This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer File: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer (raw, json) Hash identifier: 1pF1wxBJiiVU4XBWfjM9BuLs9WIXAqEGmfTF4zqBKtQ= Subject key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F852C3A34003736165B6B31D538556D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15889 IP: 91.208.125.0/24 IP: 193.23.137.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2c:3a:34:00:37:36:16:5b:6b:31:d5:38:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:d9:76:08:45:cf:1c:c7:66:50:33:9c:62: 9b:03:d0:f1:fb:49:27:17:9d:9c:4c:35:c7:81:b8: 2b:ad:4e:3d:33:4b:d8:23:1c:09:16:83:ee:20:5b: 4a:fe:44:8c:9a:5c:ac:a6:76:18:4e:20:e5:8b:c1: e1:3c:86:31:0f:c9:32:d6:6a:c7:56:b5:73:6c:f1: 72:ef:c1:46:59:0f:4b:6b:71:cc:55:39:f6:ac:0b: 67:ec:8f:18:f1:75:37:9d:8e:b1:be:6d:c1:5d:d9: ab:f7:1b:bb:a8:50:cf:bf:ec:f4:0b:d2:86:99:a4: 58:dc:23:11:8f:25:8e:e3:e3:de:83:b0:3b:64:42: 1d:1a:67:dd:e4:01:69:21:9b:65:5e:0d:94:3d:9b: f5:be:f3:34:bb:96:2c:31:56:01:d2:63:ab:30:0d: c1:53:fe:76:fb:47:4d:7a:cd:51:83:cb:47:42:7a: 59:7c:42:79:e1:50:d8:17:07:c6:d3:7f:9b:db:37: 3c:7c:22:57:8e:05:15:61:1e:53:e8:5a:f1:26:ba: 78:ea:44:28:f7:b5:6f:e9:50:11:6e:78:7f:db:2c: e8:65:60:46:45:72:cf:81:d8:2c:7f:f8:c5:f0:4b: c4:eb:cc:37:e4:86:ab:1c:15:2c:6a:24:4e:ae:11: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.125.0/24 193.23.137.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15889 Signature Algorithm: sha256WithRSAEncryption 73:a2:b9:d5:06:42:04:a5:b1:ee:98:32:21:40:3d:bc:87:bd: 39:c7:11:1c:83:6b:e5:cd:e5:68:f2:ea:71:1f:5f:ab:c9:5a: 98:5f:23:c8:67:ef:ad:d0:80:53:93:52:af:ee:6a:70:00:69: f9:58:36:da:17:3a:75:2c:22:0b:ca:04:73:07:4a:5e:b7:2f: eb:7b:27:af:36:29:0c:e3:ee:3b:03:e4:34:52:7f:fb:27:e2: 8e:e0:7f:f7:20:df:0b:53:ae:8f:16:78:12:b7:81:ee:a5:0c: 53:2c:d7:f8:04:3e:2a:d7:84:12:8f:05:c4:95:c5:4b:d3:e6: ed:ab:f6:a9:59:1f:6d:33:e7:b5:11:06:cc:09:6b:25:0c:c2: 1d:8e:9a:74:ed:1f:68:e6:3b:31:68:56:34:bd:e8:bb:8f:70: e0:62:d5:98:b9:9d:e1:d4:90:78:cb:93:64:89:43:8f:45:eb: f9:c3:b8:79:a6:5a:1d:2c:66:8a:40:80:5f:4b:98:c5:15:a0: 50:ed:18:5f:95:b2:85:87:80:76:a4:b2:5d:95:8e:63:3c:04: 83:34:d3:57:2b:4f:41:aa:a3:bd:cf:44:04:0b:6d:c9:f7:45: 69:12:bf:a8:e0:7b:6d:ed:61:a7:e0:2f:05:67:9c:6a:d0:26: 39:cd:59:d4 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/hSw6NAA3NhZbazHVOFVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTg1YzViYzc1NGNhNTg1YmQyNTkyZTZiZjFjZmE2ZjY0OWNkOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKPZdghFzxzHZlAznGKbA9Dx+0kn F52cTDXHgbgrrU49M0vYIxwJFoPuIFtK/kSMmlyspnYYTiDli8HhPIYxD8ky1mrH VrVzbPFy78FGWQ9La3HMVTn2rAtn7I8Y8XU3nY6xvm3BXdmr9xu7qFDPv+z0C9KG maRY3CMRjyWO4+Peg7A7ZEIdGmfd5AFpIZtlXg2UPZv1vvM0u5YsMVYB0mOrMA3B U/52+0dNes1Rg8tHQnpZfEJ54VDYFwfG03+b2zc8fCJXjgUVYR5T6FrxJrp46kQo 97Vv6VARbnh/2yzoZWBGRXLPgdgsf/jF8EvE68w35IarHBUsaiROrhFJvwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHmFxbx1TKWFvSWS5r8c+m9knNn0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzFmOWJk NC0yZjZjLTRkYTItYmRkNy0xYzY3ZDI0YWU2NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMWY5YmQ0 LTJmNmMtNGRhMi1iZGQ3LTFjNjdkMjRhZTY3Mi8xL2VZWEZ2SFZNcFlXOUpaTG12 eHo2YjJTYzJmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9B9AwQAwReJMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAj4RMA0GCSqGSIb3DQEBCwUAA4IBAQBzornVBkIEpbHumDIhQD28h705 xxEcg2vlzeVo8upxH1+ryVqYXyPIZ++t0IBTk1Kv7mpwAGn5WDbaFzp1LCILygRz B0pety/reyevNikM4+47A+Q0Un/7J+KO4H/3IN8LU66PFngSt4HupQxTLNf4BD4q 14QSjwXElcVL0+btq/apWR9tM+e1EQbMCWslDMIdjpp07R9o5jsxaFY0vei7j3Dg YtWYuZ3h1JB4y5NkiUOPRev5w7h5plodLGaKQIBfS5jFFaBQ7RhflbKFh4B2pLJd lY5jPASDNNNXK09BqqO9z0QEC23J90VpEr+o4Htt7WGn4C8FZ5xq0CY5zVnU -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:38 2026 by rpki-client