This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer File: eilzR6QNO99Xh8x1OsJALQgkv8s.cer (raw, json) Hash identifier: tP/Sko6g2VdYfK5z8AmrfhxRQ1IQEtu1vH6Kelhgmvs= Subject key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910797A6BE03833B00C6182C2F98EEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50770 IP: 185.177.211.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:79:7a:6b:e0:38:33:b0:0c:61:82:c2:f9:8e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:69:38:75:6e:e2:77:9f:0c:e2:f0:a5:0c: a4:34:91:0e:e6:c3:fc:0e:74:c9:33:0e:0a:5e:cb: fd:86:09:93:1e:2e:d7:fe:a2:72:da:85:30:e8:9c: 90:08:d6:4e:f0:49:a0:65:a0:34:b6:cf:12:89:f7: c7:d9:2d:95:37:52:3d:25:80:c4:75:2f:3e:a2:3c: ee:4e:4b:6d:73:6e:69:40:32:d3:a8:be:05:25:d2: a9:19:84:03:21:04:ed:cf:0f:7e:7f:09:76:4a:f4: 70:2d:c9:4a:a6:b9:a1:fb:7b:7e:b9:28:a6:b8:66: 9a:d6:7b:9c:b9:3e:30:02:1d:16:c0:c0:23:91:90: 4b:d6:ea:6e:18:ad:a7:c0:59:e2:03:1e:1e:39:2c: 25:c8:dc:fb:a8:e4:46:1b:81:06:ce:72:49:61:e9: e2:5d:3e:8d:99:ea:fb:8c:bc:f2:d1:59:5e:5f:56: 8f:31:40:bb:b5:1f:17:5c:ab:09:83:30:3c:dc:69: d3:8e:6b:e7:31:63:7c:43:36:6e:70:85:5f:42:f1: 23:17:0d:12:03:3c:33:cf:bb:c9:16:fe:47:5b:8f: 88:80:79:4c:5b:2b:f4:65:88:2f:55:38:5d:a9:9f: 96:e0:b8:f5:03:6f:3a:1a:26:05:ab:7e:9b:a1:b5: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.211.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50770 Signature Algorithm: sha256WithRSAEncryption 3f:65:55:03:63:12:1f:7d:17:37:aa:6d:6c:3d:30:7c:8f:08: 49:9a:f1:8d:23:b1:e5:18:0b:23:de:3a:02:f6:6a:5f:89:e4: d6:bb:93:98:09:b7:48:c0:e3:2f:cb:e7:13:93:d4:e9:5c:31: 16:12:d3:e0:99:c5:ee:56:aa:7d:c2:97:63:2d:4b:59:a3:e2: 12:1d:88:6a:54:a6:20:e2:88:79:e1:f3:df:99:dc:60:ae:83: c4:5f:70:61:64:15:0c:6c:5b:2f:4f:9b:c5:27:4a:53:3f:b8: 3a:69:c7:1f:72:3b:f0:0f:a1:8d:83:21:ac:85:88:9c:60:20: ef:9d:7b:7a:00:5a:60:53:c8:7d:79:b3:46:ec:20:43:1d:f3: 02:d2:b2:e6:93:2c:4c:80:26:26:ec:52:b8:2a:9f:52:c8:d7: 5b:aa:57:d0:9c:26:d9:da:f5:a4:54:45:fa:51:ed:ae:35:a8: 51:28:95:34:71:41:a9:5b:59:a6:63:6b:5a:5a:0f:86:93:c1: d5:67:f6:53:08:07:fe:5f:6b:58:42:ec:65:fc:ca:bf:81:0f: d4:2b:f8:a6:51:95:6f:01:bf:18:9a:55:af:5b:d6:05:0a:e4: 7b:1d:e4:21:26:69:3d:af:ec:d4:fc:08:eb:18:c4:c0:ee:bc: 64:62:51:60 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EHl6a+A4M7AMYYLC+Y7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTI5NzM0N2E0MGQzYmRmNTc4N2NjNzUzYWMyNDAyZDA4MjRiZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY5pOHVu4nefDOLwpQykNJEO5sP8 DnTJMw4KXsv9hgmTHi7X/qJy2oUw6JyQCNZO8EmgZaA0ts8SiffH2S2VN1I9JYDE dS8+ojzuTkttc25pQDLTqL4FJdKpGYQDIQTtzw9+fwl2SvRwLclKprmh+3t+uSim uGaa1nucuT4wAh0WwMAjkZBL1upuGK2nwFniAx4eOSwlyNz7qORGG4EGznJJYeni XT6Nmer7jLzy0VleX1aPMUC7tR8XXKsJgzA83GnTjmvnMWN8QzZucIVfQvEjFw0S Azwzz7vJFv5HW4+IgHlMWyv0ZYgvVThdqZ+W4Lj1A286GiYFq36bobVMVwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHopc0ekDTvfV4fMdTrCQC0IJL/LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2MyMDBi NC05NDgxLTRlNjctYWUxNC1mOGI0MzlkMDY2NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYzIwMGI0 LTk0ODEtNGU2Ny1hZTE0LWY4YjQzOWQwNjY0NS8xL2VpbHpSNlFOTzk5WGg4eDFP c0pBTFFna3Y4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAubHTMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGUjANBgkqhkiG9w0BAQsFAAOCAQEAP2VVA2MSH30XN6ptbD0wfI8ISZrxjSOx 5RgLI946AvZqX4nk1ruTmAm3SMDjL8vnE5PU6VwxFhLT4JnF7laqfcKXYy1LWaPi Eh2IalSmIOKIeeHz35ncYK6DxF9wYWQVDGxbL0+bxSdKUz+4OmnHH3I78A+hjYMh rIWInGAg7517egBaYFPIfXmzRuwgQx3zAtKy5pMsTIAmJuxSuCqfUsjXW6pX0Jwm 2dr1pFRF+lHtrjWoUSiVNHFBqVtZpmNrWloPhpPB1Wf2UwgH/l9rWELsZfzKv4EP 1Cv4plGVbwG/GJpVr1vWBQrkex3kISZpPa/s1PwI6xjEwO68ZGJRYA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:55 2026 by rpki-client