This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer File: ePDYlQwP20Hf1XxZSCglIGEcFsM.cer (raw, json) Hash identifier: bxehZ8C9zcQxzTym7UDjJMNvvEP5BYi/kCBzrIc0w9Q= Subject key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC89B8B239B59220BC70C27746AC970 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.208.60.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9b:8b:23:9b:59:22:0b:c7:0c:27:74:6a:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:b0:92:5c:55:08:e0:1a:44:60:ba:d9:29: ad:90:b1:69:59:64:f3:6e:5d:c6:2d:f3:f2:04:40: 1d:0a:97:49:80:1a:7d:29:36:7b:b5:41:6b:ae:33: f0:99:e7:05:77:02:f7:91:2f:e3:c4:10:0a:e6:8b: 78:e7:c7:fc:e5:ab:ef:06:30:46:e8:93:d8:7f:ba: 42:6c:43:11:4a:7d:b7:68:38:a7:83:9a:65:12:eb: d2:43:c2:e3:63:25:9e:9e:41:06:03:74:47:07:aa: 8f:3e:eb:3b:6f:39:59:78:88:ef:fb:a1:92:05:97: 98:ee:f2:8c:ac:4e:48:60:1c:e5:9c:9c:a6:78:15: b9:51:a2:f6:58:22:b2:87:e6:de:70:b5:7b:c2:69: 00:7a:5e:4e:fa:f1:17:a1:c6:6f:4e:f5:f1:5d:78: 66:03:41:73:d1:67:df:ee:76:3c:15:b5:3c:26:f8: 15:75:20:98:9e:26:72:b4:4b:0d:dd:6b:73:44:79: d4:23:d3:44:06:3e:cb:90:ef:d7:75:03:d5:80:1d: 6d:97:5d:7f:58:26:31:90:69:73:4f:47:5f:d8:f8: e1:68:d3:91:f8:04:fc:4f:9d:36:21:2e:75:65:32: e7:7a:c8:cd:d2:30:11:e0:a1:3f:62:4c:fd:00:63: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.60.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:9e:9a:78:38:4c:36:a6:ce:5f:73:e3:0f:5b:57:71:99:56: cd:63:37:50:d4:71:27:2b:cd:69:e9:c5:cf:1e:5c:11:74:b3: 3b:dd:3c:c9:df:5b:cb:73:a8:f6:47:3c:e8:59:36:69:6a:c8: 30:75:6e:c8:d1:47:d3:e2:1c:97:13:94:4a:4f:d6:c5:05:36: ec:09:a3:4c:60:b0:bb:bb:7d:58:13:49:d8:aa:ed:b6:4f:80: 82:92:8b:7a:d7:51:23:b7:8e:bd:ef:18:62:de:eb:63:69:9c: 72:2f:d1:d8:7f:d8:29:20:c6:44:4c:37:8d:a1:a3:1d:3a:69: 1d:db:a8:e5:7e:4c:cd:f3:8d:08:77:30:b3:35:94:60:d1:13: 74:73:66:71:b1:11:f0:ad:c8:44:85:c7:b3:3e:23:1e:97:b6: d4:08:27:54:58:a7:95:b5:df:73:f6:05:e5:93:2d:32:84:af: 85:6f:4e:b8:13:95:ec:4d:2a:78:45:17:7d:d1:bb:38:76:7c: ea:59:66:9c:0a:fc:21:34:06:6b:37:05:8e:4c:79:cc:7d:4a: 0b:31:75:1b:f2:3b:88:f3:2e:87:e6:27:20:ae:84:ce:68:3a: 9f:aa:23:25:b6:78:a0:80:ad:c2:97:08:1f:99:b2:ee:5a:7a: a8:ad:af:db -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yJuLI5tZIgvHDCd0aslwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGYwZDg5NTBjMGZkYjQxZGZkNTdjNTk0ODI4MjUyMDYxMWMxNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H2wklxVCOAaRGC62SmtkLFpWWTz bl3GLfPyBEAdCpdJgBp9KTZ7tUFrrjPwmecFdwL3kS/jxBAK5ot458f85avvBjBG 6JPYf7pCbEMRSn23aDing5plEuvSQ8LjYyWenkEGA3RHB6qPPus7bzlZeIjv+6GS BZeY7vKMrE5IYBzlnJymeBW5UaL2WCKyh+becLV7wmkAel5O+vEXocZvTvXxXXhm A0Fz0Wff7nY8FbU8JvgVdSCYniZytEsN3WtzRHnUI9NEBj7LkO/XdQPVgB1tl11/ WCYxkGlzT0df2PjhaNOR+AT8T502IS51ZTLnesjN0jAR4KE/Ykz9AGOIQQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHjw2JUMD9tB39V8WUgoJSBhHBbDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2EyNjdm MC05ZWZiLTQ0YWYtYTA2YS02MWRkYmYxYzM0OWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvYTI2N2Yw LTllZmItNDRhZi1hMDZhLTYxZGRiZjFjMzQ5Yi8xL2VQRFlsUXdQMjBIZjFYeFpT Q2dsSUdFY0ZzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9A8MA0GCSqGSIb3DQEBCwUAA4IBAQAKnpp4 OEw2ps5fc+MPW1dxmVbNYzdQ1HEnK81p6cXPHlwRdLM73TzJ31vLc6j2RzzoWTZp asgwdW7I0UfT4hyXE5RKT9bFBTbsCaNMYLC7u31YE0nYqu22T4CCkot611Ejt469 7xhi3utjaZxyL9HYf9gpIMZETDeNoaMdOmkd26jlfkzN840IdzCzNZRg0RN0c2Zx sRHwrchEhcezPiMel7bUCCdUWKeVtd9z9gXlky0yhK+Fb064E5XsTSp4RRd90bs4 dnzqWWacCvwhNAZrNwWOTHnMfUoLMXUb8juI8y6H5icgroTOaDqfqiMltniggK3C lwgfmbLuWnqora/b -----END CERTIFICATE-----Generated at Tue Jan 27 05:35:08 2026 by rpki-client