This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer File: eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer (raw, json) Hash identifier: Ax+ZpJ+8/XQYCYJzQTIOuDCLS1HSRhJ/EubvAPAiUiM= Subject key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4ABF3F646760E3DD1197BB3A48498 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35399 IP: 87.236.56.0/21 IP: 2a03:b300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ab:f3:f6:46:76:0e:3d:d1:19:7b:b3:a4:84:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:b5:d4:ee:b5:bc:f3:2d:14:f4:57:ba:e4: 0b:5b:2b:03:98:31:a0:3f:09:c4:de:eb:08:c6:a0: e1:13:31:6b:b7:49:0a:ef:75:fd:2b:db:bc:ca:c8: d6:25:8a:f9:ba:f2:5b:41:22:8c:ce:d0:17:cf:a1: 32:e3:67:5e:62:92:1b:20:3b:9f:43:fc:ed:b5:ee: fd:d9:0a:84:66:3f:a0:7f:33:3f:65:d6:b9:a5:57: 58:a6:db:d5:c1:20:24:5f:c1:dc:29:c6:45:60:d4: c1:2e:6b:5e:76:8b:2c:f0:7f:e2:94:50:bd:68:ee: e9:06:68:fa:e7:16:78:cf:0b:7a:32:66:d0:18:93: 3b:70:77:e8:7f:4d:6d:f1:42:2f:16:18:93:fc:98: ad:48:63:f0:2a:13:1e:12:36:96:0f:02:cd:ac:9c: 10:2d:94:61:23:cf:51:69:f8:24:27:eb:dd:e2:f0: e5:6f:18:00:d3:18:19:95:95:97:28:a0:80:70:ba: a4:81:bd:bf:11:37:d3:6f:ca:c7:2b:21:51:64:f4: 4f:2c:f7:f3:3b:d9:12:23:e8:42:56:ec:64:ad:9a: 3b:7b:8f:a4:17:63:2d:62:a5:6a:c7:5f:bf:81:65: 73:6b:86:36:27:6b:aa:1b:06:6c:84:26:40:67:1e: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.56.0/21 IPv6: 2a03:b300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35399 Signature Algorithm: sha256WithRSAEncryption 07:86:8d:dd:43:a6:cf:69:31:1a:27:af:99:93:19:f2:1a:7f: a0:75:67:4a:9e:e9:b5:08:76:94:9e:bf:9c:52:25:8b:7e:52: c1:46:4c:ec:dd:7a:a3:c9:40:62:08:f7:a2:26:e9:65:e8:57: bf:51:77:73:26:aa:ac:87:85:11:f0:5f:fd:53:50:68:87:cd: 67:4c:c6:ae:c6:6f:de:7e:e0:3b:83:c7:db:f3:84:ac:0c:d3: a8:4a:e2:aa:30:29:0b:e2:22:51:dd:26:1b:2b:24:e9:e1:94: 41:2f:f9:64:4b:9f:87:b0:9a:6b:61:75:88:c3:42:a8:07:cc: 9f:73:4c:f4:8b:ad:3d:4c:1a:33:a0:47:b0:1b:46:eb:d1:d3: 9c:5f:4c:05:e1:11:81:62:d7:81:31:f2:3d:75:f0:05:02:c5: 96:28:2c:37:24:ee:24:9a:6c:0b:f5:28:01:3c:ee:01:a2:9d: a3:18:53:f0:fd:16:3f:65:3a:18:40:eb:f3:2d:c3:46:ec:67: ad:61:b4:2a:11:73:8b:cf:dd:17:36:fb:7b:01:e7:ab:6f:67: e8:ea:7a:a6:70:68:49:6e:6c:5e:ca:fd:47:d3:36:f9:50:df: d1:ab:1e:bd:02:07:c1:c0:a2:7e:b0:90:7b:5d:0a:08:dd:c7: e7:fe:b8:da -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pKvz9kZ2Dj3RGXuzpISYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWE4MTIzNzJiODNhNWUwYzlmY2ExNWE1NTJiYjYzNjM4YTM4MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ611O61vPMtFPRXuuQLWysDmDGg PwnE3usIxqDhEzFrt0kK73X9K9u8ysjWJYr5uvJbQSKMztAXz6Ey42deYpIbIDuf Q/ztte792QqEZj+gfzM/Zda5pVdYptvVwSAkX8HcKcZFYNTBLmtedoss8H/ilFC9 aO7pBmj65xZ4zwt6MmbQGJM7cHfof01t8UIvFhiT/JitSGPwKhMeEjaWDwLNrJwQ LZRhI89RafgkJ+vd4vDlbxgA0xgZlZWXKKCAcLqkgb2/ETfTb8rHKyFRZPRPLPfz O9kSI+hCVuxkrZo7e4+kF2MtYqVqx1+/gWVza4Y2J2uqGwZshCZAZx4mUwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHqoEjcrg6XgyfyhWlUrtjY4o4J9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2NkYmI0 OS01N2M1LTQ1NGYtOWIwNS1lNjUyOTIxNThmNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvY2RiYjQ5 LTU3YzUtNDU0Zi05YjA1LWU2NTI5MjE1OGY0My8xL2VxZ1NOeXVEcGVESl9LRmFW U3UyTmppamduMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDV+w4MA0EAgACMAcDBQAqA7MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKRzANBgkqhkiG9w0BAQsFAAOCAQEAB4aN3UOmz2kx GievmZMZ8hp/oHVnSp7ptQh2lJ6/nFIli35SwUZM7N16o8lAYgj3oibpZehXv1F3 cyaqrIeFEfBf/VNQaIfNZ0zGrsZv3n7gO4PH2/OErAzTqEriqjApC+IiUd0mGysk 6eGUQS/5ZEufh7Caa2F1iMNCqAfMn3NM9IutPUwaM6BHsBtG69HTnF9MBeERgWLX gTHyPXXwBQLFligsNyTuJJpsC/UoATzuAaKdoxhT8P0WP2U6GEDr8y3DRuxnrWG0 KhFzi8/dFzb7ewHnq29n6Op6pnBoSW5sXsr9R9M2+VDf0asevQIHwcCifrCQe10K CN3H5/642g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:36 2026 by rpki-client