This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer File: edad2YMzVYQB7dGmAWgmXdGg2Vg.cer (raw, json) Hash identifier: 34JLZ8LHXDHtRrszE/Y7cTqGHpKdpfejpybYdv0Sx9Q= Subject key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82EE883BEEA567C954DA7C5374CF79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 513 AS: 1297 AS: 20641 AS: 57859 AS: 61339 AS: 206095 IP: 128.141.0.0 -- 128.142.255.255 IP: 137.138.0.0/16 IP: 185.249.56.0/22 IP: 188.184.0.0/15 IP: 192.16.155.0 -- 192.16.166.255 IP: 192.65.183.0 -- 192.65.197.255 IP: 192.91.236.0 -- 192.91.246.255 IP: 194.12.128.0/18 IP: 2001:67c:2c4::/48 IP: 2001:7f8:1c::/48 IP: 2001:1458::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ee:88:3b:ee:a5:67:c9:54:da:7c:53:74:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79d69dd98333558401edd1a60168265dd1a0d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a0:a7:5c:55:91:97:bb:49:81:f8:45:03:6f: a3:51:e1:57:d5:7b:b3:70:bc:9f:79:75:c9:9e:d5: a2:67:40:00:ef:61:70:a2:62:e4:a0:93:bf:64:2a: 1c:d7:e0:8b:2a:6a:d8:8c:61:de:3c:ff:b0:d2:20: f3:ab:4d:e6:3e:38:c9:53:55:f3:1e:c8:af:f2:e5: 9d:1d:f7:c6:df:a0:cf:10:49:bc:c6:15:51:09:6e: fd:f3:31:c8:ec:83:ad:63:cd:84:55:54:53:df:21: 32:40:f7:7c:b4:e3:69:d2:2e:2c:1b:e3:2d:8f:cd: b2:07:64:14:80:56:fe:16:c9:5e:34:01:6b:25:77: 04:63:b0:92:6c:51:29:d9:83:61:9a:65:d5:1a:48: 47:12:3e:44:db:7a:93:7d:39:11:6d:08:11:55:64: ae:2c:5e:1e:77:b2:ff:01:65:fb:9e:99:8e:e0:4e: 77:7c:d9:82:bd:04:6d:63:61:9c:d8:04:05:27:e2: 25:6c:b3:e7:44:8d:fe:f7:1d:39:39:f2:56:4f:19: ae:74:20:b4:44:5e:48:fc:28:e6:de:80:08:e1:6e: ec:c3:52:fc:84:8a:1a:b1:7f:73:0e:dd:fd:62:50: be:a6:4a:01:6c:c1:d6:9e:69:57:8c:99:e6:73:16: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.141.0.0-128.142.255.255 137.138.0.0/16 185.249.56.0/22 188.184.0.0/15 192.16.155.0-192.16.166.255 192.65.183.0-192.65.197.255 192.91.236.0-192.91.246.255 194.12.128.0/18 IPv6: 2001:67c:2c4::/48 2001:7f8:1c::/48 2001:1458::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 513 1297 20641 57859 61339 206095 Signature Algorithm: sha256WithRSAEncryption 95:aa:96:63:f3:9d:b6:19:03:e2:89:62:3c:bc:c0:c1:3f:f7: 8d:34:e5:fd:ec:5a:df:df:73:e1:d1:a5:b4:b0:fd:81:04:18: 4d:64:b5:63:9d:55:ea:e9:be:9c:6d:d8:49:c1:7c:f7:1b:e1: 57:9a:16:02:91:aa:d0:93:b9:65:14:65:71:25:fc:81:ff:c7: 19:8e:43:57:87:61:0a:7b:db:2d:b2:06:c1:63:79:f4:43:92: 18:6c:f6:e8:60:ea:03:58:f0:ed:a7:e1:91:53:52:82:3e:86: a7:9b:9b:ae:d1:f5:fa:82:68:24:2f:9a:2b:73:8c:41:4c:b1: 35:08:46:0a:22:f8:81:ae:61:51:9f:bb:08:68:df:a2:b8:e4: d2:a0:51:6f:b7:06:c7:18:a4:b0:0c:8f:d3:30:28:70:79:90: b7:aa:1e:e1:97:98:3c:dd:ce:63:fd:6b:64:17:ea:b9:86:8d: d0:e7:dc:03:11:49:a2:65:ff:b3:fd:09:36:0d:35:93:31:7b: e2:38:30:95:15:f4:14:a2:91:39:78:2d:ac:3c:63:a6:b9:6c: 9d:94:1e:6e:10:8d:a0:6a:bc:32:ca:af:e9:08:05:49:30:29: 03:81:27:63:1c:88:86:d9:9b:cf:db:11:d7:77:a7:6c:98:88: 7f:db:43:db -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAZt/gu6IO+6lZ8lU2nxTdM95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWQ2OWRkOTgzMzM1NTg0MDFlZGQxYTYwMTY4MjY1ZGQxYTBkOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6CnXFWRl7tJgfhFA2+jUeFX1Xuz cLyfeXXJntWiZ0AA72FwomLkoJO/ZCoc1+CLKmrYjGHePP+w0iDzq03mPjjJU1Xz Hsiv8uWdHffG36DPEEm8xhVRCW798zHI7IOtY82EVVRT3yEyQPd8tONp0i4sG+Mt j82yB2QUgFb+FsleNAFrJXcEY7CSbFEp2YNhmmXVGkhHEj5E23qTfTkRbQgRVWSu LF4ed7L/AWX7npmO4E53fNmCvQRtY2Gc2AQFJ+IlbLPnRI3+9x05OfJWTxmudCC0 RF5I/Cjm3oAI4W7sw1L8hIoasX9zDt39YlC+pkoBbMHWnmlXjJnmcxYLPwIDAQAB o4IDHjCCAxowHQYDVR0OBBYEFHnWndmDM1WEAe3RpgFoJl3RoNlYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2E0NmJl Ny0zMTdlLTQ3MDgtYTAxNi00ZmQ2YjdkNzZhMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvYTQ2YmU3 LTMxN2UtNDcwOC1hMDE2LTRmZDZiN2Q3NmEyZi8xL2VkYWQyWU16VllRQjdkR21B V2dtWGRHZzJWZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF BQcBBwEB/wR3MHUwUgQCAAEwTDAKAwMAgI0DAwCAjgMDAImKAwQCufk4AwMBvLgw DAMEAMAQmwMEAMAQpjAMAwQAwEG3AwQBwEHEMAwDBALAW+wDBADAW/YDBAbCDIAw HwQCAAIwGQMHACABBnwCxAMHACABB/gAHAMFASABFFgwMAYIKwYBBQUHAQgBAf8E ITAfoB0wGwICAgECAgURAgJQoQIDAOIDAgMA75sCAwMlDzANBgkqhkiG9w0BAQsF AAOCAQEAlaqWY/OdthkD4oliPLzAwT/3jTTl/exa399z4dGltLD9gQQYTWS1Y51V 6um+nG3YScF89xvhV5oWApGq0JO5ZRRlcSX8gf/HGY5DV4dhCnvbLbIGwWN59EOS GGz26GDqA1jw7afhkVNSgj6Gp5ubrtH1+oJoJC+aK3OMQUyxNQhGCiL4ga5hUZ+7 CGjforjk0qBRb7cGxxiksAyP0zAocHmQt6oe4ZeYPN3OY/1rZBfquYaN0OfcAxFJ omX/s/0JNg01kzF74jgwlRX0FKKROXgtrDxjprlsnZQebhCNoGq8Msqv6QgFSTAp A4EnYxyIhtmbz9sR13enbJiIf9tD2w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:37 2026 by rpki-client