This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer File: evZ3nmK0YSiH_m-NTpwONzH24Qg.cer (raw, json) Hash identifier: pcn7woNwsEWZp0Sp5IW9au4lyvgvblUQ2yfUd8NJsI8= Subject key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831EEB88BD3CEAC3CEF788706F1ED8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208236 IP: 45.150.152.0/22 IP: 2a0f:d600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1e:eb:88:bd:3c:ea:c3:ce:f7:88:70:6f:1e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0f:68:43:2a:83:78:3d:6d:54:b5:01:2e:59: 4e:2b:74:73:cb:4c:5d:a8:ad:26:a0:2a:3f:2b:05: 27:d6:8c:39:37:79:2b:e3:d4:d2:69:43:20:5e:0b: 15:54:f1:b2:17:aa:b8:6e:e9:31:3c:f2:7a:8c:7b: fc:61:12:ab:4f:f9:19:5d:fd:63:ac:20:9c:6d:56: 9c:fb:aa:98:60:c7:61:94:59:31:c6:34:62:07:24: 00:ba:47:d6:52:91:4c:f7:90:e6:95:1d:43:75:db: 48:3c:22:a2:f3:f7:b5:8d:5a:97:af:d2:cf:0a:95: 95:2d:91:b9:21:0a:92:6c:10:1b:a6:dd:b2:1f:e5: a8:76:18:c8:3d:c7:4d:84:34:96:59:85:e7:1d:75: ed:fe:e9:14:f1:41:ed:98:04:69:7b:dc:be:77:75: 23:d7:84:5a:c0:e5:c4:c9:1b:70:32:31:9c:67:25: d6:a1:ab:ba:e0:45:eb:3b:c9:c6:92:39:79:21:c3: b8:d4:f9:51:74:4b:30:c1:11:32:40:e4:41:d0:6b: d1:7c:c4:f9:45:72:24:cc:b2:37:b8:0a:52:85:ff: 1d:a0:f1:6d:81:53:81:fe:c8:88:e4:52:b2:e9:b7: b6:da:4b:07:65:d5:de:b4:6c:82:0a:b5:8b:2a:59: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.152.0/22 IPv6: 2a0f:d600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208236 Signature Algorithm: sha256WithRSAEncryption b1:61:57:37:7e:7e:86:45:75:99:00:26:20:4a:ae:5f:be:c1: d9:25:8f:14:fa:aa:5a:f3:93:12:73:95:6f:10:4c:23:9d:32: bf:a6:7b:cf:4e:9a:6a:31:d5:f4:98:29:09:ff:90:a0:e4:33: 90:9d:cd:0b:a2:a0:37:94:28:af:1d:76:d4:2f:d5:4c:0a:f3: 47:87:5d:df:09:64:b0:c3:f5:5e:4b:c8:b8:ba:be:3f:b7:e9: 10:7e:e0:8f:2f:48:a6:56:25:ca:75:d5:0e:18:9a:57:e2:14: a0:03:9a:54:8a:74:7e:d5:20:8c:ce:7d:51:f9:4b:18:9d:d7: ac:94:b8:33:c1:8c:43:af:47:08:8c:17:60:f8:96:29:a6:c8: f0:fc:ad:c3:8d:e0:c6:4d:99:40:65:55:9e:23:c8:60:aa:76: 3f:d7:50:88:e5:d9:7d:03:59:ae:e6:ee:e3:82:e8:48:78:3c: 37:a2:78:d9:04:8a:4b:00:2a:27:c9:ec:f4:66:8c:b5:80:e4: 47:d0:59:cd:59:af:93:19:b6:3b:a2:b7:4c:3d:f3:46:e2:37: 3c:05:a8:ae:42:80:e4:ac:b8:25:a0:69:f7:57:06:36:18:c5: 2c:3c:66:20:2f:fa:3d:b7:27:91:46:e8:5f:f6:e2:94:c0:12: 09:e7:04:e1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gx7riL086sPO94hwbx7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWY2Nzc5ZTYyYjQ2MTI4ODdmZTZmOGQ0ZTljMGUzNzMxZjZlMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g9oQyqDeD1tVLUBLllOK3Rzy0xd qK0moCo/KwUn1ow5N3kr49TSaUMgXgsVVPGyF6q4bukxPPJ6jHv8YRKrT/kZXf1j rCCcbVac+6qYYMdhlFkxxjRiByQAukfWUpFM95DmlR1DddtIPCKi8/e1jVqXr9LP CpWVLZG5IQqSbBAbpt2yH+WodhjIPcdNhDSWWYXnHXXt/ukU8UHtmARpe9y+d3Uj 14RawOXEyRtwMjGcZyXWoau64EXrO8nGkjl5IcO41PlRdEswwREyQORB0GvRfMT5 RXIkzLI3uApShf8doPFtgVOB/siI5FKy6be22ksHZdXetGyCCrWLKlmQTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHr2d55itGEoh/5vjU6cDjcx9uEIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzMwYjEy NC04N2YyLTRjN2EtYmMwZS03OTA3NzVjNzc5YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMzBiMTI0 LTg3ZjItNGM3YS1iYzBlLTc5MDc3NWM3NzljNS8xL2V2WjNubUswWVNpSF9tLU5U cHdPTnpIMjRRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZaYMA0EAgACMAcDBQMqD9YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtbDANBgkqhkiG9w0BAQsFAAOCAQEAsWFXN35+hkV1 mQAmIEquX77B2SWPFPqqWvOTEnOVbxBMI50yv6Z7z06aajHV9JgpCf+QoOQzkJ3N C6KgN5Qorx121C/VTArzR4dd3wlksMP1XkvIuLq+P7fpEH7gjy9IplYlynXVDhia V+IUoAOaVIp0ftUgjM59UflLGJ3XrJS4M8GMQ69HCIwXYPiWKabI8Pytw43gxk2Z QGVVniPIYKp2P9dQiOXZfQNZrubu44LoSHg8N6J42QSKSwAqJ8ns9GaMtYDkR9BZ zVmvkxm2O6K3TD3zRuI3PAWorkKA5Ky4JaBp91cGNhjFLDxmIC/6PbcnkUboX/bi lMASCecE4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:58 2026 by rpki-client