This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer File: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer (raw, json) Hash identifier: 3sEtn246Mst1TnAKFoWhB3y0BfSOTmHzNsH0EBGIAYM= Subject key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84B6B3EE0FECD4E210F2D69E457C78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20722 AS: 28721 IP: 85.204.44.0/22 IP: 85.204.56.0/21 IP: 86.106.133.0/24 IP: 185.88.128.0/22 IP: 194.102.188.0/24 IP: 194.149.245.0/24 IP: 2a05:cb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b6:b3:ee:0f:ec:d4:e2:10:f2:d6:9e:45:7c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:af:5d:76:60:d0:ef:29:13:0b:3e:e8:07: 4e:e2:74:80:69:9e:a5:8d:dd:ea:d9:86:80:36:55: eb:d9:48:ca:b2:68:1d:b4:5a:6c:a1:4c:f2:80:13: a2:59:e4:27:aa:64:5a:6f:8e:e6:29:bc:4a:c5:84: 4f:11:a8:55:99:2d:c8:c0:ac:4f:ce:59:86:f9:55: 64:1c:d6:7e:f3:e5:db:6d:55:8d:d5:9e:fc:39:c8: 95:ca:11:75:34:5b:4e:ab:71:fe:85:5c:bc:4b:73: 97:78:9d:67:70:03:2e:b8:83:35:50:9e:2d:7f:fe: 24:4f:7d:23:83:ff:e8:d5:31:9f:17:c4:5d:be:ad: 12:ca:58:73:64:72:04:ec:29:5f:62:e0:cf:db:03: c9:40:88:68:27:e3:bb:af:f4:78:39:47:fb:9d:0c: 6b:86:c8:a8:90:b0:fb:ed:ff:c7:48:71:f1:ae:98: ea:20:a0:89:db:61:f6:09:7b:9e:64:e7:2f:44:7e: 5b:ef:42:cb:e6:88:45:30:44:61:23:f3:3d:47:63: f2:22:12:08:9e:c7:5b:2c:b8:13:8d:3f:c6:55:16: a0:1c:a9:3c:a1:0e:fa:9d:93:14:53:81:da:3a:a7: 80:8f:b5:26:6b:41:af:7d:19:ba:5a:63:b3:2f:af: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.44.0/22 85.204.56.0/21 86.106.133.0/24 185.88.128.0/22 194.102.188.0/24 194.149.245.0/24 IPv6: 2a05:cb40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20722 28721 Signature Algorithm: sha256WithRSAEncryption 4e:1a:e1:f8:99:ec:df:ac:f5:6d:53:c1:e8:c2:35:d5:45:b7: ec:a7:50:33:c8:a3:2f:41:3e:69:9f:c2:44:92:67:98:a6:90: e4:1b:2c:16:6d:67:db:88:62:99:c1:bb:df:f2:92:c6:4f:0c: 0a:97:95:24:55:14:31:80:25:d7:da:3a:ce:c0:63:75:1f:fc: a3:28:07:f5:98:ec:74:96:9e:7a:58:40:f2:2e:c9:0d:63:91: 74:b4:20:de:2a:5e:ef:80:8f:b4:53:23:98:44:47:8e:b0:d7: 7c:7f:15:44:9c:f6:3b:8c:c0:83:7e:1b:9c:5e:e4:e8:58:c1: 79:76:3c:85:78:51:e9:33:5f:07:f8:ae:58:29:18:d9:bd:3f: 4b:37:58:4a:fe:12:0a:bd:30:0a:1f:21:a8:6b:ac:c4:d0:fa: b2:d0:9d:70:d6:27:46:e9:2a:81:f6:d8:b2:09:3b:2e:d0:23: 73:18:86:d8:10:a5:c9:6b:a1:c5:3f:86:a3:38:db:a5:91:30: f0:26:45:02:86:ee:62:92:da:c2:fb:21:6d:4e:4d:a2:76:7f: 81:43:8e:77:be:0d:bf:e6:8d:17:b1:ac:0b:d1:99:f6:48:f6: 97:09:cc:be:68:eb:77:ab:7f:f3:46:43:98:e7:ce:77:b0:70: 4c:bb:d5:00 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt/hLaz7g/s1OIQ8taeRXx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWVmMDY5ZTdlM2VkNWJmNzBmNjgyY2U0MGM1ODEwZmYzZTVlMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLavXXZg0O8pEws+6AdO4nSAaZ6l jd3q2YaANlXr2UjKsmgdtFpsoUzygBOiWeQnqmRab47mKbxKxYRPEahVmS3IwKxP zlmG+VVkHNZ+8+XbbVWN1Z78OciVyhF1NFtOq3H+hVy8S3OXeJ1ncAMuuIM1UJ4t f/4kT30jg//o1TGfF8Rdvq0SylhzZHIE7ClfYuDP2wPJQIhoJ+O7r/R4OUf7nQxr hsiokLD77f/HSHHxrpjqIKCJ22H2CXueZOcvRH5b70LL5ohFMERhI/M9R2PyIhII nsdbLLgTjT/GVRagHKk8oQ76nZMUU4HaOqeAj7Uma0GvfRm6WmOzL6+rtQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFHrvBp5+PtW/cPaCzkDFgQ/z5eN4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2MwYmI1 Mi03MGRlLTRhZjAtYTlmYi05MDAwMzRmMDBkOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYzBiYjUy LTcwZGUtNGFmMC1hOWZiLTkwMDAzNGYwMGQ5ZS8xL2V1OEdubjQtMWI5dzlvTE9R TVdCRF9QbDQzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCVcwsAwQDVcw4AwQAVmqFAwQCuViAAwQAwma8 AwQAwpX1MA0EAgACMAcDBQMqBctAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAlDy AgJwMTANBgkqhkiG9w0BAQsFAAOCAQEAThrh+Jns36z1bVPB6MI11UW37KdQM8ij L0E+aZ/CRJJnmKaQ5BssFm1n24himcG73/KSxk8MCpeVJFUUMYAl19o6zsBjdR/8 oygH9ZjsdJaeelhA8i7JDWORdLQg3ipe74CPtFMjmERHjrDXfH8VRJz2O4zAg34b nF7k6FjBeXY8hXhR6TNfB/iuWCkY2b0/SzdYSv4SCr0wCh8hqGusxND6stCdcNYn RukqgfbYsgk7LtAjcxiG2BClyWuhxT+GozjbpZEw8CZFAobuYpLawvshbU5NonZ/ gUOOd74Nv+aNF7GsC9GZ9kj2lwnMvmjrd6t/80ZDmOfOd7BwTLvVAA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:37 2026 by rpki-client