This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer File: eaKVyAtUwtvne6R959rsa5hgIbQ.cer (raw, json) Hash identifier: KTLht7oOv/a0ewCQz3+1MDfSplpBhY5lZQofi9SQ/K0= Subject key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA734FBD171389FCDE8BDED24257E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213047 IP: 91.234.236.0/24 IP: 185.103.118.0/24 IP: 2a14:b180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:73:4f:bd:17:13:89:fc:de:8b:de:d2:42:57:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:a6:0d:12:7f:ed:d9:32:5c:ab:a1:cc:b1: 73:cc:e6:4b:fa:5c:2c:43:54:e0:be:31:67:f9:3f: f2:e5:3f:73:60:98:3b:2f:14:18:e7:d8:35:83:c2: 00:19:7c:55:39:a6:3f:1d:7f:4c:cc:67:38:55:cc: a4:aa:98:ef:4f:8e:5c:fd:03:68:91:da:8a:d7:1f: 6a:03:1f:c3:dc:0a:d4:2a:9a:79:28:e2:c4:f8:b2: 7a:58:29:e1:80:c1:8c:fa:75:a2:fe:a4:9b:d4:d4: c4:3f:c0:c5:e1:30:d5:b8:be:7e:ef:0f:ec:5d:a6: d7:96:c5:8d:de:06:5b:30:71:84:02:8e:fe:bb:7e: fa:3c:57:75:98:a1:48:13:42:30:4c:c5:b3:75:91: b8:37:36:c6:23:55:c0:fe:74:bd:92:1a:4b:04:3a: 9e:b8:b8:99:f4:92:bf:cc:d3:88:95:20:19:b4:76: 87:46:18:de:64:44:36:3a:e6:88:bf:e9:7b:fa:bc: d2:58:f2:11:e4:51:15:46:e9:b7:78:f0:8d:80:ff: ea:e0:3b:44:a3:14:7c:f0:c6:e2:e4:d2:c7:c9:5b: 19:27:28:63:af:6e:9a:71:6a:5c:c3:46:65:39:ac: 46:c5:c6:60:7c:72:b6:db:78:7d:ca:50:ec:a7:ea: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.236.0/24 185.103.118.0/24 IPv6: 2a14:b180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213047 Signature Algorithm: sha256WithRSAEncryption 5b:a6:1c:75:fc:5e:31:9c:36:14:53:39:b6:8b:ba:f1:4f:39: b7:8f:96:1f:e0:0f:b1:e2:e1:07:8b:8c:b8:a5:fd:73:22:24: 33:66:77:f2:eb:58:24:4d:b9:d4:09:cb:cb:65:45:bf:32:e8: 5d:9a:a5:17:19:90:71:da:50:d7:14:26:50:4a:00:1f:49:d3: c4:5b:be:69:e3:86:42:05:ae:8a:d9:77:a3:34:dc:98:07:9c: 40:5b:19:4d:f1:05:6e:50:38:b7:5b:cc:17:b9:8f:28:ef:2e: 07:4b:34:f1:d2:53:a4:8b:0c:e8:7f:33:e4:7e:c5:10:e1:20: 9d:c5:6c:8b:0a:6e:df:0a:7b:c0:0b:87:06:16:50:d6:2d:a3: b1:4b:89:e0:08:94:e8:39:29:ac:16:8f:11:50:13:ad:a0:37: 51:cc:4a:4e:c1:14:40:f7:57:da:b2:73:d8:7d:71:a3:19:10: 3e:73:39:92:b5:ed:cb:fd:c9:e2:70:41:24:9d:01:5f:e2:35: c6:74:d0:c3:3c:62:0d:61:35:d8:75:5f:15:15:f9:83:24:24: 78:d0:31:7d:60:2a:a3:66:20:84:9f:55:e4:11:16:94:10:86: 8a:41:86:58:9c:4d:d2:09:83:ca:9a:09:ea:7d:4c:ea:c9:33: d9:33:74:db -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9ynNPvRcTifzei97SQlfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWEyOTVjODBiNTRjMmRiZTc3YmE0N2RlN2RhZWM2Yjk4NjAyMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocWmDRJ/7dkyXKuhzLFzzOZL+lws Q1TgvjFn+T/y5T9zYJg7LxQY59g1g8IAGXxVOaY/HX9MzGc4VcykqpjvT45c/QNo kdqK1x9qAx/D3ArUKpp5KOLE+LJ6WCnhgMGM+nWi/qSb1NTEP8DF4TDVuL5+7w/s XabXlsWN3gZbMHGEAo7+u376PFd1mKFIE0IwTMWzdZG4NzbGI1XA/nS9khpLBDqe uLiZ9JK/zNOIlSAZtHaHRhjeZEQ2OuaIv+l7+rzSWPIR5FEVRum3ePCNgP/q4DtE oxR88Mbi5NLHyVsZJyhjr26acWpcw0ZlOaxGxcZgfHK223h9ylDsp+oMHQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHmilcgLVMLb53ukfefa7GuYYCG0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2QxZGE2 YS00OTE5LTQ5OWEtOWE0MS0yYmJiNDhlZmIwZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZDFkYTZh LTQ5MTktNDk5YS05YTQxLTJiYmI0OGVmYjBlZC8xL2VhS1Z5QXRVd3R2bmU2Ujk1 OXJzYTVoZ0liUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+rsAwQAuWd2MA0EAgACMAcDBQMqFLGAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNANzANBgkqhkiG9w0BAQsFAAOCAQEAW6Yc dfxeMZw2FFM5tou68U85t4+WH+APseLhB4uMuKX9cyIkM2Z38utYJE251AnLy2VF vzLoXZqlFxmQcdpQ1xQmUEoAH0nTxFu+aeOGQgWuitl3ozTcmAecQFsZTfEFblA4 t1vMF7mPKO8uB0s08dJTpIsM6H8z5H7FEOEgncVsiwpu3wp7wAuHBhZQ1i2jsUuJ 4AiU6DkprBaPEVATraA3UcxKTsEUQPdX2rJz2H1xoxkQPnM5krXty/3J4nBBJJ0B X+I1xnTQwzxiDWE12HVfFRX5gyQkeNAxfWAqo2YghJ9V5BEWlBCGikGGWJxN0gmD ypoJ6n1M6skz2TN02w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:38 2026 by rpki-client