This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer File: eV1ljeA6jc0LbfbnZscH9P49FS4.cer (raw, json) Hash identifier: lzWA0KlF45lFL3Hb8zCBgGcRoYjdNA1GuK4oA3GfBds= Subject key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78349221F8AC7FC25DA665329CD09508 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43479 IP: 185.185.60.0/22 IP: 2a0b:4980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:92:21:f8:ac:7f:c2:5d:a6:65:32:9c:d0:95:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b6:7f:cc:6e:db:7d:e4:18:14:33:d9:23:1b: be:c5:eb:26:a3:fc:fb:48:a5:cd:3e:1e:65:87:70: a2:23:f7:ff:7f:fc:42:cf:e3:ae:4a:e3:f5:76:66: aa:d6:b7:8f:19:0a:1a:fd:46:45:26:09:53:26:3d: 35:a4:7e:0c:a9:6a:15:85:77:f6:84:5f:b9:54:2d: 30:63:56:f3:df:07:ee:c7:e9:8a:36:bd:2d:7f:60: 48:f2:cc:1c:6a:7f:4b:c2:da:92:5f:50:32:16:6d: f1:e0:a8:60:1c:ef:3c:02:68:aa:ec:e3:0e:09:7f: 6f:5f:2f:92:e1:db:5e:cb:70:2b:cc:20:ca:95:88: 1e:80:5f:f4:b3:37:9d:bf:8a:e4:ff:27:1f:43:4e: c3:f4:38:89:22:3d:91:aa:fd:93:ef:e1:41:aa:de: 87:2b:8f:d8:84:30:c0:8b:41:ec:23:9a:94:c4:8d: 63:52:1a:8f:7b:65:ac:a3:1f:59:ca:0e:e4:ab:1f: 3a:20:9d:30:d3:10:75:a8:39:0b:a9:7e:ed:2e:24: 80:f2:70:4b:84:5e:da:8e:c4:e6:78:bd:4f:b8:c9: 14:8b:d4:87:1c:12:b9:86:66:d9:8d:a7:fd:6b:ab: 35:b7:ae:15:40:6d:ef:d2:0c:aa:9c:ee:a6:ec:45: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.60.0/22 IPv6: 2a0b:4980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43479 Signature Algorithm: sha256WithRSAEncryption 70:87:f8:8a:61:b7:02:9a:3a:0a:3b:87:2a:c3:bc:66:64:d8: b6:0e:54:9f:52:12:4d:a4:4a:3c:b6:e3:0a:56:fe:bd:87:e1: 03:11:f2:d4:29:fb:e3:bc:cf:78:98:d1:1a:77:b2:05:67:36: 7c:05:d4:0b:4e:5a:e0:aa:42:1f:21:e8:4a:50:bf:49:a0:6a: 0d:f7:16:dd:4a:07:94:0e:1a:bb:5b:2c:aa:00:f7:b0:9e:34: 05:37:17:54:66:2f:5c:aa:8d:0d:a5:cd:6c:55:89:c6:58:00: 10:26:48:aa:41:97:dc:cd:42:37:84:c0:fa:2c:7e:30:c4:e2: 3d:ff:5c:ec:fd:31:49:53:46:d5:78:c7:5c:56:15:06:7b:f4: ba:60:3f:3f:08:01:fb:26:ba:7e:44:d7:2c:ff:1e:b9:13:9b: 21:48:31:4e:23:b7:2c:29:7e:e3:d6:c0:f8:4a:c2:08:bc:34: fe:f8:cf:73:3b:f5:cc:ca:c3:69:6f:83:57:c4:02:0d:66:4f: 09:eb:1e:da:0b:fd:df:46:b4:45:6e:37:f6:4b:a5:ce:6a:9a: b3:c1:34:56:3e:71:cb:03:da:85:10:a0:a4:27:8e:b4:0a:09: ad:8f:ea:2d:97:fb:88:a1:88:97:56:21:26:fa:d3:b4:eb:2f: 01:d4:ee:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NJIh+Kx/wl2mZTKc0JUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTVkNjU4ZGUwM2E4ZGNkMGI2ZGY2ZTc2NmM3MDdmNGZlM2QxNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bZ/zG7bfeQYFDPZIxu+xesmo/z7 SKXNPh5lh3CiI/f/f/xCz+OuSuP1dmaq1rePGQoa/UZFJglTJj01pH4MqWoVhXf2 hF+5VC0wY1bz3wfux+mKNr0tf2BI8swcan9LwtqSX1AyFm3x4KhgHO88Amiq7OMO CX9vXy+S4dtey3ArzCDKlYgegF/0szedv4rk/ycfQ07D9DiJIj2Rqv2T7+FBqt6H K4/YhDDAi0HsI5qUxI1jUhqPe2Wsox9Zyg7kqx86IJ0w0xB1qDkLqX7tLiSA8nBL hF7ajsTmeL1PuMkUi9SHHBK5hmbZjaf9a6s1t64VQG3v0gyqnO6m7EXWpwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHldZY3gOo3NC23252bHB/T+PRUuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2VmODY4 NC1hNzYxLTQ1MTAtYWMyZi03Yjc1NjUwY2IyY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZWY4Njg0 LWE3NjEtNDUxMC1hYzJmLTdiNzU2NTBjYjJjZS8xL2VWMWxqZUE2amMwTGJmYm5a c2NIOVA0OUZTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubk8MA0EAgACMAcDBQMqC0mAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCp1zANBgkqhkiG9w0BAQsFAAOCAQEAcIf4imG3Apo6 CjuHKsO8ZmTYtg5Un1ISTaRKPLbjClb+vYfhAxHy1Cn747zPeJjRGneyBWc2fAXU C05a4KpCHyHoSlC/SaBqDfcW3UoHlA4au1ssqgD3sJ40BTcXVGYvXKqNDaXNbFWJ xlgAECZIqkGX3M1CN4TA+ix+MMTiPf9c7P0xSVNG1XjHXFYVBnv0umA/PwgB+ya6 fkTXLP8euRObIUgxTiO3LCl+49bA+ErCCLw0/vjPczv1zMrDaW+DV8QCDWZPCese 2gv930a0RW439kulzmqas8E0Vj5xywPahRCgpCeOtAoJrY/qLZf7iKGIl1YhJvrT tOsvAdTuRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client