This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer (raw, json) Hash identifier: aOgVeMoOxhS/6AS9QbywoEe6N0mFr+kUN4YMORfPk/0= Subject key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791122824875E2976EFE1273585D32BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.87.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:22:82:48:75:e2:97:6e:fe:12:73:58:5d:32:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:d0:9e:e0:a6:06:50:20:77:02:e7:eb:02: 4c:59:61:28:99:25:23:71:14:25:a5:d5:73:ec:22: 00:1c:54:24:18:6a:c0:94:37:c4:95:87:a3:20:d3: 54:98:5e:d6:fa:47:f1:ed:23:2b:bc:bc:39:ad:f6: bd:f5:49:34:fd:3c:d6:8d:70:df:84:d7:aa:f2:58: 88:bc:8e:7e:2e:8f:d5:9d:32:6d:f0:a5:d2:21:34: 43:2b:fc:ff:ba:d7:50:5f:db:16:73:8d:14:db:2e: e3:68:32:83:a1:0e:2b:26:b9:bf:a2:8a:81:d1:40: 7c:01:95:c5:9f:ca:31:62:11:a2:63:e4:69:d2:dd: 8e:a7:98:1e:40:6c:9b:fa:81:3b:38:ac:96:8c:5e: 55:65:45:b1:0f:c2:18:84:db:b9:9b:b4:86:9c:17: 2a:3b:25:58:bd:ff:06:99:a4:25:1f:48:cb:4a:3e: 95:4c:26:8d:24:22:30:9b:69:33:46:f9:73:ea:85: 09:d6:83:8f:5f:da:97:9e:94:46:2e:bc:95:f9:52: 0e:73:f2:af:3d:e7:5b:20:ab:26:85:d1:5d:03:9b: 38:ee:d0:d4:53:ab:97:47:a8:5b:b6:6f:37:77:01: 6a:d5:d9:ba:23:f8:98:16:aa:f9:77:7c:d0:a3:63: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.87.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4e:f9:aa:16:1d:29:40:df:fc:29:48:b6:ec:33:17:83:57:2b: 3b:e7:01:92:78:27:67:ee:e4:55:e9:71:70:c7:46:09:b4:ea: 04:36:93:2b:f0:ef:9e:69:e8:60:f7:3c:b6:7b:f5:07:23:57: ac:d5:49:c0:b1:3c:64:eb:b1:37:2c:b9:83:e8:6b:3f:d0:3f: b2:d1:cb:a4:a9:19:01:55:c6:c9:7a:aa:9e:7b:7e:f3:86:4b: e2:4b:e0:71:f7:78:81:72:44:f9:e4:35:cc:fc:99:88:5b:73: a7:2a:84:4b:ce:bf:96:02:85:0a:ba:17:a9:9b:52:72:11:57: 3c:a5:32:f8:7d:3d:3b:f0:fb:96:ef:02:f1:a3:34:dc:14:86: c6:7a:27:f3:44:2d:cf:54:70:f7:b1:8a:19:98:cf:17:94:9a: 2f:01:4e:5e:82:b7:2f:fc:e8:19:0e:dc:9e:71:5e:16:ee:d3: 93:2c:30:09:0c:d2:fc:cb:48:2a:5d:c2:2f:c5:f6:1b:79:bd: 74:f0:d7:c1:f7:83:ef:4a:0a:fc:fe:de:4a:3b:0e:d7:ec:5a: a7:02:d5:36:e1:97:c5:e6:06:ac:fd:3f:8b:38:32:5a:99:36: 99:d7:c4:47:90:85:8f:2c:5d:a8:1d:84:86:a8:38:b4:69:5b: ea:e8:03:b4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt5ESKCSHXil27+EnNYXTK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWExY2YxYWE4ZmJjNGUzMzM3ODY3M2ViZDA1MzY0ODgwZTJhOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+TQnuCmBlAgdwLn6wJMWWEomSUj cRQlpdVz7CIAHFQkGGrAlDfElYejINNUmF7W+kfx7SMrvLw5rfa99Uk0/TzWjXDf hNeq8liIvI5+Lo/VnTJt8KXSITRDK/z/utdQX9sWc40U2y7jaDKDoQ4rJrm/ooqB 0UB8AZXFn8oxYhGiY+Rp0t2Op5geQGyb+oE7OKyWjF5VZUWxD8IYhNu5m7SGnBcq OyVYvf8GmaQlH0jLSj6VTCaNJCIwm2kzRvlz6oUJ1oOPX9qXnpRGLryV+VIOc/Kv PedbIKsmhdFdA5s47tDUU6uXR6hbtm83dwFq1dm6I/iYFqr5d3zQo2OFXwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFHmhzxqo+8TjM3hnPr0FNkiA4qkfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2RmNWJh ZC1hYzU5LTQxM2UtOWFkMC01OTk1YWU4YWNiOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvZGY1YmFk LWFjNTktNDEzZS05YWQwLTU5OTVhZThhY2I5Zi8xL2VhSFBHcWo3eE9NemVHYy12 UVUyU0lEaXFSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjVcwDQYJKoZIhvcNAQELBQADggEBAE75qhYd KUDf/ClItuwzF4NXKzvnAZJ4J2fu5FXpcXDHRgm06gQ2kyvw755p6GD3PLZ79Qcj V6zVScCxPGTrsTcsuYPoaz/QP7LRy6SpGQFVxsl6qp57fvOGS+JL4HH3eIFyRPnk Ncz8mYhbc6cqhEvOv5YChQq6F6mbUnIRVzylMvh9PTvw+5bvAvGjNNwUhsZ6J/NE Lc9UcPexihmYzxeUmi8BTl6Cty/86BkO3J5xXhbu05MsMAkM0vzLSCpdwi/F9ht5 vXTw18H3g+9KCvz+3ko7DtfsWqcC1Tbhl8XmBqz9P4s4MlqZNpnXxEeQhY8sXagd hIaoOLRpW+roA7Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:53 2026 by rpki-client