This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.cer (raw, json)
Hash identifier:          OH+PtGtOy9gL/jVwWsF1CIni9qtamVA13dzVh+4Hujo=
Subject key identifier:   7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7A5AEBBAC2F3BCDEDED127AD51C2E126
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 16:18:57 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 56984
                          IP: 193.36.168.0/22
                          IP: 2a0c:8940::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:eb:ba:c2:f3:bc:de:de:d1:27:ad:51:c2:e1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:7f:cd:8d:34:3f:8b:65:1e:4c:34:6b:c1:
                    a0:0a:25:bf:1e:3d:a2:1e:99:a0:77:55:f8:c2:24:
                    27:a8:03:80:a3:8a:b7:28:e5:02:97:64:9f:61:46:
                    c3:e1:eb:35:56:1b:b8:8f:94:b7:c1:de:a3:8c:52:
                    ff:2b:d5:43:b1:72:98:52:18:e9:81:f2:ce:75:9a:
                    a2:c1:39:d8:bb:12:80:ff:60:d5:29:a9:0e:89:43:
                    44:bb:3f:a4:cf:9a:d6:1c:95:ab:04:05:17:97:bd:
                    6c:0b:f2:9a:cb:cd:10:31:2e:52:58:c6:64:1a:12:
                    8a:47:32:fe:6a:d2:8c:f3:68:fb:e8:15:77:7f:91:
                    51:78:c5:62:86:40:26:6b:4b:36:de:fc:81:0e:20:
                    39:83:5a:2c:f1:b9:0e:93:e8:68:23:51:b1:1e:0e:
                    b0:e3:f9:21:59:fb:cb:69:a0:db:0f:36:d3:73:06:
                    67:69:ff:65:c3:74:be:3e:80:bc:eb:9f:17:f5:b2:
                    0c:31:56:73:85:17:5a:8a:90:82:88:40:a4:ab:d0:
                    99:9c:9c:bb:f5:70:00:2f:76:49:d7:3c:f9:ef:78:
                    df:6a:9c:4c:0b:a6:c8:d8:29:5a:20:34:3b:05:aa:
                    ca:22:3b:cb:31:e5:92:9a:58:d4:f6:1d:57:8f:25:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.168.0/22
                IPv6:
                  2a0c:8940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56984

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:6e:46:d5:69:6b:8a:50:28:13:98:55:0b:98:29:cc:44:
         c4:a3:ab:b7:ca:90:7f:4f:98:86:ca:fb:6e:8e:e2:48:25:64:
         94:15:59:cc:3e:a9:39:9c:c7:15:de:85:a4:cb:41:be:c2:db:
         29:53:d6:04:16:8d:20:38:b8:d4:d9:5b:e3:86:2b:8b:d4:7d:
         f1:ae:41:a0:4c:ee:b3:94:41:65:5e:26:ac:91:0c:9a:e1:80:
         63:20:1a:9a:6e:d3:e3:62:5e:d9:81:cd:a0:0a:b8:3b:37:10:
         f3:cb:fe:6c:29:fc:31:e5:ad:20:a8:d8:eb:12:87:01:88:4a:
         37:24:cd:e1:03:02:d6:0f:c6:9e:19:9c:b6:42:35:e2:b6:81:
         a0:ac:44:6a:83:0b:31:a9:e3:99:6c:fc:d2:51:e7:a4:e6:b0:
         98:e0:49:08:23:1f:53:22:be:6b:38:9e:37:c6:67:f7:36:5c:
         95:9b:4b:54:bc:88:dc:54:07:11:e7:5c:b2:6e:38:15:ad:64:
         22:29:06:5e:05:e2:07:77:84:d8:42:53:02:42:14:ff:52:aa:
         ee:14:cc:8a:53:35:35:62:f3:c9:a8:b3:05:22:d1:28:99:c9:
         f3:fe:be:21:5f:dc:a5:9b:af:5c:25:b8:33:09:98:b7:f5:4e:
         c2:bf:d7:39
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt6Wuu6wvO83t7RJ61RwuEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTgwNTdhOGQ4NmRkMzMwZjM4NzgwMWYxMDNmM2ViYjZmZGJjYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FZ/zY00P4tlHkw0a8GgCiW/Hj2i
Hpmgd1X4wiQnqAOAo4q3KOUCl2SfYUbD4es1Vhu4j5S3wd6jjFL/K9VDsXKYUhjp
gfLOdZqiwTnYuxKA/2DVKakOiUNEuz+kz5rWHJWrBAUXl71sC/Kay80QMS5SWMZk
GhKKRzL+atKM82j76BV3f5FReMVihkAma0s23vyBDiA5g1os8bkOk+hoI1GxHg6w
4/khWfvLaaDbDzbTcwZnaf9lw3S+PoC8658X9bIMMVZzhRdaipCCiECkq9CZnJy7
9XAAL3ZJ1zz573jfapxMC6bI2ClaIDQ7BarKIjvLMeWSmljU9h1XjyVBKwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHqAV6jYbdMw84eAHxA/Prtv28qqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2M0OGQ0
NS02M2FmLTQxNmItOGEyNC1mNjk3NmU1NDBkOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvYzQ4ZDQ1
LTYzYWYtNDE2Yi04YTI0LWY2OTc2ZTU0MGQ5NC8xL2VvQlhxTmh0MHpEemg0QWZF
RDgtdTJfYnlxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwSSoMA0EAgACMAcDBQMqDIlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDemDANBgkqhkiG9w0BAQsFAAOCAQEAJVtuRtVpa4pQ
KBOYVQuYKcxExKOrt8qQf0+Yhsr7bo7iSCVklBVZzD6pOZzHFd6FpMtBvsLbKVPW
BBaNIDi41Nlb44Yri9R98a5BoEzus5RBZV4mrJEMmuGAYyAamm7T42Je2YHNoAq4
OzcQ88v+bCn8MeWtIKjY6xKHAYhKNyTN4QMC1g/GnhmctkI14raBoKxEaoMLManj
mWz80lHnpOawmOBJCCMfUyK+azieN8Zn9zZclZtLVLyI3FQHEedcsm44Fa1kIikG
XgXiB3eE2EJTAkIU/1Kq7hTMilM1NWLzyaizBSLRKJnJ8/6+IV/cpZuvXCW4MwmY
t/VOwr/XOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:21 2026 by rpki-client