This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer File: evOlFiiU19GsKvgy16vPHb4RCuE.cer (raw, json) Hash identifier: PJ950PQkiNOzJsevrax9tDahQ/o/wzxQcMQs+SqKO6c= Subject key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B30A1D05F3CF04E5550F88B81E962 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214959 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:30:a1:d0:5f:3c:f0:4e:55:50:f8:8b:81:e9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:da:81:f5:03:60:67:83:58:9c:9f:2e:af: 55:32:d1:23:fc:d0:6e:fa:61:2c:17:d2:75:64:40: f2:00:a2:19:39:33:3e:09:2c:6d:25:3d:02:c3:f6: bf:41:79:34:a9:e1:c3:12:92:c8:15:42:cc:72:6b: e3:7d:5e:6b:3b:f1:da:e2:38:1c:cc:5d:de:bb:e7: 5f:49:e8:1c:a1:35:16:e1:42:ee:4a:80:68:98:8a: 37:c4:94:1e:ad:f1:77:4c:10:df:5d:f2:fa:07:da: f2:8c:8c:85:3b:22:53:a2:46:6e:84:fd:40:a4:32: f4:8e:56:90:09:e7:74:bc:8b:2a:cf:47:c9:b6:71: b9:de:d4:15:98:41:f8:53:44:21:e7:33:e6:b9:35: 19:02:63:7a:15:91:35:ff:21:98:56:2f:7b:80:10: de:99:94:94:5f:01:20:df:70:01:63:3c:a9:57:82: 11:db:e8:1d:f5:01:3c:60:52:e8:f0:10:2b:d8:67: 57:da:04:a0:c0:ea:42:50:30:96:bb:f9:55:7b:93: 34:b0:b3:62:db:cf:00:df:7c:c6:42:4e:44:59:8e: 38:3d:31:a8:63:db:40:fe:64:e9:0d:6f:a0:0a:77: cd:8b:9d:ef:5b:56:b6:3e:9d:f1:94:c3:62:4a:94: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214959 Signature Algorithm: sha256WithRSAEncryption 37:73:aa:b4:37:32:19:da:9e:5d:43:c3:df:c3:6f:a6:75:9b: 79:8f:6e:f3:a7:32:42:c9:9f:fc:58:11:17:cf:80:3d:ac:64: ab:f0:1a:83:59:8f:77:80:e1:44:89:87:e5:9d:ed:10:18:a3: b1:f2:7f:0c:cb:ab:77:b2:6a:50:02:af:c1:e5:9f:1d:32:c6: 91:f9:28:32:d6:16:e2:ce:75:f3:af:f0:26:59:74:7e:1b:56: 19:c0:0b:6a:89:31:eb:ee:68:92:f3:2a:01:a8:98:f9:5c:4e: 9e:48:dc:c4:be:2e:a0:c3:13:28:c7:a0:06:bb:ca:d0:4d:57: 54:3c:12:68:05:31:d9:2e:b7:b9:76:16:a4:16:36:35:41:9f: 34:2c:ef:68:c3:19:10:a7:1a:81:39:88:a8:ae:9c:3e:ea:07: ea:5c:ae:de:4b:6b:12:45:41:07:f9:4f:ab:a0:a3:bd:e7:f2: 48:4b:c0:73:48:d0:8a:40:2d:6b:e4:47:02:c1:6b:f4:0c:0f: 88:6f:2b:29:04:f7:e3:ee:ad:65:f2:55:58:6d:69:1e:3a:27: 9a:39:ca:68:35:63:80:ca:d4:90:ff:e2:90:a9:e9:5a:dc:ad: fb:69:8a:9a:72:17:29:01:6d:21:80:dc:28:74:ab:4f:af:37: a1:fd:cf:6e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6WzCh0F888E5VUPiLgeliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWYzYTUxNjI4OTRkN2QxYWMyYWY4MzJkN2FiY2YxZGJlMTEwYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AjagfUDYGeDWJyfLq9VMtEj/NBu +mEsF9J1ZEDyAKIZOTM+CSxtJT0Cw/a/QXk0qeHDEpLIFULMcmvjfV5rO/Ha4jgc zF3eu+dfSegcoTUW4ULuSoBomIo3xJQerfF3TBDfXfL6B9ryjIyFOyJTokZuhP1A pDL0jlaQCed0vIsqz0fJtnG53tQVmEH4U0Qh5zPmuTUZAmN6FZE1/yGYVi97gBDe mZSUXwEg33ABYzypV4IR2+gd9QE8YFLo8BAr2GdX2gSgwOpCUDCWu/lVe5M0sLNi 288A33zGQk5EWY44PTGoY9tA/mTpDW+gCnfNi53vW1a2Pp3xlMNiSpQZYQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHrzpRYolNfRrCr4Mterzx2+EQrhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzVjZjU3 ZC01N2ZhLTRmNzEtYmY5Mi03NWQ1NGIxMDMwOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNWNmNTdk LTU3ZmEtNGY3MS1iZjkyLTc1ZDU0YjEwMzA5Yy8xL2V2T2xGaWlVMTlHc0t2Z3kx NnZQSGI0UkN1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHrzANBgkqhkiG9w0BAQsFAAOCAQEAN3OqtDcyGdqe XUPD38NvpnWbeY9u86cyQsmf/FgRF8+APaxkq/Aag1mPd4DhRImH5Z3tEBijsfJ/ DMurd7JqUAKvweWfHTLGkfkoMtYW4s5186/wJll0fhtWGcALaokx6+5okvMqAaiY +VxOnkjcxL4uoMMTKMegBrvK0E1XVDwSaAUx2S63uXYWpBY2NUGfNCzvaMMZEKca gTmIqK6cPuoH6lyu3ktrEkVBB/lPq6CjvefySEvAc0jQikAta+RHAsFr9AwPiG8r KQT34+6tZfJVWG1pHjonmjnKaDVjgMrUkP/ikKnpWtyt+2mKmnIXKQFtIYDcKHSr T683of3Pbg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:53 2026 by rpki-client