This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
File: eoBXqNht0zDzh4AfED8-u2_byqo.cer (raw, json)
Hash identifier: OH+PtGtOy9gL/jVwWsF1CIni9qtamVA13dzVh+4Hujo=
Subject key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AEBBAC2F3BCDEDED127AD51C2E126
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56984
IP: 193.36.168.0/22
IP: 2a0c:8940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:eb:ba:c2:f3:bc:de:de:d1:27:ad:51:c2:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:7f:cd:8d:34:3f:8b:65:1e:4c:34:6b:c1:
a0:0a:25:bf:1e:3d:a2:1e:99:a0:77:55:f8:c2:24:
27:a8:03:80:a3:8a:b7:28:e5:02:97:64:9f:61:46:
c3:e1:eb:35:56:1b:b8:8f:94:b7:c1:de:a3:8c:52:
ff:2b:d5:43:b1:72:98:52:18:e9:81:f2:ce:75:9a:
a2:c1:39:d8:bb:12:80:ff:60:d5:29:a9:0e:89:43:
44:bb:3f:a4:cf:9a:d6:1c:95:ab:04:05:17:97:bd:
6c:0b:f2:9a:cb:cd:10:31:2e:52:58:c6:64:1a:12:
8a:47:32:fe:6a:d2:8c:f3:68:fb:e8:15:77:7f:91:
51:78:c5:62:86:40:26:6b:4b:36:de:fc:81:0e:20:
39:83:5a:2c:f1:b9:0e:93:e8:68:23:51:b1:1e:0e:
b0:e3:f9:21:59:fb:cb:69:a0:db:0f:36:d3:73:06:
67:69:ff:65:c3:74:be:3e:80:bc:eb:9f:17:f5:b2:
0c:31:56:73:85:17:5a:8a:90:82:88:40:a4:ab:d0:
99:9c:9c:bb:f5:70:00:2f:76:49:d7:3c:f9:ef:78:
df:6a:9c:4c:0b:a6:c8:d8:29:5a:20:34:3b:05:aa:
ca:22:3b:cb:31:e5:92:9a:58:d4:f6:1d:57:8f:25:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.168.0/22
IPv6:
2a0c:8940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56984
Signature Algorithm: sha256WithRSAEncryption
25:5b:6e:46:d5:69:6b:8a:50:28:13:98:55:0b:98:29:cc:44:
c4:a3:ab:b7:ca:90:7f:4f:98:86:ca:fb:6e:8e:e2:48:25:64:
94:15:59:cc:3e:a9:39:9c:c7:15:de:85:a4:cb:41:be:c2:db:
29:53:d6:04:16:8d:20:38:b8:d4:d9:5b:e3:86:2b:8b:d4:7d:
f1:ae:41:a0:4c:ee:b3:94:41:65:5e:26:ac:91:0c:9a:e1:80:
63:20:1a:9a:6e:d3:e3:62:5e:d9:81:cd:a0:0a:b8:3b:37:10:
f3:cb:fe:6c:29:fc:31:e5:ad:20:a8:d8:eb:12:87:01:88:4a:
37:24:cd:e1:03:02:d6:0f:c6:9e:19:9c:b6:42:35:e2:b6:81:
a0:ac:44:6a:83:0b:31:a9:e3:99:6c:fc:d2:51:e7:a4:e6:b0:
98:e0:49:08:23:1f:53:22:be:6b:38:9e:37:c6:67:f7:36:5c:
95:9b:4b:54:bc:88:dc:54:07:11:e7:5c:b2:6e:38:15:ad:64:
22:29:06:5e:05:e2:07:77:84:d8:42:53:02:42:14:ff:52:aa:
ee:14:cc:8a:53:35:35:62:f3:c9:a8:b3:05:22:d1:28:99:c9:
f3:fe:be:21:5f:dc:a5:9b:af:5c:25:b8:33:09:98:b7:f5:4e:
c2:bf:d7:39
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt6Wuu6wvO83t7RJ61RwuEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTgwNTdhOGQ4NmRkMzMwZjM4NzgwMWYxMDNmM2ViYjZmZGJjYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FZ/zY00P4tlHkw0a8GgCiW/Hj2i
Hpmgd1X4wiQnqAOAo4q3KOUCl2SfYUbD4es1Vhu4j5S3wd6jjFL/K9VDsXKYUhjp
gfLOdZqiwTnYuxKA/2DVKakOiUNEuz+kz5rWHJWrBAUXl71sC/Kay80QMS5SWMZk
GhKKRzL+atKM82j76BV3f5FReMVihkAma0s23vyBDiA5g1os8bkOk+hoI1GxHg6w
4/khWfvLaaDbDzbTcwZnaf9lw3S+PoC8658X9bIMMVZzhRdaipCCiECkq9CZnJy7
9XAAL3ZJ1zz573jfapxMC6bI2ClaIDQ7BarKIjvLMeWSmljU9h1XjyVBKwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHqAV6jYbdMw84eAHxA/Prtv28qqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2M0OGQ0
NS02M2FmLTQxNmItOGEyNC1mNjk3NmU1NDBkOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvYzQ4ZDQ1
LTYzYWYtNDE2Yi04YTI0LWY2OTc2ZTU0MGQ5NC8xL2VvQlhxTmh0MHpEemg0QWZF
RDgtdTJfYnlxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwSSoMA0EAgACMAcDBQMqDIlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDemDANBgkqhkiG9w0BAQsFAAOCAQEAJVtuRtVpa4pQ
KBOYVQuYKcxExKOrt8qQf0+Yhsr7bo7iSCVklBVZzD6pOZzHFd6FpMtBvsLbKVPW
BBaNIDi41Nlb44Yri9R98a5BoEzus5RBZV4mrJEMmuGAYyAamm7T42Je2YHNoAq4
OzcQ88v+bCn8MeWtIKjY6xKHAYhKNyTN4QMC1g/GnhmctkI14raBoKxEaoMLManj
mWz80lHnpOawmOBJCCMfUyK+azieN8Zn9zZclZtLVLyI3FQHEedcsm44Fa1kIikG
XgXiB3eE2EJTAkIU/1Kq7hTMilM1NWLzyaizBSLRKJnJ8/6+IV/cpZuvXCW4MwmY
t/VOwr/XOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:21 2026 by rpki-client