This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer File: er4RhD2-gDQLJGD8Fg7GubiPIio.cer (raw, json) Hash identifier: 55auybej55qwFZZvYIJRSIBFG8Qd+EpUqfhr1mMVsOY= Subject key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75D4478DC8907B187356339E098F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213744 IP: 91.142.129.0/24 IP: 212.233.68.0/22 IP: 2a13:6d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5d:44:78:dc:89:07:b1:87:35:63:39:e0:98:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:9b:2b:5e:4f:77:d1:d8:b1:63:fe:90:41: 99:ba:de:c6:bc:33:22:20:1f:54:fd:6f:5c:10:5b: 17:44:83:18:77:c2:b8:f3:3f:80:cf:b6:d3:6a:fb: fd:da:df:ef:37:01:7b:ef:1b:ca:22:4b:88:b3:b4: d8:bf:f6:e6:24:3e:5d:93:25:83:37:c8:db:5a:e2: 9e:12:52:4a:1d:c4:1c:bd:74:9c:47:3c:18:52:1c: e9:5b:fa:27:26:c8:c8:72:25:7b:8b:25:b3:f9:97: 42:6c:18:88:68:ed:fb:4a:d9:77:05:df:8d:7f:68: 6e:cb:6a:77:d9:13:ee:e2:df:4c:49:82:0b:d9:e2: 9f:3c:8d:65:24:33:50:ae:b1:61:a8:23:3b:ef:cb: bf:fc:46:a3:b9:e3:08:12:df:56:cf:be:98:ec:0a: 50:c4:f6:80:05:1e:27:e1:f9:2d:f4:b6:67:e6:2d: 0a:bb:af:8f:e6:8b:e0:a7:64:c3:23:5f:ef:5e:16: 54:05:41:71:bd:6f:27:3a:99:93:93:47:7c:2e:16: b6:06:db:b8:42:e5:ec:26:ed:f5:30:ef:d4:b6:fd: 14:65:27:94:fd:64:06:c5:fb:f0:5d:d6:d3:3e:62: 99:1d:b1:a5:ba:61:7d:57:98:12:92:9a:82:77:77: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.129.0/24 212.233.68.0/22 IPv6: 2a13:6d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213744 Signature Algorithm: sha256WithRSAEncryption 38:4b:99:ac:cd:ff:a8:51:f7:58:c1:cc:e9:21:54:9f:9f:e9: f4:22:f1:32:a0:ee:81:aa:12:a2:9b:e8:c0:78:9e:ed:f9:bb: 08:27:e5:15:24:17:f1:b0:d6:2b:b6:0a:f8:88:e1:b1:91:95: 69:56:08:e2:88:7d:f0:36:72:03:4f:34:5e:93:c7:b0:34:3e: ce:81:da:10:98:78:ec:aa:c3:30:7c:64:a8:a5:20:bc:92:4f: 76:61:38:e5:01:61:c5:55:4f:49:b9:20:24:6f:8f:c5:9b:2c: 99:c3:f6:5e:81:55:cb:34:f0:e8:f8:6a:c8:61:82:f9:e9:29: 8b:3a:29:40:58:29:fa:f3:e4:7a:77:92:98:20:19:f0:9a:49: 7c:c7:ca:c8:80:0a:33:9b:79:5e:03:66:97:32:a6:96:25:b6: f8:29:9d:0e:eb:0a:87:53:c8:10:4f:8c:cd:b2:92:ad:aa:47: 72:29:f8:d8:69:91:2b:bb:a0:48:ad:80:8e:12:37:90:2f:f9: ed:2f:36:8c:c2:de:6b:d9:88:04:94:44:e9:ff:50:42:8a:8b: 39:e0:97:9d:55:eb:5d:41:6b:58:ea:f8:40:38:9b:a3:f1:0c: 96:9f:70:08:66:1d:a0:b9:29:08:d8:6f:f6:27:ac:60:50:00: 2e:eb:37:37 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3x11EeNyJB7GHNWM54Jj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWJlMTE4NDNkYmU4MDM0MGIyNDYwZmMxNjBlYzZiOWI4OGYyMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN6bK15Pd9HYsWP+kEGZut7GvDMi IB9U/W9cEFsXRIMYd8K48z+Az7bTavv92t/vNwF77xvKIkuIs7TYv/bmJD5dkyWD N8jbWuKeElJKHcQcvXScRzwYUhzpW/onJsjIciV7iyWz+ZdCbBiIaO37Stl3Bd+N f2huy2p32RPu4t9MSYIL2eKfPI1lJDNQrrFhqCM778u//EajueMIEt9Wz76Y7ApQ xPaABR4n4fkt9LZn5i0Ku6+P5ovgp2TDI1/vXhZUBUFxvW8nOpmTk0d8Lha2Btu4 QuXsJu31MO/Utv0UZSeU/WQGxfvwXdbTPmKZHbGlumF9V5gSkpqCd3epnQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHq+EYQ9voA0CyRg/BYOxrm4jyIqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzYyMzU2 MS0wNzE1LTQyNzctYTBiZS0zNDExYzZmYjRmY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNjIzNTYx LTA3MTUtNDI3Ny1hMGJlLTM0MTFjNmZiNGZjYS8xL2VyNFJoRDItZ0RRTEpHRDhG ZzdHdWJpUElpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW46BAwQC1OlEMA0EAgACMAcDBQMqE21AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNC8DANBgkqhkiG9w0BAQsFAAOCAQEAOEuZ rM3/qFH3WMHM6SFUn5/p9CLxMqDugaoSopvowHie7fm7CCflFSQX8bDWK7YK+Ijh sZGVaVYI4oh98DZyA080XpPHsDQ+zoHaEJh47KrDMHxkqKUgvJJPdmE45QFhxVVP SbkgJG+PxZssmcP2XoFVyzTw6PhqyGGC+ekpizopQFgp+vPkeneSmCAZ8JpJfMfK yIAKM5t5XgNmlzKmliW2+CmdDusKh1PIEE+MzbKSrapHcin42GmRK7ugSK2AjhI3 kC/57S82jMLea9mIBJRE6f9QQoqLOeCXnVXrXUFrWOr4QDibo/EMlp9wCGYdoLkp CNhv9iesYFAALus3Nw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:26 2026 by rpki-client