This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer File: ecuROUt5B4HTqHc6hV5amjryCBA.cer (raw, json) Hash identifier: 12kDZd5JwMePSUmPwHxb+sh/vrDlC6+mK0NU7egHhEI= Subject key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392A4F6E1C33D88E4135983C0F09E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a14:d280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:4f:6e:1c:33:d8:8e:41:35:98:3c:0f:09:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79cb91394b790781d3a8773a855e5a9a3af20810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:c3:18:9f:b4:ec:50:7a:a2:ff:ec:25:99: ff:5a:70:e3:05:1f:3a:6d:27:f2:61:ab:03:74:4a: 6c:f5:5d:c9:91:5f:76:4c:63:2b:52:86:c1:57:64: e6:16:51:29:19:70:47:61:94:b1:03:3b:31:f3:e9: 81:1e:f7:08:48:70:1d:1f:37:5e:e9:c7:fc:12:ac: 8d:b4:b9:e4:ba:7c:ba:30:40:f0:de:27:98:2c:7a: 16:fb:b7:f1:c9:53:41:25:b1:3a:3a:50:b4:b6:b9: be:25:26:7b:07:45:47:82:ce:07:2d:9e:67:cb:bc: 6f:b1:d0:70:2a:47:9c:17:dd:b8:d1:a0:5d:25:f0: bd:40:c4:44:32:11:87:23:4e:da:2b:64:cc:f3:d3: 49:bc:82:ab:4d:f8:b4:b8:14:5a:ff:d7:6b:f6:dc: b6:71:75:8d:74:03:fd:8a:c2:f1:9e:48:de:8a:d0: 7a:6f:e9:28:39:2d:c5:8e:f1:5e:63:71:66:6c:87: 6d:29:49:ad:9c:a3:db:dd:19:da:88:39:01:e7:40: a6:48:b0:ce:1e:75:26:15:97:8c:91:19:b5:e6:e6: d1:cf:7a:27:3a:39:c4:83:63:cb:ab:e1:97:9f:49: 0f:e9:57:a0:4e:ba:57:e0:fb:78:01:df:2c:0b:e0: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:d280::/29 Signature Algorithm: sha256WithRSAEncryption 75:1d:bd:1e:f5:cd:d8:72:4b:f1:ee:d1:d3:35:5a:aa:da:15: 4c:e1:03:60:c2:97:c9:76:5a:af:d2:88:29:0e:56:68:66:b5: c0:65:1d:24:1c:2b:85:4e:93:b8:0f:2c:c8:ee:8b:36:43:f3: db:16:75:61:6d:64:c3:85:4f:22:72:b4:67:93:da:5a:77:c0: 5b:b7:2c:5a:22:c4:54:aa:0c:a7:b4:6f:4f:7e:e6:d3:e8:c5: 7d:63:c6:d1:2b:d5:39:ac:6d:5f:cd:10:f2:1a:31:74:9d:5e: 03:2c:eb:80:1c:30:12:3a:d2:e6:9f:a5:09:34:e4:0d:e1:67: 6a:c5:62:02:d1:1e:4e:4b:61:3d:ec:9c:22:ee:38:e7:b5:fd: 0d:6d:a3:c0:be:9d:6d:44:b7:61:e7:42:ae:8c:fc:a9:ce:56: b8:59:a8:e1:9b:d4:07:cc:40:9a:4f:29:92:ba:b8:e4:46:f0: e2:79:31:14:ae:c8:9f:b0:bb:a0:56:77:02:8d:70:68:6e:9d: c0:3b:68:ab:ac:ac:49:9f:f0:3e:8f:64:5b:f9:8f:41:e8:d0: 68:07:c4:ff:6a:f3:19:64:8c:36:6e:8f:57:9e:a1:11:00:12: e0:d8:e3:d4:5b:53:cd:74:d8:16:33:63:a0:90:28:43:74:4d: 6d:07:ef:6c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt+OSpPbhwz2I5BNZg8DwnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWNiOTEzOTRiNzkwNzgxZDNhODc3M2E4NTVlNWE5YTNhZjIwODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvjDGJ+07FB6ov/sJZn/WnDjBR86 bSfyYasDdEps9V3JkV92TGMrUobBV2TmFlEpGXBHYZSxAzsx8+mBHvcISHAdHzde 6cf8EqyNtLnkuny6MEDw3ieYLHoW+7fxyVNBJbE6OlC0trm+JSZ7B0VHgs4HLZ5n y7xvsdBwKkecF9240aBdJfC9QMREMhGHI07aK2TM89NJvIKrTfi0uBRa/9dr9ty2 cXWNdAP9isLxnkjeitB6b+koOS3FjvFeY3FmbIdtKUmtnKPb3RnaiDkB50CmSLDO HnUmFZeMkRm15ubRz3onOjnEg2PLq+GXn0kP6VegTrpX4Pt4Ad8sC+B8DwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFHnLkTlLeQeB06h3OoVeWpo68ggQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2U0NjM3 Zi0yZGUxLTQ4MTUtYmI2Yi1mMTE3MTIxNDk5NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZTQ2Mzdm LTJkZTEtNDgxNS1iYjZiLWYxMTcxMjE0OTk2Ni8xL2VjdVJPVXQ1QjRIVHFIYzZo VjVhbWpyeUNCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTSgDANBgkqhkiG9w0BAQsFAAOCAQEAdR29 HvXN2HJL8e7R0zVaqtoVTOEDYMKXyXZar9KIKQ5WaGa1wGUdJBwrhU6TuA8syO6L NkPz2xZ1YW1kw4VPInK0Z5PaWnfAW7csWiLEVKoMp7RvT37m0+jFfWPG0SvVOaxt X80Q8hoxdJ1eAyzrgBwwEjrS5p+lCTTkDeFnasViAtEeTkthPeycIu4457X9DW2j wL6dbUS3YedCroz8qc5WuFmo4ZvUB8xAmk8pkrq45Ebw4nkxFK7In7C7oFZ3Ao1w aG6dwDtoq6ysSZ/wPo9kW/mPQejQaAfE/2rzGWSMNm6PV56hEQAS4Njj1FtTzXTY FjNjoJAoQ3RNbQfvbA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:45 2026 by rpki-client