This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer (raw, json) Hash identifier: fOYU/X96rmkpBpu03bCq0G9dUqV6isBSHaQZkMEwo38= Subject key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4489AB4280FAEAE8DB72CA7F207B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208964 IP: 193.28.240.0 -- 193.28.249.255 IP: 194.124.60.0/22 IP: 2a10:57c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:44:89:ab:42:80:fa:ea:e8:db:72:ca:7f:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79d0d856764a3fee64be14f0a49f59a6865285d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:d5:65:09:7c:c0:1f:47:ae:45:35:1e:ee: 73:d1:cf:7c:08:69:d3:39:d6:58:db:e5:db:1a:57: 42:a2:55:0b:1a:16:b5:c1:71:c8:02:6d:3b:58:84: 0e:eb:91:ce:35:71:af:9a:2b:c8:2b:7a:8b:4e:f7: c1:d9:7c:82:20:98:66:c9:8f:19:de:36:ad:c6:2a: 4c:cd:fa:49:06:4c:f3:45:0d:f2:13:57:52:c3:45: 33:74:5f:e7:f5:b1:43:e8:63:a6:3b:b8:fb:d4:08: 93:ba:e4:48:60:81:b4:e5:c5:0d:c3:05:84:f3:bd: 14:47:79:76:1f:ca:75:82:0e:f9:e3:70:55:43:da: 53:dc:34:62:b7:aa:43:43:e0:70:eb:e5:21:e5:10: 14:b0:a1:c7:a1:d1:73:7a:21:aa:f1:f6:d3:bd:fa: a3:f3:ba:95:54:15:3e:f4:a1:3f:62:d8:7a:df:03: a3:5d:ee:dd:e2:f3:88:6a:45:d5:4a:27:8f:fa:72: eb:a8:62:9c:80:43:91:fd:3d:c8:0d:ef:53:f2:38: 48:52:57:e4:81:c4:15:a1:88:3c:ef:7c:8c:eb:41: 24:08:28:8f:32:ed:30:da:e6:e6:05:26:ce:cd:2a: 80:17:35:df:82:70:0e:48:07:34:e9:d6:be:27:fe: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.240.0-193.28.249.255 194.124.60.0/22 IPv6: 2a10:57c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208964 Signature Algorithm: sha256WithRSAEncryption 94:17:e2:a8:29:71:6a:e1:a8:f3:51:04:1d:10:68:f7:9e:c8: b3:0d:76:5f:41:68:9a:e6:9c:6b:57:bf:7d:e6:7a:22:d8:d9: 2b:c9:05:25:14:0c:0d:43:2e:ac:87:96:72:98:6b:2f:56:83: 73:b6:c5:74:7d:52:d0:d2:3a:f6:78:e9:3b:ec:1f:64:da:71: bb:3a:62:ea:98:7a:22:62:06:c1:9c:65:29:c1:84:0b:6c:68: 29:06:53:3f:26:43:fd:7b:2f:31:5b:3b:a8:2c:4b:ee:68:8e: 76:6c:45:36:52:18:e2:17:db:73:68:b8:5b:bf:bb:9c:45:d2: d9:c2:2a:78:1d:1b:d0:df:58:f5:44:0d:1e:27:34:48:01:af: db:3f:9a:b8:e2:77:61:dd:10:55:55:4a:c9:6a:81:73:af:6b: ed:6f:07:9f:e3:9e:50:02:3b:7f:11:b7:2f:8b:6f:bb:6f:9f: 9b:05:3c:6e:62:fe:a9:50:c6:7c:a5:24:24:1d:15:73:b5:29: b5:7b:f7:8d:62:d7:f6:a9:67:bc:a3:0f:1f:af:8f:b6:cc:30: f5:43:e5:ad:1b:d4:2e:ee:ad:e4:1f:fe:78:45:0e:6b:dc:40: d5:eb:42:e5:68:cd:b5:e4:4f:88:41:f2:72:76:46:5c:c5:9e: 98:1f:50:e8 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt87kSJq0KA+uro23LKfyB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWQwZDg1Njc2NGEzZmVlNjRiZTE0ZjBhNDlmNTlhNjg2NTI4NWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0XVZQl8wB9HrkU1Hu5z0c98CGnT OdZY2+XbGldColULGha1wXHIAm07WIQO65HONXGvmivIK3qLTvfB2XyCIJhmyY8Z 3jatxipMzfpJBkzzRQ3yE1dSw0UzdF/n9bFD6GOmO7j71AiTuuRIYIG05cUNwwWE 870UR3l2H8p1gg7543BVQ9pT3DRit6pDQ+Bw6+Uh5RAUsKHHodFzeiGq8fbTvfqj 87qVVBU+9KE/Yth63wOjXe7d4vOIakXVSieP+nLrqGKcgEOR/T3IDe9T8jhIUlfk gcQVoYg873yM60EkCCiPMu0w2ubmBSbOzSqAFzXfgnAOSAc06da+J/6KJwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzQzZTMw OS03NWM1LTRmNDAtOWRiMy1mMmJiNjllNzVlNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNDNlMzA5 LTc1YzUtNGY0MC05ZGIzLWYyYmI2OWU3NWU3NC8xL2VkRFlWblpLUC01a3ZoVHdw SjlacG9aU2hkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBATBHPADBAHBHPgDBALCfDwwDQQCAAIwBwMF AyoQV8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzBEMA0GCSqGSIb3DQEBCwUA A4IBAQCUF+KoKXFq4ajzUQQdEGj3nsizDXZfQWia5pxrV7995noi2NkryQUlFAwN Qy6sh5ZymGsvVoNztsV0fVLQ0jr2eOk77B9k2nG7OmLqmHoiYgbBnGUpwYQLbGgp BlM/JkP9ey8xWzuoLEvuaI52bEU2UhjiF9tzaLhbv7ucRdLZwip4HRvQ31j1RA0e JzRIAa/bP5q44ndh3RBVVUrJaoFzr2vtbwef455QAjt/Ebcvi2+7b5+bBTxuYv6p UMZ8pSQkHRVztSm1e/eNYtf2qWe8ow8fr4+2zDD1Q+WtG9Qu7q3kH/54RQ5r3EDV 60LlaM215E+IQfJydkZcxZ6YH1Do -----END CERTIFICATE-----Generated at Tue Jan 27 07:15:41 2026 by rpki-client