This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer File: ezF1mINz5Wtv_gsVofx11Gk64sA.cer (raw, json) Hash identifier: 3US5Okl/MsgqwV7b8/QD77JNYiVyC5JGY9lL2uiDIqw= Subject key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592EF6A833E36C8A63BAE3602CC8C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47544 IP: 46.248.160.0/19 IP: 86.111.240.0/21 IP: 185.110.48.0/22 IP: 193.106.104.0/22 IP: 2a01:7400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2e:f6:a8:33:e3:6c:8a:63:ba:e3:60:2c:c8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:bf:fe:46:ef:f5:7b:9d:3c:be:09:12:7b: f5:c9:07:d1:43:f8:a2:9d:11:5e:71:f6:a4:2e:89: 17:96:df:05:32:70:ba:9e:0d:f2:3e:64:52:f2:7f: f2:63:c3:fa:15:aa:18:0a:ed:0f:d8:28:a9:c8:11: 64:15:58:de:b8:eb:c7:a6:ac:f9:0d:53:39:ea:07: e0:32:3e:fa:55:41:35:2d:46:1f:31:27:48:67:ae: 23:d7:1f:3a:55:75:3d:46:fe:f7:68:e4:74:1a:3e: 5a:4e:9e:31:e2:bf:26:74:95:f8:52:41:f9:34:29: 3f:ba:de:ec:af:16:0d:50:ec:8c:26:2d:df:21:a0: ec:5c:9c:11:68:3c:74:ac:ce:a6:6c:44:43:10:35: c1:57:e8:b1:bb:f1:26:69:e9:2a:86:4f:18:89:ec: fd:75:45:57:b7:61:b1:85:4e:d9:cd:6e:8d:84:ac: 87:94:32:e8:cc:f7:b4:32:4c:4a:c8:a8:2c:30:47: 43:5d:92:83:bc:b4:53:cb:95:81:60:93:69:bd:ca: c6:f2:8b:cc:e4:a4:0c:7e:55:cc:0e:75:18:79:07: a1:9d:6b:f4:75:16:36:b8:19:80:77:d9:0c:4c:a2: c6:af:30:23:72:39:5e:cd:0c:5d:1f:98:44:58:90: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.160.0/19 86.111.240.0/21 185.110.48.0/22 193.106.104.0/22 IPv6: 2a01:7400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47544 Signature Algorithm: sha256WithRSAEncryption 83:8c:f4:e0:87:32:5e:c0:f1:75:9f:3a:a8:3d:5a:6f:09:3b: 0b:5c:4f:e1:74:43:35:dd:c2:75:de:eb:63:58:6f:76:fe:39: aa:3b:e8:dc:b9:ef:e9:98:61:9a:93:6b:ca:c9:2f:5c:ce:22: a6:d6:1d:1c:85:e6:f5:03:33:1d:ec:c8:b1:ff:4c:2d:ca:23: f2:39:ad:fd:dd:07:f3:21:98:7d:59:c0:af:1e:0c:72:a9:af: 9c:f3:ec:c0:49:5e:ba:df:90:5a:61:e2:ba:9b:5e:35:02:30: d4:36:48:9c:d1:49:ae:7f:ed:b4:37:20:84:fa:7e:1e:e4:c2: f6:da:da:4e:53:b6:9c:eb:22:0d:fc:16:41:67:b9:ea:0d:99: a7:6a:04:8d:8e:94:b2:f7:c8:c3:f8:0a:a0:b9:ae:c5:34:58: 89:76:21:60:f9:7b:57:7f:91:f9:02:e6:41:c9:02:e0:cd:3f: 7d:41:92:57:80:c7:62:d8:03:25:85:ca:dc:3f:29:40:26:52: b3:1e:a9:ae:87:63:5f:bb:49:e8:4e:e0:df:0f:bf:1e:3d:67: 97:b7:60:94:45:82:ab:5d:07:8b:22:6b:cc:40:c0:8f:9b:38: 10:c9:6b:ac:69:d9:08:10:c1:a7:85:e5:17:33:dc:2c:fd:64: 9a:04:da:5c -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3WS72qDPjbIpjuuNgLMjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjMxNzU5ODgzNzNlNTZiNmZmZTBiMTVhMWZjNzVkNDY5M2FlMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBW//kbv9XudPL4JEnv1yQfRQ/ii nRFecfakLokXlt8FMnC6ng3yPmRS8n/yY8P6FaoYCu0P2CipyBFkFVjeuOvHpqz5 DVM56gfgMj76VUE1LUYfMSdIZ64j1x86VXU9Rv73aOR0Gj5aTp4x4r8mdJX4UkH5 NCk/ut7srxYNUOyMJi3fIaDsXJwRaDx0rM6mbERDEDXBV+ixu/Emaekqhk8Yiez9 dUVXt2GxhU7ZzW6NhKyHlDLozPe0MkxKyKgsMEdDXZKDvLRTy5WBYJNpvcrG8ovM 5KQMflXMDnUYeQehnWv0dRY2uBmAd9kMTKLGrzAjcjlezQxdH5hEWJDHrQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzg1MDEz NC1iYjIxLTRiYWQtOWVlYS1kZmQ1MWIwNmRkOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvODUwMTM0 LWJiMjEtNGJhZC05ZWVhLWRmZDUxYjA2ZGQ5OS8xL2V6RjFtSU56NVd0dl9nc1Zv ZngxMUdrNjRzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFLvigAwQDVm/wAwQCuW4wAwQCwWpoMA0EAgAC MAcDBQAqAXQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5uDANBgkqhkiG9w0B AQsFAAOCAQEAg4z04IcyXsDxdZ86qD1abwk7C1xP4XRDNd3Cdd7rY1hvdv45qjvo 3Lnv6ZhhmpNryskvXM4iptYdHIXm9QMzHezIsf9MLcoj8jmt/d0H8yGYfVnArx4M cqmvnPPswEleut+QWmHiupteNQIw1DZInNFJrn/ttDcghPp+HuTC9traTlO2nOsi DfwWQWe56g2Zp2oEjY6UsvfIw/gKoLmuxTRYiXYhYPl7V3+R+QLmQckC4M0/fUGS V4DHYtgDJYXK3D8pQCZSsx6prodjX7tJ6E7g3w+/Hj1nl7dglEWCq10HiyJrzEDA j5s4EMlrrGnZCBDBp4XlFzPcLP1kmgTaXA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:41 2026 by rpki-client