This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer (raw, json) Hash identifier: cIbLaBDt3w/za6yVxNQ6MQ+9EYckei6ZBbGHaqlwD04= Subject key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C65FC0F215F9C086C8B47463D47B10 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44646 AS: 57567 IP: 93.93.80.0/21 IP: 103.39.40.0/23 IP: 185.40.204.0/22 IP: 185.86.44.0/22 IP: 2a02:2b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:5f:c0:f2:15:f9:c0:86:c8:b4:74:63:d4:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:a0:6a:92:dc:81:3f:49:20:ad:f4:81:d8: f8:3d:af:01:dc:23:e9:44:ee:92:2e:91:1c:5e:06: 50:2a:94:f6:73:af:c8:cb:35:c4:c0:4e:e6:90:db: 1d:55:64:5a:a0:a5:8a:d0:00:ca:8d:86:d8:ef:f7: 4e:db:c2:c7:ee:24:d8:0a:37:55:f9:45:35:55:69: a4:eb:f7:6b:1c:87:c6:f5:99:45:e6:74:a0:e1:25: 91:d3:64:29:e0:aa:3b:41:74:89:a4:5d:2d:33:08: 10:00:ff:f3:39:f9:53:bb:11:0b:8a:75:eb:dc:c9: 5c:07:1f:7b:d5:43:91:3c:fd:4b:45:71:ec:66:f7: 91:fc:d0:e5:de:59:37:5f:2c:99:ea:a4:52:e6:a0: 24:90:e7:00:ed:d3:37:63:08:f4:ef:34:6b:1b:35: 09:a7:69:f9:a0:96:60:1d:41:60:ee:a1:27:43:13: 62:7b:68:82:22:f5:06:59:1d:7f:43:df:6f:69:53: 9e:13:c1:62:9f:89:8c:8a:c6:b0:95:70:05:bd:21: 54:ea:8a:b7:4c:b5:fa:6a:06:47:96:87:94:44:9d: 5b:25:7c:88:cf:3e:c9:ed:15:f2:3f:74:0b:81:03: d6:e7:46:7c:99:da:e1:7b:1f:30:cd:c1:92:58:a3: f9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.80.0/21 103.39.40.0/23 185.40.204.0/22 185.86.44.0/22 IPv6: 2a02:2b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44646 57567 Signature Algorithm: sha256WithRSAEncryption 15:64:a0:91:65:37:de:fd:66:fc:83:28:ac:21:e9:a7:64:12: 84:ba:8f:77:07:72:34:00:0e:3f:89:b4:38:95:1a:b0:a5:63: a3:3e:ed:3f:4c:b0:6e:98:77:7d:36:a1:ed:be:70:c7:53:de: e6:56:fa:40:8a:8c:d0:99:ff:e2:2e:84:eb:ee:96:ab:84:6b: 4c:f6:bc:a8:68:bf:d3:06:6e:e7:63:ab:9b:d0:3c:8f:23:ea: 3c:ec:b9:ee:20:26:bc:25:48:8c:20:03:8c:7f:66:e9:7a:a5: 5e:8c:d3:3c:4c:b9:51:52:80:55:60:de:e5:3e:34:20:ae:13: 61:cc:6f:4b:20:ee:3e:1d:7f:cf:e7:97:62:23:57:67:2f:12: 07:d9:40:91:4e:a8:01:66:66:00:ee:fd:b3:df:0d:b5:03:20: 54:1f:03:2f:b2:18:ae:94:10:4f:35:11:45:42:f8:f9:8b:28: 6f:91:a3:f2:2c:a4:01:e6:7f:29:c1:77:43:de:2f:f3:84:69: 5a:14:47:6a:69:28:ae:81:60:59:22:50:2c:86:15:57:8c:a1: 0b:07:c3:05:d7:e9:28:fc:54:87:6d:ca:92:4d:95:84:5d:f5: 32:7b:3a:06:67:c7:e1:53:a3:b3:31:23:3f:3d:6a:10:c9:36: d3:7b:aa:c8 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt3xl/A8hX5wIbItHRj1HsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTc2ZDdkMGJiY2MwODUxNjUyM2Q1ZGYyNGU2ODgyYjcyY2E1NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHOgapLcgT9JIK30gdj4Pa8B3CPp RO6SLpEcXgZQKpT2c6/IyzXEwE7mkNsdVWRaoKWK0ADKjYbY7/dO28LH7iTYCjdV +UU1VWmk6/drHIfG9ZlF5nSg4SWR02Qp4Ko7QXSJpF0tMwgQAP/zOflTuxELinXr 3MlcBx971UORPP1LRXHsZveR/NDl3lk3XyyZ6qRS5qAkkOcA7dM3Ywj07zRrGzUJ p2n5oJZgHUFg7qEnQxNie2iCIvUGWR1/Q99vaVOeE8Fin4mMisawlXAFvSFU6oq3 TLX6agZHloeURJ1bJXyIzz7J7RXyP3QLgQPW50Z8mdrhex8wzcGSWKP50QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFHl219C7zAhRZSPV3yTmiCtyylaTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2RkNjk0 My02ZmNlLTQzMDktODcxMy04NTQxODJjYjA2YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZGQ2OTQz LTZmY2UtNDMwOS04NzEzLTg1NDE4MmNiMDZhNi8xL2VYYlgwTHZNQ0ZGbEk5WGZK T2FJSzNMS1ZwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDXV1QAwQBZycoAwQCuSjMAwQCuVYsMA0EAgAC MAcDBQAqAgKwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCuZgIDAODfMA0GCSqG SIb3DQEBCwUAA4IBAQAVZKCRZTfe/Wb8gyisIemnZBKEuo93B3I0AA4/ibQ4lRqw pWOjPu0/TLBumHd9NqHtvnDHU97mVvpAiozQmf/iLoTr7parhGtM9ryoaL/TBm7n Y6ub0DyPI+o87LnuICa8JUiMIAOMf2bpeqVejNM8TLlRUoBVYN7lPjQgrhNhzG9L IO4+HX/P55diI1dnLxIH2UCRTqgBZmYA7v2z3w21AyBUHwMvshiulBBPNRFFQvj5 iyhvkaPyLKQB5n8pwXdD3i/zhGlaFEdqaSiugWBZIlAshhVXjKELB8MF1+ko/FSH bcqSTZWEXfUyezoGZ8fhU6OzMSM/PWoQyTbTe6rI -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client