This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer File: ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer (raw, json) Hash identifier: AQ5mwNQm4Y6J+74wA0KjhPD8FPxLON67OWPpAwWkiBc= Subject key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C551B3A006F262350FEEDF511B88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201059 IP: 185.81.148.0/22 IP: 2a05:68c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c5:51:b3:a0:06:f2:62:35:0f:ee:df:51:1b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79df50e26894bb0e81359606d82b7190c17598cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:aa:c3:45:3d:aa:19:01:67:2d:d6:c2:37: 0b:a4:28:5d:a3:35:67:08:ba:a5:ee:7c:75:8c:95: ef:05:29:6c:c7:a4:21:88:9d:20:ed:1f:f4:7c:7e: 50:f0:79:38:27:16:6a:9f:26:8c:28:bb:2c:70:be: 7c:30:2d:53:c5:4b:26:9b:3c:30:1e:14:42:3a:bf: 13:c4:40:ad:4a:e7:ab:d8:10:54:38:a2:40:2a:95: 5e:85:9d:2c:00:36:06:60:f3:5d:5c:0f:6a:5a:06: 30:0b:58:06:42:75:28:5f:66:e9:dd:e5:aa:36:42: 49:84:06:57:93:cd:c3:eb:42:bd:62:a5:33:f3:04: a4:65:d1:6d:98:eb:d2:c5:6d:a3:56:71:f8:db:ee: ba:b5:04:29:69:3b:7e:83:46:da:4f:97:8c:0b:2c: f0:34:3b:d4:8f:2e:a5:f8:04:88:0d:25:0b:33:57: 8a:de:3d:4d:b6:45:75:a2:1a:d6:77:e0:2d:3b:e0: 07:4f:ea:d2:23:7c:b1:ae:75:0f:64:ee:c7:6a:4f: 03:b5:58:28:48:08:88:dd:88:45:d4:e7:ae:91:9a: 0d:74:30:c6:8d:f7:77:d5:78:6a:92:a7:d2:eb:31: 22:b1:0f:55:b4:c1:7f:f7:8b:05:cf:3b:76:39:89: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.148.0/22 IPv6: 2a05:68c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201059 Signature Algorithm: sha256WithRSAEncryption 88:9f:18:db:b0:b6:44:b5:af:ef:29:d2:10:75:b7:fd:39:96: c2:50:fc:da:61:ad:51:0f:85:63:6e:47:af:73:33:cf:26:3e: 4c:cd:4e:a3:49:8b:3a:88:65:a6:22:ae:98:4e:b2:db:10:d9: 9e:11:6a:95:7e:a2:14:f5:e7:a3:a7:1a:d6:de:b7:6c:a9:6d: 31:96:09:df:42:b7:c6:ab:22:b9:d4:09:d9:4f:09:e6:34:43: bc:be:34:d9:14:75:8f:6b:a3:bd:91:cb:94:f5:25:ad:1a:48: 65:28:2c:08:c3:2f:41:72:40:1b:34:b8:68:2f:cd:00:8e:14: 13:0e:4c:cd:bd:ed:da:88:99:22:e7:e5:81:d3:c9:0e:4d:65: 82:9c:c4:f9:a2:87:69:08:0d:c8:ea:9f:43:c8:8e:c3:46:f9: 2a:d2:b8:7b:48:63:46:67:95:14:fe:af:a5:d9:c6:57:59:ef: ed:c7:72:1b:d7:72:ba:7e:34:6d:9d:e2:33:c8:25:4b:5d:39: 59:20:e9:52:4d:46:16:11:3e:06:b3:5d:71:67:9f:b9:35:f6: 69:50:ae:2d:9b:3e:fd:ed:70:a5:64:5b:48:44:96:26:7f:eb: cc:22:9c:00:7a:17:13:ae:ba:b9:72:66:c6:89:9a:91:9b:dc: d3:b3:17:cf -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gMVRs6AG8mI1D+7fURuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWRmNTBlMjY4OTRiYjBlODEzNTk2MDZkODJiNzE5MGMxNzU5OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo46qw0U9qhkBZy3WwjcLpChdozVn CLql7nx1jJXvBSlsx6QhiJ0g7R/0fH5Q8Hk4JxZqnyaMKLsscL58MC1TxUsmmzww HhRCOr8TxECtSuer2BBUOKJAKpVehZ0sADYGYPNdXA9qWgYwC1gGQnUoX2bp3eWq NkJJhAZXk83D60K9YqUz8wSkZdFtmOvSxW2jVnH42+66tQQpaTt+g0baT5eMCyzw NDvUjy6l+ASIDSULM1eK3j1NtkV1ohrWd+AtO+AHT+rSI3yxrnUPZO7Hak8DtVgo SAiI3YhF1OeukZoNdDDGjfd31XhqkqfS6zEisQ9VtMF/94sFzzt2OYldsQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHnfUOJolLsOgTWWBtgrcZDBdZjMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzc4MjQ0 Ny1lYzhiLTQyODktOWMxYy0yOGY5NjBlYjdhMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvNzgyNDQ3 LWVjOGItNDI4OS05YzFjLTI4Zjk2MGViN2EzOS8xL2VkOVE0bWlVdXc2Qk5aWUcy Q3R4a01GMW1Ndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVGUMA0EAgACMAcDBQMqBWjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRYzANBgkqhkiG9w0BAQsFAAOCAQEAiJ8Y27C2RLWv 7ynSEHW3/TmWwlD82mGtUQ+FY25Hr3MzzyY+TM1Oo0mLOohlpiKumE6y2xDZnhFq lX6iFPXno6ca1t63bKltMZYJ30K3xqsiudQJ2U8J5jRDvL402RR1j2ujvZHLlPUl rRpIZSgsCMMvQXJAGzS4aC/NAI4UEw5Mzb3t2oiZIuflgdPJDk1lgpzE+aKHaQgN yOqfQ8iOw0b5KtK4e0hjRmeVFP6vpdnGV1nv7cdyG9dyun40bZ3iM8glS105WSDp Uk1GFhE+BrNdcWefuTX2aVCuLZs+/e1wpWRbSESWJn/rzCKcAHoXE666uXJmxoma kZvc07MXzw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:42 2026 by rpki-client