This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer File: eaHQ6nMPz8shSZlceCib8tbRhvw.cer (raw, json) Hash identifier: b3w+59eRclJGDguJNgJCR8fqYAIzk6NocGrQAIWNNBg= Subject key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392BBA416AC88DBC0040648D44D9AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59668 IP: 31.40.24.0/22 IP: 45.91.220.0/22 IP: 82.215.96.0/20 IP: 91.212.124.0/24 IP: 93.157.58.0/24 IP: 118.88.16.0/21 IP: 119.12.104.0/21 IP: 178.218.200.0/21 IP: 202.79.184.0/21 IP: 2a0e:17c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:ba:41:6a:c8:8d:bc:00:40:64:8d:44:d9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:72:91:d7:5e:30:53:67:6b:65:0d:c9:fa: 0b:ac:18:35:07:3c:0b:8a:a0:ee:1b:4d:ee:02:35: 39:88:8f:72:86:fc:b9:94:26:fd:98:ce:19:4d:42: 8b:30:3b:78:54:16:36:11:1e:5f:2d:a7:00:ea:8c: 74:26:3a:e8:69:03:ce:26:da:38:17:67:a2:1a:29: ca:2f:ec:c3:5d:c9:2f:96:3d:ef:db:93:9a:bd:0a: db:11:f2:d0:2c:b1:94:d2:e9:67:e1:fb:15:8e:1f: b5:b1:aa:30:8e:80:06:0a:8a:9f:ad:7c:c6:4a:6c: c0:ee:61:2e:f0:7e:a3:6e:07:4c:de:c4:3f:ca:39: ad:57:d7:d6:84:ca:a8:de:70:c1:16:c8:3e:6e:1c: 92:23:81:cd:a4:a6:11:d0:e2:17:ce:3e:1c:83:62: 63:d8:2a:1a:aa:89:e5:dc:95:a6:79:b3:a7:72:38: da:09:d1:e0:0e:ad:e6:50:fc:62:4a:17:36:f6:aa: f7:ea:79:d2:d3:59:77:e4:11:38:78:aa:a6:d2:06: cb:6d:26:dc:26:bb:59:e9:35:a9:79:46:7b:da:9a: 8a:9d:73:3c:50:a6:e1:d8:65:4d:0d:70:1d:39:24: 69:0b:1f:ad:b4:a2:f8:b5:5b:70:83:d1:93:42:55: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.24.0/22 45.91.220.0/22 82.215.96.0/20 91.212.124.0/24 93.157.58.0/24 118.88.16.0/21 119.12.104.0/21 178.218.200.0/21 202.79.184.0/21 IPv6: 2a0e:17c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59668 Signature Algorithm: sha256WithRSAEncryption 8a:66:6c:ff:14:37:de:fc:78:5e:ca:f6:98:40:54:bb:e1:ca: 00:53:03:a3:0c:bc:80:cc:63:bc:a5:51:82:47:6e:dd:0a:33: dc:a9:38:b5:e2:d3:82:24:5b:4b:d3:48:bd:08:7f:54:07:33: 22:d8:fc:25:f7:3c:ed:8f:da:dc:37:c6:30:9f:2a:09:1f:88: 30:2c:a5:75:5d:2c:1e:d6:e4:9b:e9:1b:d7:ce:5b:e5:ee:11: 70:ff:c0:68:69:6f:4b:a6:d4:4c:73:ac:7a:07:f5:34:3a:a8: ca:40:5e:ac:0a:9d:b2:76:55:ea:0f:22:b9:d1:c5:13:2b:2b: 43:ca:12:be:35:ed:67:03:9b:cb:19:1e:8b:d2:2d:c0:ee:42: 32:77:01:04:5d:b7:76:4b:9c:17:3d:21:a3:d6:c2:a2:21:5c: 0c:1e:04:39:c9:71:b6:46:bf:89:94:55:26:0a:0b:7a:92:62: 87:09:38:40:39:ba:f7:8b:56:c5:b4:68:6e:1e:3f:76:01:53: e7:2c:a6:d7:39:ac:7d:02:d0:0d:4b:79:e5:3a:66:a6:6a:a7: 02:f9:ec:18:99:ca:63:b8:09:e9:42:55:a9:fc:68:c2:20:6a: bf:b9:89:42:5f:38:9c:43:c1:b7:25:16:6b:f1:2e:f6:e4:02: 9a:e3:0c:db -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt+OSu6QWrIjbwAQGSNRNmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWExZDBlYTczMGZjZmNiMjE0OTk5NWM3ODI4OWJmMmQ2ZDE4NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMhykddeMFNna2UNyfoLrBg1BzwL iqDuG03uAjU5iI9yhvy5lCb9mM4ZTUKLMDt4VBY2ER5fLacA6ox0JjroaQPOJto4 F2eiGinKL+zDXckvlj3v25OavQrbEfLQLLGU0uln4fsVjh+1saowjoAGCoqfrXzG SmzA7mEu8H6jbgdM3sQ/yjmtV9fWhMqo3nDBFsg+bhySI4HNpKYR0OIXzj4cg2Jj 2Coaqonl3JWmebOncjjaCdHgDq3mUPxiShc29qr36nnS01l35BE4eKqm0gbLbSbc JrtZ6TWpeUZ72pqKnXM8UKbh2GVNDXAdOSRpCx+ttKL4tVtwg9GTQlUaJQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFHmh0OpzD8/LIUmZXHgom/LW0Yb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2Y0YzQ3 Yi05ZGVlLTRlNzEtYTZkYS04MGE5MWFmNDJhNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZjRjNDdi LTlkZWUtNGU3MS1hNmRhLTgwYTkxYWY0MmE2NS8xL2VhSFE2bk1QejhzaFNabGNl Q2liOHRiUmh2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCHygYAwQCLVvcAwQEUtdgAwQAW9R8AwQAXZ06 AwQDdlgQAwQDdwxoAwQDstrIAwQDyk+4MA0EAgACMAcDBQMqDhfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpFDANBgkqhkiG9w0BAQsFAAOCAQEAimZs/xQ33vx4 Xsr2mEBUu+HKAFMDowy8gMxjvKVRgkdu3Qoz3Kk4teLTgiRbS9NIvQh/VAczItj8 Jfc87Y/a3DfGMJ8qCR+IMCyldV0sHtbkm+kb185b5e4RcP/AaGlvS6bUTHOsegf1 NDqoykBerAqdsnZV6g8iudHFEysrQ8oSvjXtZwObyxkei9ItwO5CMncBBF23dkuc Fz0ho9bCoiFcDB4EOclxtka/iZRVJgoLepJihwk4QDm694tWxbRobh4/dgFT5yym 1zmsfQLQDUt55TpmpmqnAvnsGJnKY7gJ6UJVqfxowiBqv7mJQl84nEPBtyUWa/Eu 9uQCmuMM2w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:03 2026 by rpki-client