This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer File: eZNZZNoXA44j06SJCaE6JfsOWOs.cer (raw, json) Hash identifier: X4A2ltm7mp9KYEACSOFjNmtt+vq+6NVL6beTeB+8WHo= Subject key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8546D07FEA21BB11F14A12914FA91D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204297 IP: 185.253.180.0/22 IP: 188.64.136.0/24 IP: 188.240.17.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:46:d0:7f:ea:21:bb:11:f1:4a:12:91:4f:a9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79935964da17038e23d3a48909a13a25fb0e58eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:2e:b8:50:69:ba:25:60:59:12:20:38:17: da:1e:7c:00:1a:3c:52:76:28:70:b0:74:fa:2f:35: d9:1c:fb:c6:01:8a:4e:75:71:b8:36:e2:9b:78:50: a7:68:b3:a8:7a:4f:2b:bc:1b:1b:8e:57:fd:89:14: 23:c8:f0:cf:53:74:f4:fb:11:f3:e4:06:c7:fc:d0: 69:14:10:e9:b4:d6:4a:fc:b3:f7:9d:cc:cc:4e:74: 03:de:5a:43:c3:48:77:ef:85:f7:e0:79:e5:e1:ee: 11:77:65:b6:d2:3f:1f:cd:f3:b1:48:12:ff:d3:7c: cb:78:35:65:8b:bf:f1:62:cd:4c:3d:90:70:ee:26: 94:df:d9:55:0e:b2:ec:93:99:47:14:f6:bb:e2:94: 0e:ae:60:6d:d5:df:b4:26:8f:61:4c:70:b9:88:ce: e6:51:91:d3:f7:f7:5a:dc:ae:a3:1e:a7:8f:4e:2d: 7b:8a:dc:c7:3f:73:8b:19:4a:3e:d4:de:73:68:d9: 59:af:3f:b1:18:1e:0d:0a:54:54:1f:6f:34:c4:e0: f1:2d:ad:20:0f:c2:5c:12:ca:ce:d7:cb:cf:d2:15: 20:bf:e4:bb:45:09:20:3b:a9:3e:9d:87:a9:27:6c: e7:e8:7f:da:4e:25:95:0a:c3:fa:b0:67:ce:cf:54: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.180.0/22 188.64.136.0/24 188.240.17.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204297 Signature Algorithm: sha256WithRSAEncryption 69:0d:9d:ef:18:19:67:4a:ed:c0:32:1c:df:6e:a5:cd:38:9e: 33:72:71:0d:09:fa:54:2f:a3:69:9f:e5:61:5e:b1:dd:4a:ed: 32:4e:b4:f8:23:8c:f7:35:ec:a8:66:22:c4:04:fa:9e:0c:21: e6:d3:ff:b4:0b:92:0c:d7:d0:99:6e:90:22:7b:67:d6:13:e0: be:9b:7a:72:eb:c4:e5:de:f2:e6:6b:d7:65:b6:5b:9c:7b:5c: e3:af:0a:c0:be:c4:ac:2a:a2:f8:3d:f5:25:a6:95:95:f2:34: 38:17:5b:15:55:ad:70:69:01:e2:b8:d5:d5:76:a3:95:cc:98: 3b:aa:60:5c:14:b7:5a:5a:0c:5e:5c:61:6b:c6:77:db:3a:35: 94:8b:fd:ea:48:de:fd:a0:83:20:9b:33:96:e5:04:7b:32:43: 32:8f:5f:96:9d:4c:d0:4d:14:68:c0:74:71:5a:25:ab:23:6f: 56:2f:f2:d7:56:02:2f:9c:15:95:b7:ca:45:e2:1e:a7:b3:dd: 9c:d3:00:70:4e:15:db:8c:3b:d3:d1:af:d3:b7:4c:1b:d5:e0: cb:c1:0a:e4:01:7a:0f:39:86:ab:18:4e:77:ff:59:56:c6:57: 94:b6:3c:a1:eb:4e:bd:ff:66:dc:70:13:27:cf:af:e8:91:b1: e0:96:70:4a -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/hUbQf+ohuxHxShKRT6kdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTkzNTk2NGRhMTcwMzhlMjNkM2E0ODkwOWExM2EyNWZiMGU1OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vQuuFBpuiVgWRIgOBfaHnwAGjxS dihwsHT6LzXZHPvGAYpOdXG4NuKbeFCnaLOoek8rvBsbjlf9iRQjyPDPU3T0+xHz 5AbH/NBpFBDptNZK/LP3nczMTnQD3lpDw0h374X34Hnl4e4Rd2W20j8fzfOxSBL/ 03zLeDVli7/xYs1MPZBw7iaU39lVDrLsk5lHFPa74pQOrmBt1d+0Jo9hTHC5iM7m UZHT9/da3K6jHqePTi17itzHP3OLGUo+1N5zaNlZrz+xGB4NClRUH280xODxLa0g D8JcEsrO18vP0hUgv+S7RQkgO6k+nYepJ2zn6H/aTiWVCsP6sGfOz1Q18QIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFHmTWWTaFwOOI9OkiQmhOiX7DljrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2U4MWQw MS0xNjdiLTQ1MjgtYjNhYS05ZmU0OWNjNGRmMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvZTgxZDAx LTE2N2ItNDUyOC1iM2FhLTlmZTQ5Y2M0ZGYyYS8xL2VaTlpaTm9YQTQ0ajA2U0pD YUU2SmZzT1dPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCuf20AwQAvECIAwQAvPARMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMeCTANBgkqhkiG9w0BAQsFAAOCAQEAaQ2d7xgZZ0rtwDIc 326lzTieM3JxDQn6VC+jaZ/lYV6x3UrtMk60+COM9zXsqGYixAT6ngwh5tP/tAuS DNfQmW6QIntn1hPgvpt6cuvE5d7y5mvXZbZbnHtc468KwL7ErCqi+D31JaaVlfI0 OBdbFVWtcGkB4rjV1XajlcyYO6pgXBS3WloMXlxha8Z32zo1lIv96kje/aCDIJsz luUEezJDMo9flp1M0E0UaMB0cVolqyNvVi/y11YCL5wVlbfKReIep7PdnNMAcE4V 24w709Gv07dMG9Xgy8EK5AF6DzmGqxhOd/9ZVsZXlLY8oetOvf9m3HATJ8+v6JGx 4JZwSg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:05 2026 by rpki-client