This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer File: eWXNFQMEg9EUsAQZwluZNABY1SA.cer (raw, json) Hash identifier: mGn6XpeWIH7KquwbBKtom0V8ZATNZDOofRa01a+Hkr0= Subject key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354921CE706416E54383497AE0646D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57244 IP: 192.166.124.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:49:21:ce:70:64:16:e5:43:83:49:7a:e0:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7965cd15030483d114b00419c25b99340058d520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:7a:34:15:f8:de:6f:f2:8a:31:db:d0:db: 50:ee:af:9f:a9:e7:ee:61:44:1b:a5:8a:69:e1:09: 4f:e8:76:b7:d7:ac:0b:d9:3d:d4:f5:8e:74:18:59: d7:81:f4:21:cc:df:87:18:49:a4:f7:d6:da:3c:34: 2c:2e:6a:f7:01:04:8d:64:69:cb:f6:27:eb:ea:47: 9c:79:72:75:1c:b7:c7:2b:f5:e8:38:19:43:70:81: 1e:5d:b9:fa:e2:48:3f:f5:04:dd:3f:6e:e5:a6:55: ee:27:ff:b6:a1:27:81:e0:f7:41:73:09:b9:4f:05: ff:0a:02:45:68:d8:f9:de:24:42:ba:73:6c:29:79: b4:c5:c7:20:3e:3b:ee:2c:c2:e1:ed:84:66:e0:c9: e3:c9:29:dd:d1:46:bb:0a:d7:be:b3:81:43:53:b9: 42:88:e6:25:fb:af:8b:32:14:4b:4b:37:dc:59:39: 25:7e:5d:30:fe:b8:c8:ba:25:8c:a8:10:88:6e:4c: 28:92:90:fa:86:49:76:ed:0a:6d:b6:00:ae:0e:1f: e5:89:60:1d:4e:ef:f6:34:74:96:45:19:f3:f1:c8: db:28:d0:6b:04:cc:ce:44:48:ae:a2:23:30:3a:fb: 0c:6f:3f:b3:b9:a4:9e:c1:4a:e9:93:05:6d:cf:0f: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57244 Signature Algorithm: sha256WithRSAEncryption ad:5d:8b:d0:0f:02:6c:f0:44:51:6c:11:a3:ff:f3:d1:da:e9: 0c:59:49:ae:a7:94:cb:37:4b:6a:c6:c7:4d:bf:78:95:1b:9a: 9a:cf:5e:b7:08:b7:f3:25:4d:5b:2c:14:48:e1:35:4e:34:74: f9:57:d7:74:f4:60:25:c1:e4:71:2c:94:83:c7:94:6c:57:dc: ef:98:c7:43:e0:8d:bb:6d:6e:39:6a:84:34:fa:fe:e0:10:e8: be:14:ff:c5:6c:10:70:a1:82:6b:1e:4b:d7:56:45:55:f5:9d: b7:ac:70:7d:de:e6:95:b9:94:61:e1:78:eb:ff:d1:55:c1:0a: e7:fa:86:eb:72:19:26:52:60:09:09:7d:6b:c4:95:85:d5:d8: 6e:d4:bd:fc:93:b3:73:95:0c:7f:ef:90:30:8f:66:ca:48:0b: 03:5c:ba:c6:9e:49:ed:58:f7:28:aa:c8:ad:1e:80:7f:78:b4: e7:72:be:2b:86:63:c8:ef:0a:39:ff:c1:e5:30:10:43:6d:88: 41:53:55:7b:0e:03:1e:72:0b:ed:f5:50:9b:99:d3:88:ee:69: 8f:48:18:e8:3d:d7:10:6c:37:4f:95:29:c3:b0:c6:c4:06:10: 17:39:16:e4:4e:7e:e6:d9:3a:be:da:03:d8:87:3c:63:6b:c2: ab:c8:83:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NUkhznBkFuVDg0l64GRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTY1Y2QxNTAzMDQ4M2QxMTRiMDA0MTljMjViOTkzNDAwNThkNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl96NBX43m/yijHb0NtQ7q+fqefu YUQbpYpp4QlP6Ha316wL2T3U9Y50GFnXgfQhzN+HGEmk99baPDQsLmr3AQSNZGnL 9ifr6keceXJ1HLfHK/XoOBlDcIEeXbn64kg/9QTdP27lplXuJ/+2oSeB4PdBcwm5 TwX/CgJFaNj53iRCunNsKXm0xccgPjvuLMLh7YRm4MnjySnd0Ua7Cte+s4FDU7lC iOYl+6+LMhRLSzfcWTklfl0w/rjIuiWMqBCIbkwokpD6hkl27QpttgCuDh/liWAd Tu/2NHSWRRnz8cjbKNBrBMzOREiuoiMwOvsMbz+zuaSewUrpkwVtzw9gDwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHllzRUDBIPRFLAEGcJbmTQAWNUgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzljMWYz NC1jNTJhLTQ2MmUtYjQ3ZS1mOWEwZjQ4YzI3NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvOWMxZjM0 LWM1MmEtNDYyZS1iNDdlLWY5YTBmNDhjMjc1YS8xL2VXWE5GUU1FZzlFVXNBUVp3 bHVaTkFCWTFTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwKZ8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDfnDANBgkqhkiG9w0BAQsFAAOCAQEArV2L0A8CbPBEUWwRo//z0drpDFlJrqeU yzdLasbHTb94lRuams9etwi38yVNWywUSOE1TjR0+VfXdPRgJcHkcSyUg8eUbFfc 75jHQ+CNu21uOWqENPr+4BDovhT/xWwQcKGCax5L11ZFVfWdt6xwfd7mlbmUYeF4 6//RVcEK5/qG63IZJlJgCQl9a8SVhdXYbtS9/JOzc5UMf++QMI9mykgLA1y6xp5J 7Vj3KKrIrR6Af3i053K+K4ZjyO8KOf/B5TAQQ22IQVNVew4DHnIL7fVQm5nTiO5p j0gY6D3XEGw3T5Upw7DGxAYQFzkW5E5+5tk6vtoD2Ic8Y2vCq8iDGA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:59 2026 by rpki-client