This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer File: eRP8_AYn_yGf5dZUmArUj0R6tBU.cer (raw, json) Hash identifier: +Uq1kZzw6aqcYq0+B20Rsw/LIPblh7WA1ZoLb584WCo= Subject key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C114FD7EB12DBBF22B8317EA12E0BD9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.95.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:4f:d7:eb:12:db:bf:22:b8:31:7e:a1:2e:0b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7913fcfc0627ff219fe5d654980ad48f447ab415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:95:74:9a:2c:c9:e6:4d:94:87:94:7e:cc: 2f:93:c8:2c:4b:1a:97:3f:bb:ac:ae:3b:8b:9f:69: f4:c5:c9:4e:1b:1a:bb:d2:84:f6:93:50:b4:95:ff: e1:4f:eb:7a:c3:e7:4b:3e:bd:3e:f1:61:47:07:9b: 40:0f:35:86:4b:15:32:2f:e2:72:d5:ef:cd:5a:fb: dd:5d:22:c3:c6:29:e5:5d:49:93:bd:ee:af:83:2d: 2e:88:7a:a0:44:72:43:a3:fa:09:59:03:2b:e1:bf: 23:2a:6f:3d:2f:49:4f:a7:be:f2:e0:bb:f6:2f:c1: e1:ce:1b:cc:fa:2e:cb:6f:7a:ff:b9:f4:e6:56:93: 66:ff:67:52:5c:ef:f6:dc:85:c6:96:58:fd:c7:b0: 4b:e4:22:aa:4e:5c:9d:8b:9d:53:ff:ce:f9:d4:5f: a5:92:8d:e9:34:41:68:9d:b3:62:05:1a:35:3b:b5: 4e:0f:1e:4e:62:fe:eb:3d:40:44:fa:af:8f:3c:bb: d0:aa:94:5e:28:30:48:db:1b:2a:d0:b0:11:18:b4: 12:de:a4:d2:ff:34:2c:11:9b:fa:3e:cf:f3:d7:71: c8:37:4e:9e:45:12:5c:ea:c9:f9:ae:12:2d:51:9a: b2:88:c2:ec:85:c6:77:73:3b:21:81:90:4a:f0:12: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.245.0/24 Signature Algorithm: sha256WithRSAEncryption 27:31:44:3c:3a:78:21:c9:c9:91:21:b8:4e:02:1a:8d:23:ea: b6:ab:ab:d2:ef:b5:86:78:ba:27:ef:66:27:cd:3d:f7:27:89: 79:6b:1b:78:bd:a7:eb:f2:81:4f:15:1d:58:83:7e:d9:68:3e: bb:73:27:73:10:6c:66:92:50:1d:41:24:fc:97:b2:d9:53:9f: 59:d9:e1:13:73:62:78:44:54:fb:0d:19:c8:c6:ff:fe:82:fd: ef:a7:2c:a5:63:56:cd:0a:6c:aa:e3:66:94:81:a3:6c:4b:2b: 8a:6f:99:2d:ce:80:a1:39:5b:37:ee:ff:03:cf:68:d9:c4:8c: f7:e1:53:5b:7f:7c:19:42:da:d6:84:ac:00:10:24:20:cb:06: 66:c5:2b:d5:ff:b8:b5:95:23:98:17:bf:52:26:51:7f:05:60: 33:b5:a7:e1:a4:2b:f2:a4:f3:f2:54:ba:6a:34:50:79:93:93: cb:52:59:b0:53:b9:5d:39:36:6a:ad:f9:86:c0:c9:fc:8a:34: be:93:75:41:cf:3e:42:9f:b5:1a:3a:7f:27:a1:65:77:fb:d5: 15:c5:f9:06:8a:cc:2a:4c:1c:dd:8d:af:7e:00:e5:f0:74:c8: bd:ee:07:8d:aa:5b:41:d8:2d:70:1b:bb:e5:7c:44:76:aa:bf: 17:5e:64:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EU/X6xLbvyK4MX6hLgvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTEzZmNmYzA2MjdmZjIxOWZlNWQ2NTQ5ODBhZDQ4ZjQ0N2FiNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GaVdJosyeZNlIeUfswvk8gsSxqX P7usrjuLn2n0xclOGxq70oT2k1C0lf/hT+t6w+dLPr0+8WFHB5tADzWGSxUyL+Jy 1e/NWvvdXSLDxinlXUmTve6vgy0uiHqgRHJDo/oJWQMr4b8jKm89L0lPp77y4Lv2 L8HhzhvM+i7Lb3r/ufTmVpNm/2dSXO/23IXGllj9x7BL5CKqTlydi51T/8751F+l ko3pNEFonbNiBRo1O7VODx5OYv7rPUBE+q+PPLvQqpReKDBI2xsq0LARGLQS3qTS /zQsEZv6Ps/z13HIN06eRRJc6sn5rhItUZqyiMLshcZ3czshgZBK8BIKRwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHkT/PwGJ/8hn+XWVJgK1I9EerQVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzMyMTY3 OC1hYjEzLTQzNTQtYjA3YS0zNTllNTYyNGViM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMzIxNjc4 LWFiMTMtNDM1NC1iMDdhLTM1OWU1NjI0ZWIzYy8xL2VSUDhfQVluX3lHZjVkWlVt QXJVajBSNnRCVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1/1MA0GCSqGSIb3DQEBCwUAA4IBAQAnMUQ8 OnghycmRIbhOAhqNI+q2q6vS77WGeLon72YnzT33J4l5axt4vafr8oFPFR1Yg37Z aD67cydzEGxmklAdQST8l7LZU59Z2eETc2J4RFT7DRnIxv/+gv3vpyylY1bNCmyq 42aUgaNsSyuKb5ktzoChOVs37v8Dz2jZxIz34VNbf3wZQtrWhKwAECQgywZmxSvV /7i1lSOYF79SJlF/BWAztafhpCvypPPyVLpqNFB5k5PLUlmwU7ldOTZqrfmGwMn8 ijS+k3VBzz5Cn7UaOn8noWV3+9UVxfkGiswqTBzdja9+AOXwdMi97geNqltB2C1w G7vlfER2qr8XXmS6 -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client