This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer File: ebt3Saveb12k6xxu0cV2gWF4RrA.cer (raw, json) Hash identifier: OaHxyRVg9wpp4dvLuhhpP71oRC+JR4abptzHslNK+2Y= Subject key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38DF0CEA8BAC3D89C2AF993E0D5CF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209346 IP: 185.157.0.0/22 IP: 2a0b:2ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:df:0c:ea:8b:ac:3d:89:c2:af:99:3e:0d:5c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:0c:9f:bd:c8:04:96:4a:86:44:30:01:19: ef:63:e5:72:0d:81:c7:ec:84:7e:d1:1f:a3:2a:87: 9d:59:b0:50:f0:2a:9b:d7:ae:07:b9:b1:0d:81:0f: e8:df:b4:ad:d4:72:22:4d:91:9c:cf:72:15:3b:71: fe:e2:19:0b:71:8f:16:ff:6c:e0:35:2c:08:45:a2: 00:11:ae:ce:6b:85:4f:df:df:03:ad:fd:a0:45:f6: 2c:8d:49:57:58:08:79:9d:50:03:31:f1:65:70:90: 98:df:1f:0f:ff:74:cb:65:3e:de:00:d3:5c:64:40: a3:79:fe:8f:61:a2:e1:20:a2:d1:4e:0c:b0:6d:9f: 7a:8b:44:f5:d9:7d:8e:59:62:84:dc:ba:ab:17:4b: 15:37:b2:4d:90:c3:7c:ce:2d:a0:33:93:94:49:b7: 6c:a9:ee:29:10:99:42:d2:ef:21:ac:29:33:e1:ae: 26:b7:65:04:59:71:54:a7:50:89:19:15:8a:3b:16: 0f:e4:58:da:1f:1c:5c:2f:db:52:40:37:19:cc:4b: f5:d4:54:76:15:3a:31:38:60:4b:ec:e4:34:8e:ce: 9a:dc:45:a4:ab:b4:c0:99:d2:58:73:80:c2:da:0b: d7:0a:38:cd:88:f2:d0:f4:51:95:3f:51:04:8d:c4: fc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.0.0/22 IPv6: 2a0b:2ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209346 Signature Algorithm: sha256WithRSAEncryption 5e:87:05:5d:82:d0:24:d9:95:2c:3d:73:86:24:a6:2f:93:77: 77:5f:ac:d5:71:1b:1a:7e:74:e8:8a:3e:80:7e:cf:76:6f:3a: f4:c0:c2:de:86:38:ac:02:4d:2e:ee:89:36:5f:07:4f:c6:01: ca:fb:7f:7d:43:68:b0:8d:d8:72:34:4d:e7:1c:63:77:23:b0: 50:ac:f1:cf:87:43:d6:e0:d0:36:a4:42:f7:ae:57:c6:c3:25: 29:49:7f:66:06:48:19:f2:38:ae:ab:e5:ba:e7:a6:47:14:45: 3e:31:0f:5f:70:e0:ae:6b:99:10:a1:91:79:61:d9:43:a8:75: 50:7c:21:83:71:54:d9:8f:1d:28:17:76:c8:a8:6e:87:cf:c4: 36:c8:a3:6d:03:26:fa:77:60:a9:16:78:a3:74:55:71:0d:5d: a8:ca:b8:39:fb:dd:a4:94:3e:50:9b:2e:62:5e:04:9b:63:1b: 02:83:fd:31:f6:fe:2d:e3:71:9b:eb:9b:57:4b:5c:ea:f8:2a: f9:86:8e:79:f5:fb:71:54:18:4a:81:a9:63:af:43:c3:de:6e: 87:f9:c1:ce:80:4e:b7:fc:e2:b5:6f:d9:89:57:f8:8a:b2:d1: 5a:fb:54:ae:a6:11:e9:25:5b:3b:e4:06:29:36:cf:fd:98:90: 85:9a:67:e2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+ON8M6ousPYnCr5k+DVz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWJiNzc0OWFiZGU2ZjVkYTRlYjFjNmVkMWM1NzY4MTYxNzg0NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5AMn73IBJZKhkQwARnvY+VyDYHH 7IR+0R+jKoedWbBQ8Cqb164HubENgQ/o37St1HIiTZGcz3IVO3H+4hkLcY8W/2zg NSwIRaIAEa7Oa4VP398Drf2gRfYsjUlXWAh5nVADMfFlcJCY3x8P/3TLZT7eANNc ZECjef6PYaLhIKLRTgywbZ96i0T12X2OWWKE3LqrF0sVN7JNkMN8zi2gM5OUSbds qe4pEJlC0u8hrCkz4a4mt2UEWXFUp1CJGRWKOxYP5FjaHxxcL9tSQDcZzEv11FR2 FToxOGBL7OQ0js6a3EWkq7TAmdJYc4DC2gvXCjjNiPLQ9FGVP1EEjcT8jwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHm7d0mr3m9dpOscbtHFdoFheEawMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzI1Yjdi OC1jMzAyLTRkZGEtODk4YS00ODI1ZTE4ZDczMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMjViN2I4 LWMzMDItNGRkYS04OThhLTQ4MjVlMThkNzMwMS8xL2VidDNTYXZlYjEyazZ4eHUw Y1YyZ1dGNFJyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ0AMA0EAgACMAcDBQMqCy7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxwjANBgkqhkiG9w0BAQsFAAOCAQEAXocFXYLQJNmV LD1zhiSmL5N3d1+s1XEbGn506Io+gH7Pdm869MDC3oY4rAJNLu6JNl8HT8YByvt/ fUNosI3YcjRN5xxjdyOwUKzxz4dD1uDQNqRC965XxsMlKUl/ZgZIGfI4rqvluuem RxRFPjEPX3DgrmuZEKGReWHZQ6h1UHwhg3FU2Y8dKBd2yKhuh8/ENsijbQMm+ndg qRZ4o3RVcQ1dqMq4OfvdpJQ+UJsuYl4Em2MbAoP9Mfb+LeNxm+ubV0tc6vgq+YaO efX7cVQYSoGpY69Dw95uh/nBzoBOt/zitW/ZiVf4irLRWvtUrqYR6SVbO+QGKTbP /ZiQhZpn4g== -----END CERTIFICATE-----Generated at Tue Jan 27 09:11:27 2026 by rpki-client