This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer File: evoTWyBy38xO87VBwTa8gAHvQwc.cer (raw, json) Hash identifier: NW2Z9a8ZhkToTF1qsFIiYVmFcg4zm0GfOOt1Shs/ONQ= Subject key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367E5EBDCA5A489681ABBC820F4C0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58193 IP: 178.251.124.0/22 IP: 185.154.84.0/22 IP: 194.48.100.0/22 IP: 2a02:fae0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7e:5e:bd:ca:5a:48:96:81:ab:bc:82:0f:4c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:5b:3f:dc:3f:d9:ac:37:cd:5d:02:bf:a7: 99:a5:bc:d6:b6:91:27:ad:bf:16:d2:bc:2b:a3:19: 65:fa:d7:76:78:bf:f8:8f:e8:45:05:93:18:66:2a: f5:17:d1:0d:33:c0:55:cc:ec:6c:10:cc:9f:c9:3e: 6e:4d:d3:ac:e4:10:4b:ce:39:39:04:97:d5:db:d9: 69:e1:64:c6:55:45:3f:08:05:23:d4:d3:75:44:94: 90:61:ae:ec:34:ca:ba:f8:fc:1b:2a:6b:02:93:79: f4:0d:c9:4b:89:d6:62:fb:3a:ba:a9:05:ca:02:bf: fe:5c:b7:66:20:36:3e:e9:b0:e4:60:15:25:1d:a9: 85:73:b9:80:c8:23:c0:3e:90:14:97:89:36:9e:64: 9e:17:c6:cb:80:5b:9d:d9:f3:ec:31:76:3e:33:e5: 03:20:97:ca:63:df:42:ed:36:31:00:8a:0b:b8:c4: 51:26:88:b4:e7:3f:ac:65:4a:85:56:7a:78:6f:43: 32:27:7b:fc:77:b7:91:7a:7a:39:a2:24:13:40:cc: 59:ee:09:aa:22:ac:79:61:83:b0:1d:c6:47:0d:13: ee:63:6c:e3:96:3f:83:24:33:0a:7b:9c:e2:7e:17: 5b:32:72:47:aa:55:6e:f6:18:f1:c5:91:0b:7c:fd: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.124.0/22 185.154.84.0/22 194.48.100.0/22 IPv6: 2a02:fae0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58193 Signature Algorithm: sha256WithRSAEncryption 62:76:b9:ec:89:f3:84:45:18:a7:82:c8:6c:a1:bd:f4:3b:d7: 00:35:26:27:dd:68:f9:6f:b0:b6:03:d4:3f:e1:9b:a6:0d:e1: 34:3e:59:bc:38:16:9f:db:1c:92:0e:f3:da:e1:34:1d:31:f3: cc:dd:11:22:74:d2:c8:5a:dd:52:5c:4f:52:84:01:bf:55:7e: 60:d8:24:be:35:f3:a7:64:db:5c:6b:a7:95:d5:59:ce:e8:42: a7:00:f2:27:b3:11:70:1a:64:d2:b5:9c:a4:f1:08:8e:45:57: 6b:a7:a8:3f:96:16:fa:d4:a5:c2:69:ce:17:ee:03:9f:b3:ce: e2:76:55:a5:af:dd:a7:17:9f:52:a4:58:cb:c4:9a:32:72:53: c4:de:c8:56:19:23:2c:9a:c4:1f:99:a2:09:c6:41:24:73:20: 8f:1d:4a:09:40:05:7f:14:76:08:99:cc:95:a8:89:36:59:c8: 60:f7:9f:62:1a:d5:1b:2b:0a:99:c8:fb:91:6a:d4:ac:ea:41: 77:df:09:40:da:1d:63:07:38:fe:9f:22:01:b9:1c:bb:2e:a0: c6:e9:d1:bb:1d:ca:8e:58:48:68:53:ee:0d:83:e8:8c:b5:92: 7c:15:dc:7a:fa:6e:05:b5:3f:a8:b7:82:38:26:5f:f3:bb:d1: 98:98:21:f2 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7Nn5evcpaSJaBq7yCD0wPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWZhMTM1YjIwNzJkZmNjNGVmM2I1NDFjMTM2YmM4MDAxZWY0MzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRdbP9w/2aw3zV0Cv6eZpbzWtpEn rb8W0rwroxll+td2eL/4j+hFBZMYZir1F9ENM8BVzOxsEMyfyT5uTdOs5BBLzjk5 BJfV29lp4WTGVUU/CAUj1NN1RJSQYa7sNMq6+PwbKmsCk3n0DclLidZi+zq6qQXK Ar/+XLdmIDY+6bDkYBUlHamFc7mAyCPAPpAUl4k2nmSeF8bLgFud2fPsMXY+M+UD IJfKY99C7TYxAIoLuMRRJoi05z+sZUqFVnp4b0MyJ3v8d7eReno5oiQTQMxZ7gmq Iqx5YYOwHcZHDRPuY2zjlj+DJDMKe5zifhdbMnJHqlVu9hjxxZELfP2+DQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHr6E1sgct/MTvO1QcE2vIAB70MHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2IxNDE5 My1mNTY5LTQzNGEtYWVhNC1mNWRlYWE5YmYwZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvYjE0MTkz LWY1NjktNDM0YS1hZWE0LWY1ZGVhYTliZjBmNy8xL2V2b1RXeUJ5Mzh4Tzg3VkJ3 VGE4Z0FIdlF3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCsvt8AwQCuZpUAwQCwjBkMA0EAgACMAcDBQMq AvrgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDjUTANBgkqhkiG9w0BAQsFAAOC AQEAYna57InzhEUYp4LIbKG99DvXADUmJ91o+W+wtgPUP+Gbpg3hND5ZvDgWn9sc kg7z2uE0HTHzzN0RInTSyFrdUlxPUoQBv1V+YNgkvjXzp2TbXGunldVZzuhCpwDy J7MRcBpk0rWcpPEIjkVXa6eoP5YW+tSlwmnOF+4Dn7PO4nZVpa/dpxefUqRYy8Sa MnJTxN7IVhkjLJrEH5miCcZBJHMgjx1KCUAFfxR2CJnMlaiJNlnIYPefYhrVGysK mcj7kWrUrOpBd98JQNodYwc4/p8iAbkcuy6gxunRux3KjlhIaFPuDYPojLWSfBXc evpuBbU/qLeCOCZf87vRmJgh8g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:51 2026 by rpki-client