/uG2/aewIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFHjHHmXPej0uL8K4zD1D1F0rNQ3zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2ZiMDI4 MC05ZDg2LTRjMTEtODlkMS04Nzg4MTEyN2ZjYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZmIwMjgw LTlkODYtNGMxMS04OWQxLTg3ODgxMTI3ZmNiZi8xL2VNY2VaYzk2UFM0dndyak1Q VVBVWFNzMURmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZNQAwQF1BAAMA0EAgACMAcDBQAqAiTwMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiGQMA0GCSqGSIb3DQEBCwUAA4IBAQBQ3Mk1 XPUBcjLeAgzDlR0lxWzp89Xa8CElO4EHlturHRZw6SpP6gNsjmMK/Aiv3bUug/uU YCoyp1v76phMSSAdNkoEkolL2zWlyY5JkygUnu9vWRB8T0/DWYfiWACDxkcsp/Wi 5kbCMS252qVSAPIoWuh5sv41ICEubXishVimzA7SkQ4cYEundqoNm4YRzs4l2FoV TjdQQwZS3WKqk/tP3jzwdQgRr8QjA1t5htGU+yKi76XAcC79eyoJLRKBstdrpnH2 9nUiB48bWEbzQCYHyMC51FX9yKYn/cK+HIyCH0InkC0omcjqigFkrh5IyR6c4SK5 dNrGYoTfctdcn8eg -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:01 2026 by rpki-client