This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer (raw, json) Hash identifier: 3iBFv17HHn0+vhBo1WPXzSWU4za3tF2/BenKEkStdAs= Subject key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEB4879FBA9C858523B238240D550 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50136 IP: 185.79.88.0/22 IP: 2a05:7000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:eb:48:79:fb:a9:c8:58:52:3b:23:82:40:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b243b732e564690482cc825199f8b591b01f6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:63:f4:39:e4:12:43:54:e1:e3:11:c0:17: 16:c1:e5:64:35:65:ae:e2:a4:db:51:bf:39:0a:b5: 8e:f6:22:2f:00:fa:a3:5a:27:48:58:32:ed:db:01: 75:da:22:9c:5a:90:bc:6e:63:8c:fc:c1:bf:8d:a0: 85:6b:48:1e:5d:99:d7:2c:96:1d:e7:54:a9:eb:b4: e8:2f:23:4a:7d:28:7c:10:72:7b:63:b0:5d:6f:ce: 40:c2:2b:71:51:b0:07:7d:b0:33:b0:cd:83:e6:39: e6:ab:1d:e6:3a:f7:70:91:21:40:21:48:7f:89:95: 99:fd:ed:2f:b5:5b:44:f0:af:60:8e:b5:10:3a:a7: 54:58:77:73:89:a1:18:90:5c:92:a2:f4:ae:c9:1c: 0b:79:7b:23:15:36:2c:29:cb:39:32:a5:d1:3f:b3: 5e:4d:fc:14:aa:6c:46:39:22:b3:0b:e9:31:e4:53: 37:e0:1f:a5:9d:57:09:2c:00:74:e0:ed:e9:3e:18: 98:25:09:c5:f9:6a:30:05:2e:cf:07:3a:09:20:23: fd:8b:33:9c:3a:0e:c0:87:ea:5c:5f:ad:62:b2:d0: 33:c2:0f:7a:78:4d:90:3f:cb:57:6b:0a:62:44:bb: 13:59:51:b5:50:25:90:f9:b0:08:bf:27:86:4c:f5: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.88.0/22 IPv6: 2a05:7000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50136 Signature Algorithm: sha256WithRSAEncryption 19:aa:70:49:ab:d5:8e:9f:c1:81:3d:4c:f2:1d:a6:24:4d:dc: 80:c5:ca:91:0b:0b:a9:c8:03:21:ce:54:cc:08:98:9d:cd:fa: 68:f7:08:89:db:ed:23:29:6c:42:ca:2c:14:86:df:33:f0:22: 20:55:9b:c4:ee:a6:a5:9a:55:7f:52:85:29:b8:27:eb:c9:09: a8:af:1a:b2:53:0a:39:62:43:24:69:a7:3e:6c:f8:b3:6f:f3: f9:71:42:d5:59:25:ec:3d:0f:cc:d9:45:27:8c:9d:d6:48:f6: 0d:db:b2:d2:93:16:6d:b3:2c:55:1d:46:db:73:f6:9d:2f:95: ad:78:1f:d8:36:75:70:12:1a:a1:bd:33:6d:12:64:a3:cf:24: 06:bc:c2:53:77:a5:5e:e0:51:73:c1:f6:12:c9:6c:db:9e:df: 7f:36:e6:9a:62:a2:0f:c4:ef:41:18:5b:d4:0d:63:db:a9:11: 88:de:37:7e:4a:7f:ab:12:53:2a:d6:db:22:35:2c:41:64:96: dd:f2:fa:40:3e:a0:bd:d7:e7:97:f1:0d:37:3d:52:fb:96:c1: 1b:14:1e:c4:68:53:a5:b0:d2:4e:01:43:8d:28:72:72:49:62: d3:f4:56:eb:d7:f3:31:95:ad:09:34:a2:7b:08:08:e3:2a:79: cf:93:39:ae -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WutIefupyFhSOyOCQNVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjI0M2I3MzJlNTY0NjkwNDgyY2M4MjUxOTlmOGI1OTFiMDFmNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCtj9DnkEkNU4eMRwBcWweVkNWWu 4qTbUb85CrWO9iIvAPqjWidIWDLt2wF12iKcWpC8bmOM/MG/jaCFa0geXZnXLJYd 51Sp67ToLyNKfSh8EHJ7Y7Bdb85AwitxUbAHfbAzsM2D5jnmqx3mOvdwkSFAIUh/ iZWZ/e0vtVtE8K9gjrUQOqdUWHdziaEYkFySovSuyRwLeXsjFTYsKcs5MqXRP7Ne TfwUqmxGOSKzC+kx5FM34B+lnVcJLAB04O3pPhiYJQnF+WowBS7PBzoJICP9izOc Og7Ah+pcX61istAzwg96eE2QP8tXawpiRLsTWVG1UCWQ+bAIvyeGTPV2twIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHskO3MuVkaQSCzIJRmfi1kbAfbyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzViMmQy Yy1hNzhjLTRjNDctOTc4NS0zYjlhMjgyZTc2M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNWIyZDJj LWE3OGMtNGM0Ny05Nzg1LTNiOWEyODJlNzYzZS8xL2V5UTdjeTVXUnBCSUxNZ2xH Wi1MV1JzQjl2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU9YMA0EAgACMAcDBQMqBXAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDD2DANBgkqhkiG9w0BAQsFAAOCAQEAGapwSavVjp/B gT1M8h2mJE3cgMXKkQsLqcgDIc5UzAiYnc36aPcIidvtIylsQsosFIbfM/AiIFWb xO6mpZpVf1KFKbgn68kJqK8aslMKOWJDJGmnPmz4s2/z+XFC1Vkl7D0PzNlFJ4yd 1kj2Dduy0pMWbbMsVR1G23P2nS+VrXgf2DZ1cBIaob0zbRJko88kBrzCU3elXuBR c8H2Esls257ffzbmmmKiD8TvQRhb1A1j26kRiN43fkp/qxJTKtbbIjUsQWSW3fL6 QD6gvdfnl/ENNz1S+5bBGxQexGhTpbDSTgFDjShyckli0/RW69fzMZWtCTSiewgI 4yp5z5M5rg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:50 2026 by rpki-client