This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer File: eYvLVDKkXyWwQQOWerQDwp0NQwo.cer (raw, json) Hash identifier: m/RbLoij71cSpmcCt75Xi8ufKMTMFRZ5ZChFls/uj1c= Subject key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4DE7D97D8FAC9C0E4CE225CE9DD36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62405 IP: 185.36.160.0/22 IP: 2a00:de20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:de:7d:97:d8:fa:c9:c0:e4:ce:22:5c:e9:dd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=798bcb5432a45f25b04103967ab403c29d0d430a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:ff:7c:9d:33:e1:35:0e:6c:02:14:ba:6b: 39:09:f7:57:6e:5e:04:5d:0f:38:cf:11:9c:37:d7: cc:46:f5:8a:44:83:67:14:4b:c2:77:6e:11:bd:b6: 29:92:c2:0e:e6:07:6a:3d:18:e7:81:9a:fe:c6:b5: 12:3a:24:67:a7:d5:a2:8c:84:9e:fc:6b:c8:a0:3b: a5:05:18:ee:90:ef:ca:14:6b:10:00:31:8d:49:f6: a8:67:60:d2:ea:8b:e9:8b:11:de:1d:4a:85:83:a2: c6:4c:59:10:06:37:8f:5e:40:6f:8f:ca:4f:69:6c: 5a:29:66:fe:27:af:d7:75:f6:e5:56:c0:02:c7:1a: 03:9a:76:e0:06:3d:c7:19:0c:8c:66:3e:13:b3:d1: 53:1b:f2:0a:84:4b:aa:7f:25:05:5d:5e:8c:be:e3: 6d:a8:4c:22:13:97:de:7b:39:64:11:29:f7:92:0f: d7:ff:0f:b8:2a:97:64:38:5d:4a:37:9d:e2:03:9b: 4d:d5:84:b4:3a:13:49:61:d1:5e:47:c7:e8:2d:78: fe:2b:65:7f:7d:cb:f5:c0:41:90:69:de:62:25:cf: b4:49:8f:44:69:9c:d3:62:d5:b9:ff:18:16:d9:6c: b3:1c:e7:ca:ad:e5:12:90:a5:33:5f:df:48:8d:22: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.160.0/22 IPv6: 2a00:de20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62405 Signature Algorithm: sha256WithRSAEncryption 65:b9:5a:60:72:99:4c:09:84:1a:07:ee:a8:5d:7b:96:0e:38: 28:01:e9:61:d6:af:9a:42:fb:da:41:b6:6d:0a:4d:70:6d:c3: 4c:7e:9b:23:e6:dd:bd:86:b1:5d:73:aa:39:1c:4c:49:3a:59: 83:c3:45:ed:18:7b:a8:57:35:4f:b7:d1:4e:42:ac:49:9b:bd: 92:4a:d8:7d:6b:26:e9:b5:51:54:43:fa:c5:37:b7:14:5c:6a: ed:4e:85:50:0c:80:62:43:2a:16:72:bb:c0:86:81:c8:58:fc: bb:bb:fd:7d:bc:5b:82:fc:f3:f6:6a:87:74:14:d8:35:fb:ee: f1:37:5e:70:20:db:18:e5:24:02:52:bb:c0:dd:85:fe:02:8a: 1b:2a:80:93:bd:5b:0a:a2:a5:e4:25:6f:74:93:e6:92:75:06: a9:d6:a3:76:f0:f7:23:9e:ff:1c:67:61:07:6f:96:6b:2c:60: 54:f5:a3:9e:4c:7d:b6:6c:bc:49:3c:b3:11:16:7e:bf:3f:1a: 5b:3b:c0:64:28:e7:5c:c1:73:79:0a:5c:46:82:4a:01:83:8d: 9b:15:8c:70:cf:54:91:90:b6:7f:ba:26:35:55:87:de:30:12: 0c:f9:d7:fc:38:08:16:13:b9:14:03:91:dd:ab:78:c2:60:0e: 7d:cb:e6:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pN59l9j6ycDkziJc6d02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OThiY2I1NDMyYTQ1ZjI1YjA0MTAzOTY3YWI0MDNjMjlkMGQ0MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumn/fJ0z4TUObAIUums5CfdXbl4E XQ84zxGcN9fMRvWKRINnFEvCd24RvbYpksIO5gdqPRjngZr+xrUSOiRnp9WijISe /GvIoDulBRjukO/KFGsQADGNSfaoZ2DS6ovpixHeHUqFg6LGTFkQBjePXkBvj8pP aWxaKWb+J6/XdfblVsACxxoDmnbgBj3HGQyMZj4Ts9FTG/IKhEuqfyUFXV6MvuNt qEwiE5feezlkESn3kg/X/w+4KpdkOF1KN53iA5tN1YS0OhNJYdFeR8foLXj+K2V/ fcv1wEGQad5iJc+0SY9EaZzTYtW5/xgW2WyzHOfKreUSkKUzX99IjSIJnQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHmLy1QypF8lsEEDlnq0A8KdDUMKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzVkMGZi Yi1hZDdkLTRhOWEtYjE3NC0xMWIyOTA1MjUyOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvNWQwZmJi LWFkN2QtNGE5YS1iMTc0LTExYjI5MDUyNTI4ZC8xL2VZdkxWREtrWHlXd1FRT1dl clFEd3AwTlF3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSSgMA0EAgACMAcDBQAqAN4gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzxTANBgkqhkiG9w0BAQsFAAOCAQEAZblaYHKZTAmE GgfuqF17lg44KAHpYdavmkL72kG2bQpNcG3DTH6bI+bdvYaxXXOqORxMSTpZg8NF 7Rh7qFc1T7fRTkKsSZu9kkrYfWsm6bVRVEP6xTe3FFxq7U6FUAyAYkMqFnK7wIaB yFj8u7v9fbxbgvzz9mqHdBTYNfvu8TdecCDbGOUkAlK7wN2F/gKKGyqAk71bCqKl 5CVvdJPmknUGqdajdvD3I57/HGdhB2+WayxgVPWjnkx9tmy8STyzERZ+vz8aWzvA ZCjnXMFzeQpcRoJKAYONmxWMcM9UkZC2f7omNVWH3jASDPnX/DgIFhO5FAOR3at4 wmAOfcvmkw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:03 2026 by rpki-client