This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer File: enUOttEsV-pkMLnwI5XK8qgb7Pg.cer (raw, json) Hash identifier: /32AYP3vYlQAh6gEmdQJ9C+LuKFDozlaUgMBk3xwdAg= Subject key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FFB09275C4AA27E8A86F316EDD5B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41415 IP: 185.215.128.0/24 IP: 185.215.130.0/24 IP: 2a0b:aa40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fb:09:27:5c:4a:a2:7e:8a:86:f3:16:ed:d5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:bb:76:80:40:29:32:1c:6c:23:c9:81:a6: 7e:1b:b0:eb:e2:f7:80:ab:0b:e1:2a:e1:ac:92:95: 61:70:9e:65:f3:6d:07:a5:16:a8:2b:e4:5a:ef:44: ac:dd:07:0a:5b:4a:60:4d:13:fb:b2:12:c6:c4:0c: 6f:61:4c:3f:2a:17:e2:c8:90:db:1e:93:ae:bb:e8: 69:c6:ee:a0:87:8b:05:79:69:c1:ea:f9:28:3a:37: 82:d0:d9:c9:07:ed:0b:bd:5d:11:c8:47:78:4c:0b: 6b:67:1a:df:a2:d5:ec:ee:5c:37:27:6d:96:70:fd: 50:94:b4:fb:2d:1c:e7:7d:9b:6a:b4:45:6e:90:f9: f0:fe:ec:04:7e:9c:8d:c1:26:7b:b8:dc:8e:ea:60: 25:31:7c:23:b5:70:a1:56:06:c6:22:15:8f:5d:12: 72:98:c2:fa:21:ea:e7:20:f3:3d:ce:19:98:e1:83: f7:80:09:54:07:ba:7c:23:30:3d:6c:9c:20:8d:c8: 94:57:a3:2d:b2:2b:66:77:d4:7e:c5:bf:d6:69:81: 39:08:32:42:4f:58:ee:71:35:96:78:6d:a4:af:a0: 5b:12:d3:0a:8f:04:f1:1b:9b:4d:e5:f5:c7:af:1d: 54:be:7f:bb:eb:ff:59:a6:b3:0e:c1:61:59:a1:cc: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.128.0/24 185.215.130.0/24 IPv6: 2a0b:aa40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41415 Signature Algorithm: sha256WithRSAEncryption ac:e1:19:ed:6c:fd:75:3b:3f:9d:c7:9e:7d:a3:21:ad:5e:aa: 27:bd:01:e7:ce:2c:cc:6b:83:8a:17:c1:91:14:a4:61:55:2f: 91:d3:b7:28:2e:47:62:0f:12:b3:3f:76:35:de:7f:58:66:8d: cf:79:67:fe:87:6c:72:75:e5:f6:e8:9f:a3:e5:97:84:82:15: 66:30:2b:d9:b0:d4:09:73:6c:cc:9d:02:97:8d:ac:e1:83:5c: 96:51:84:af:ab:00:65:7f:cf:0d:3f:1e:0f:4d:80:17:e6:8a: 26:07:62:7d:77:93:76:58:63:d7:12:08:6f:d1:b5:08:14:52: 1a:c9:01:a7:0a:0f:63:95:83:52:43:46:06:d6:9b:a9:d2:12: dc:44:43:e1:ec:0f:6c:b0:b6:8b:52:0a:e8:95:80:69:5c:3b: b8:87:63:a0:02:5f:65:0c:d3:be:2f:01:0d:12:e7:ba:09:4b: 97:3c:bd:01:93:6f:ca:7b:0d:5a:12:1e:25:78:56:c2:6b:bd: cd:07:c7:02:dc:96:63:d4:98:0f:95:98:b1:94:e0:f1:02:6b: 8d:ea:a3:5e:f5:4a:61:6a:99:ef:cd:43:58:c6:c2:df:53:ae: fe:64:2a:5c:17:83:ed:80:60:89:96:06:4f:23:88:b9:22:c7: 87:92:5c:17 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8f/sJJ1xKon6KhvMW7dW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc1MGViNmQxMmM1N2VhNjQzMGI5ZjAyMzk1Y2FmMmE4MWJlY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikq7doBAKTIcbCPJgaZ+G7Dr4veA qwvhKuGskpVhcJ5l820HpRaoK+Ra70Ss3QcKW0pgTRP7shLGxAxvYUw/KhfiyJDb HpOuu+hpxu6gh4sFeWnB6vkoOjeC0NnJB+0LvV0RyEd4TAtrZxrfotXs7lw3J22W cP1QlLT7LRznfZtqtEVukPnw/uwEfpyNwSZ7uNyO6mAlMXwjtXChVgbGIhWPXRJy mML6IernIPM9zhmY4YP3gAlUB7p8IzA9bJwgjciUV6Mtsitmd9R+xb/WaYE5CDJC T1jucTWWeG2kr6BbEtMKjwTxG5tN5fXHrx1Uvn+76/9ZprMOwWFZocwxAQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHp1DrbRLFfqZDC58COVyvKoG+z4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2Lzk4ZGM2 Zi1iZTU2LTRjOGQtYjk0ZS01NzIyNzk4MmEwMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOThkYzZm LWJlNTYtNGM4ZC1iOTRlLTU3MjI3OTgyYTAwMC8xL2VuVU90dEVzVi1wa01MbndJ NVhLOHFnYjdQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAudeAAwQAudeCMA0EAgACMAcDBQAqC6pAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwChxzANBgkqhkiG9w0BAQsFAAOCAQEArOEZ 7Wz9dTs/nceefaMhrV6qJ70B584szGuDihfBkRSkYVUvkdO3KC5HYg8Ssz92Nd5/ WGaNz3ln/odscnXl9uifo+WXhIIVZjAr2bDUCXNszJ0Cl42s4YNcllGEr6sAZX/P DT8eD02AF+aKJgdifXeTdlhj1xIIb9G1CBRSGskBpwoPY5WDUkNGBtabqdIS3ERD 4ewPbLC2i1IK6JWAaVw7uIdjoAJfZQzTvi8BDRLnuglLlzy9AZNvynsNWhIeJXhW wmu9zQfHAtyWY9SYD5WYsZTg8QJrjeqjXvVKYWqZ781DWMbC31Ou/mQqXBeD7YBg iZYGTyOIuSLHh5JcFw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:18 2026 by rpki-client