This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer File: ee4R2MQpe-xUvTBUMMpHct-shHo.cer (raw, json) Hash identifier: qFsUmeTTX4Mqjlg4qa6/hj7qSTb5nvZ+ST4qpYuV9as= Subject key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77AF49855818C3AA5B12909DEA8F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201837 IP: 185.62.104.0/22 IP: 193.242.220.0/24 IP: 2a03:2a0::/29 IP: 2a13:7440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7a:f4:98:55:81:8c:3a:a5:b1:29:09:de:a8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79ee11d8c4297bec54bd305430ca4772dfac847a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:fe:f4:4b:50:e3:7d:2c:aa:59:91:33:e0: 59:62:a4:69:3f:a3:85:93:3f:d0:79:08:67:d6:a1: 37:05:87:71:ee:3f:07:88:fd:73:a4:7a:8e:fd:54: 67:7a:40:a2:7c:12:14:33:2f:a2:79:69:88:f5:93: d1:9f:a6:bd:4d:02:f9:78:db:34:cd:ef:f9:53:48: e2:45:c4:83:64:29:90:95:e3:03:b4:59:9b:6d:43: 4c:60:75:2d:e1:24:ad:be:04:64:03:34:d5:aa:3d: 95:22:c5:b7:17:58:b5:c3:c9:7b:93:4c:f1:9e:ee: 65:37:6b:55:43:be:f4:51:56:db:fb:23:f4:56:c8: c7:06:c0:b3:cc:e7:5e:68:a0:85:1e:9f:d2:ba:18: b2:41:a2:35:45:e5:b3:e5:05:68:9e:44:df:8f:90: d7:d2:e8:13:ca:37:a6:2c:33:96:01:cf:10:5a:bc: e4:5b:75:06:13:74:58:95:98:95:26:ac:5c:9a:76: a3:70:28:05:1c:bb:05:c5:dd:c2:e6:95:b0:fe:52: 46:b8:2c:1a:8c:54:91:54:e1:c1:3e:73:10:a6:0d: d0:df:d7:02:6f:73:7b:e0:3b:d2:c3:74:70:c4:b2: 7a:e2:96:1c:9b:62:4e:11:48:02:b6:65:8c:4b:60: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.104.0/22 193.242.220.0/24 IPv6: 2a03:2a0::/29 2a13:7440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201837 Signature Algorithm: sha256WithRSAEncryption 55:50:bd:86:9a:74:a9:27:7c:95:46:2b:cd:88:ab:65:c2:f9: 72:b4:3d:f5:44:6b:ff:06:2c:d1:3e:b9:e2:07:bd:2b:1b:43: fc:f2:76:b8:dd:a9:c5:1e:d3:38:04:e5:f6:94:a7:d5:25:53: 84:6f:ac:2e:6e:85:71:43:38:c7:32:22:7a:02:50:33:6f:39: 60:e6:27:f0:dc:fa:ce:c5:63:c7:e2:a4:af:87:de:c3:52:26: 89:6e:18:9c:a6:1f:2a:63:b2:c9:bf:47:60:ef:c0:dd:1e:a0: 6e:3d:17:a5:c1:a7:36:bb:b9:8b:e3:90:38:94:0a:3d:b8:04: f3:c4:42:dc:6a:56:72:f3:f9:3c:1c:e5:fa:d2:c6:26:f8:9d: e6:20:09:00:a5:24:03:bf:20:26:53:10:a6:c4:9a:cd:09:21: 1b:67:f7:f0:08:6d:ca:50:e7:c6:29:12:8a:c2:44:da:9e:f7: 29:0e:d8:c8:93:09:33:56:7a:7e:52:b2:28:ef:df:6c:f1:9a: f4:a2:57:0c:7c:df:19:b6:e9:7e:9e:a2:21:a6:a3:8d:a4:73: 4a:2f:69:c8:45:93:b4:bb:73:bb:05:0d:13:ec:8c:bb:42:c2: b3:33:5c:35:ca:0c:1d:5f:33:b8:9d:bd:e0:c9:31:19:db:6f: 27:c1:39:99 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt6x3r0mFWBjDqlsSkJ3qj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWVlMTFkOGM0Mjk3YmVjNTRiZDMwNTQzMGNhNDc3MmRmYWM4NDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s3+9EtQ430sqlmRM+BZYqRpP6OF kz/QeQhn1qE3BYdx7j8HiP1zpHqO/VRnekCifBIUMy+ieWmI9ZPRn6a9TQL5eNs0 ze/5U0jiRcSDZCmQleMDtFmbbUNMYHUt4SStvgRkAzTVqj2VIsW3F1i1w8l7k0zx nu5lN2tVQ770UVbb+yP0VsjHBsCzzOdeaKCFHp/SuhiyQaI1ReWz5QVonkTfj5DX 0ugTyjemLDOWAc8QWrzkW3UGE3RYlZiVJqxcmnajcCgFHLsFxd3C5pWw/lJGuCwa jFSRVOHBPnMQpg3Q39cCb3N74DvSw3RwxLJ64pYcm2JOEUgCtmWMS2CZfQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFHnuEdjEKXvsVL0wVDDKR3LfrIR6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2Y4NWIz ZC02MjRlLTRiMWEtYWQzMy0xMGEyMDZkYTdiNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvZjg1YjNk LTYyNGUtNGIxYS1hZDMzLTEwYTIwNmRhN2I2Yi8xL2VlNFIyTVFwZS14VXZUQlVN TXBIY3Qtc2hIby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuT5oAwQAwfLcMBQEAgACMA4DBQMqAwKgAwUD KhN0QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFG0wDQYJKoZIhvcNAQELBQAD ggEBAFVQvYaadKknfJVGK82Iq2XC+XK0PfVEa/8GLNE+ueIHvSsbQ/zydrjdqcUe 0zgE5faUp9UlU4RvrC5uhXFDOMcyInoCUDNvOWDmJ/Dc+s7FY8fipK+H3sNSJolu GJymHypjssm/R2DvwN0eoG49F6XBpza7uYvjkDiUCj24BPPEQtxqVnLz+Twc5frS xib4neYgCQClJAO/ICZTEKbEms0JIRtn9/AIbcpQ58YpEorCRNqe9ykO2MiTCTNW en5Ssijv32zxmvSiVwx83xm26X6eoiGmo42kc0ovachFk7S7c7sFDRPsjLtCwrMz XDXKDB1fM7idveDJMRnbbyfBOZk= -----END CERTIFICATE-----Generated at Mon Jan 26 20:54:35 2026 by rpki-client