This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer File: eSWRAsFpk85eE7CMumDu2tf5J3M.cer (raw, json) Hash identifier: XygSfZk4Etsjo6/J5NvtaGBNyvTVYqqajRz/k1w5YdE= Subject key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC6BA091494B3A743E53595065031 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.83.140.0/22 IP: 213.188.192.0/19 IP: 2a09:8280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:ba:09:14:94:b3:a7:43:e5:35:95:06:50:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79259102c16993ce5e13b08cba60eedad7f92773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:36:d3:e4:a2:f8:3c:c0:35:4d:a2:65:f1: df:77:3c:ef:59:ad:11:8d:e4:f9:1d:9b:90:31:89: 7f:cd:1e:06:fc:1e:eb:78:34:8c:88:9c:53:ec:fa: 40:a9:3a:97:e9:39:32:79:5e:c5:b9:ae:9d:96:24: 7e:f9:20:98:03:81:e3:c2:9d:55:15:56:eb:7a:21: fc:60:51:ac:e6:3e:e3:d6:f3:25:5a:cc:b1:57:67: 2e:46:d3:39:fe:0b:bc:dc:f6:0e:d6:60:71:a0:2d: 84:54:dd:dc:20:80:78:83:91:60:57:71:e3:6c:ac: 21:37:6a:1b:68:b4:30:85:21:cd:8b:49:a5:8d:79: cb:66:61:f8:06:9c:aa:4f:7c:b2:0d:12:1b:9a:4a: 5a:14:5a:97:22:03:50:f8:c7:c3:a3:c4:a0:07:ca: 14:4f:7c:fc:c4:c4:4b:d2:df:fc:0e:2c:ce:ce:d5: 3a:da:d7:22:cf:6f:52:70:9d:36:07:ea:82:46:69: 9a:83:a0:91:ea:05:04:31:06:b9:70:ba:1a:9d:80: 4e:d8:29:ce:d4:b7:a2:23:60:f3:8e:5a:fe:cf:51: aa:6b:fa:97:d9:d5:fe:95:a6:fc:55:27:5f:29:d3: 88:48:d8:b9:21:5c:4f:7f:07:96:8a:47:6b:cc:2c: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.140.0/22 213.188.192.0/19 IPv6: 2a09:8280::/29 Signature Algorithm: sha256WithRSAEncryption 60:fc:ca:44:c4:c9:b9:06:94:28:2a:c1:6d:63:eb:a8:ed:a0: 0b:0a:6a:32:08:69:ba:1a:5e:85:5c:17:a9:49:13:58:f2:be: 8b:ab:bb:44:40:15:b3:22:1e:32:32:20:a5:c2:19:ae:fe:e4: a9:ab:8e:81:cc:40:6a:3e:b8:a3:ed:05:6d:e7:6f:13:51:36: 5d:f0:60:ce:6b:8f:9f:6a:c7:8f:f8:f3:11:0f:ba:91:2a:cc: a2:09:f9:ce:8b:c8:0d:50:bb:18:29:e8:01:12:10:68:33:b7: 0a:87:aa:89:9f:4b:58:12:b6:b1:28:34:f2:43:b1:d7:30:ca: e8:15:96:30:ea:1c:75:2d:c5:9d:98:13:17:86:de:76:59:ca: f4:1a:27:17:88:d8:3b:13:64:74:62:25:9b:dd:64:ed:72:e8: 9b:65:a7:2a:9e:b5:dc:c3:fa:a2:1c:7d:88:46:fd:6f:2d:64: 35:e1:ec:72:7a:9f:ab:58:27:92:cb:69:85:d3:63:95:c4:22: eb:9d:57:1f:49:1c:e9:bb:44:9f:72:0d:87:1f:d9:c0:cd:9b: 17:1e:8f:df:62:10:d0:96:c9:ed:0a:ca:4e:18:70:93:ed:62: e3:47:52:37:d2:f9:49:df:6b:e1:74:9d:c0:5f:71:cf:f3:6d: 45:1e:de:ca -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5fsa6CRSUs6dD5TWVBlAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTI1OTEwMmMxNjk5M2NlNWUxM2IwOGNiYTYwZWVkYWQ3ZjkyNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCU20+Si+DzANU2iZfHfdzzvWa0R jeT5HZuQMYl/zR4G/B7reDSMiJxT7PpAqTqX6TkyeV7Fua6dliR++SCYA4Hjwp1V FVbreiH8YFGs5j7j1vMlWsyxV2cuRtM5/gu83PYO1mBxoC2EVN3cIIB4g5FgV3Hj bKwhN2obaLQwhSHNi0mljXnLZmH4BpyqT3yyDRIbmkpaFFqXIgNQ+MfDo8SgB8oU T3z8xMRL0t/8DizOztU62tciz29ScJ02B+qCRmmag6CR6gUEMQa5cLoanYBO2CnO 1LeiI2Dzjlr+z1Gqa/qX2dX+lab8VSdfKdOISNi5IVxPfweWikdrzCx/2QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFHklkQLBaZPOXhOwjLpg7trX+SdzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1Lzc1ZDZl Mi1jN2JhLTQ3OGQtODc5ZS0yNWY0Zjc0MzBiZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNzVkNmUy LWM3YmEtNDc4ZC04NzllLTI1ZjRmNzQzMGJkYS8xL2VTV1JBc0Zwazg1ZUU3Q011 bUR1MnRmNUozTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCTVOMAwQF1bzAMA0EAgACMAcDBQMqCYKAMA0G CSqGSIb3DQEBCwUAA4IBAQBg/MpExMm5BpQoKsFtY+uo7aALCmoyCGm6Gl6FXBep SRNY8r6Lq7tEQBWzIh4yMiClwhmu/uSpq46BzEBqPrij7QVt528TUTZd8GDOa4+f aseP+PMRD7qRKsyiCfnOi8gNULsYKegBEhBoM7cKh6qJn0tYEraxKDTyQ7HXMMro FZYw6hx1LcWdmBMXht52Wcr0GicXiNg7E2R0YiWb3WTtcuibZacqnrXcw/qiHH2I Rv1vLWQ14exyep+rWCeSy2mF02OVxCLrnVcfSRzpu0Sfcg2HH9nAzZsXHo/fYhDQ lsntCspOGHCT7WLjR1I30vlJ32vhdJ3AX3HP821FHt7K -----END CERTIFICATE-----Generated at Mon Jan 12 04:04:56 2026 by rpki-client