This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer File: eSf20AYql2a9WPDQdcTw0QJX5gY.cer (raw, json) Hash identifier: G1dRF2JbZMHVBcPubpVKr4E19ShEpxz1Hq9JrbsfVXw= Subject key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C0E40183AAB98909F8230716948B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198457 IP: 91.234.232.0/24 IP: 2001:678:1004::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0e:40:18:3a:ab:98:90:9f:82:30:71:69:48:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:d6:b2:11:d6:37:2d:9d:bd:b7:51:19:4b: cd:6c:19:59:a9:2b:1f:be:08:d9:70:89:01:23:e1: b0:5d:fa:57:72:f7:a5:bb:0e:81:dc:06:0f:23:3c: 91:be:42:e9:97:a6:3d:f2:e8:c6:f5:a2:ef:6b:03: 99:32:5b:d4:c4:84:46:b5:68:c9:a5:eb:19:f4:66: 8c:fc:8f:3a:f4:f2:a8:08:39:d9:5a:1e:42:0d:c5: d1:2b:ec:d7:35:39:96:54:be:c2:6b:3c:2a:ac:75: 37:ff:30:13:3e:9b:c2:52:e5:70:74:78:ce:a9:34: 39:9e:8f:a1:33:29:3e:a3:56:ab:0b:54:0b:d5:5c: 68:98:af:25:3b:b3:fb:c1:3d:2c:44:7a:6e:11:4a: f5:e7:d8:24:3d:5f:80:ed:db:ed:d1:cf:97:88:dc: 26:f3:8d:44:26:f6:40:87:b1:e9:e9:1f:00:e1:b9: 01:9f:10:2b:c5:fc:1c:d0:3d:03:34:37:bc:60:5c: 03:d2:12:f5:32:f0:b0:07:d8:54:3d:c9:f4:4c:6e: 34:07:7e:7e:20:0f:1c:ce:d0:52:b6:d5:54:04:46: 2c:3f:09:d7:89:8e:84:c9:a4:43:98:1e:52:62:9d: 45:56:d2:9d:36:ce:f9:61:e0:5a:9a:78:6f:cd:6b: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.232.0/24 IPv6: 2001:678:1004::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198457 Signature Algorithm: sha256WithRSAEncryption 00:7d:5c:96:68:92:d8:02:42:69:f3:af:6b:06:f6:35:4b:f6: 1c:e7:97:fc:01:bf:29:3e:2e:f7:e3:ad:70:0e:ec:b1:f3:09: bc:2c:51:e8:4e:ec:98:cb:37:da:fc:69:96:d8:27:3f:08:8f: 49:ee:89:bf:58:3d:ab:33:5f:bc:9d:6e:b8:04:a8:58:c4:96: 5b:51:0a:69:9f:25:df:1a:ca:a3:3e:ef:7a:6d:e9:53:39:98: a8:fc:34:07:8a:38:b4:10:1b:84:07:b5:2f:f3:c8:ad:cd:39: 2d:40:73:50:e5:f9:00:e8:a4:49:5f:dc:9b:1d:9f:60:0f:0d: e9:79:43:67:3c:9d:0b:59:fd:f0:29:79:8c:7d:c9:63:a8:8f: 7b:ce:b6:e9:df:4b:1e:d5:da:79:17:a0:87:69:ea:2b:7d:b2: cc:17:0a:99:dc:17:56:6c:c4:3e:b4:b9:65:de:49:f8:fe:dc: 89:76:a6:83:16:4a:2e:6b:a5:0d:03:df:9a:0d:86:d5:ce:ee: 3e:4a:36:54:81:84:f4:83:23:1c:46:55:fc:84:0b:ca:ee:91: 00:75:fa:cf:d3:3a:63:8a:54:aa:e9:70:8a:1f:31:8e:82:9c: 2c:b1:30:16:f5:d9:9c:1f:8d:c3:c1:19:95:3c:f4:fe:fd:07: 47:60:48:50 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9XA5AGDqrmJCfgjBxaUi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTI3ZjZkMDA2MmE5NzY2YmQ1OGYwZDA3NWM0ZjBkMTAyNTdlNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RPWshHWNy2dvbdRGUvNbBlZqSsf vgjZcIkBI+GwXfpXcveluw6B3AYPIzyRvkLpl6Y98ujG9aLvawOZMlvUxIRGtWjJ pesZ9GaM/I869PKoCDnZWh5CDcXRK+zXNTmWVL7CazwqrHU3/zATPpvCUuVwdHjO qTQ5no+hMyk+o1arC1QL1VxomK8lO7P7wT0sRHpuEUr159gkPV+A7dvt0c+XiNwm 841EJvZAh7Hp6R8A4bkBnxArxfwc0D0DNDe8YFwD0hL1MvCwB9hUPcn0TG40B35+ IA8cztBSttVUBEYsPwnXiY6EyaRDmB5SYp1FVtKdNs75YeBamnhvzWuzEwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHkn9tAGKpdmvVjw0HXE8NECV+YGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2Q2YTli MS01NTJiLTQ2ZWMtYTMxYi1jNWQwY2I3YjdkZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDZhOWIx LTU1MmItNDZlYy1hMzFiLWM1ZDBjYjdiN2RmNS8xL2VTZjIwQVlxbDJhOVdQRFFk Y1R3MFFKWDVnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+roMA8EAgACMAkDBwAgAQZ4EAQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwc5MA0GCSqGSIb3DQEBCwUAA4IBAQAAfVyWaJLY AkJp869rBvY1S/Yc55f8Ab8pPi73461wDuyx8wm8LFHoTuyYyzfa/GmW2Cc/CI9J 7om/WD2rM1+8nW64BKhYxJZbUQppnyXfGsqjPu96belTOZio/DQHiji0EBuEB7Uv 88itzTktQHNQ5fkA6KRJX9ybHZ9gDw3peUNnPJ0LWf3wKXmMfcljqI97zrbp30se 1dp5F6CHaeorfbLMFwqZ3BdWbMQ+tLll3kn4/tyJdqaDFkoua6UNA9+aDYbVzu4+ SjZUgYT0gyMcRlX8hAvK7pEAdfrP0zpjilSq6XCKHzGOgpwssTAW9dmcH43DwRmV PPT+/QdHYEhQ -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:58 2026 by rpki-client