This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer File: u-Eo3LaBD_3FArowR81BkTLaInQ.cer (raw, json) Hash identifier: EJJSq4y/xRL5HiQgDfrxtfXkOVMJEHJkkwRtCf2mVmA= Subject key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6AE1ACB9FDD94454D7E399525D92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25460 IP: 5.61.120.0/21 IP: 45.154.208.0/22 IP: 185.91.124.0/24 IP: 185.118.28.0/22 IP: 2a01:5ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6a:e1:ac:b9:fd:d9:44:54:d7:e3:99:52:5d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:58:03:fb:6a:6e:70:da:f8:6b:ab:8c:57:49: af:6e:b3:2b:7e:b0:df:37:49:69:6e:e7:ee:68:5e: d2:a5:e1:69:ca:f0:de:2e:9f:7a:b7:b8:65:fb:9a: f3:ad:7b:fd:ad:17:dd:c1:8d:1c:ec:35:c6:16:80: 23:c8:d5:67:9d:b2:6b:f6:39:7d:2c:57:5e:5f:e0: 33:9b:56:d6:da:1c:fb:51:e4:96:4f:36:be:2c:20: 0c:13:54:13:33:06:40:9a:27:39:c0:27:94:7a:6c: b0:2b:56:e4:4c:ca:e9:1a:09:2b:46:85:10:be:51: 89:59:64:6c:85:68:d2:df:2d:4c:17:02:e0:6a:cb: da:6b:b7:a6:55:5d:e8:6d:12:12:1c:b8:e0:d1:1e: 36:b8:84:a6:bd:ce:a3:33:5e:fb:84:b9:a7:ad:09: f1:8e:b6:f0:b2:c8:e3:6d:b4:9a:08:81:64:52:ce: 11:9d:f7:b1:5b:ce:da:3d:4d:2c:de:ea:3c:3d:c0: 2b:6a:6e:d4:4f:2d:5f:0c:b8:33:68:c0:ec:fb:9c: 8b:c0:77:9e:ae:b2:72:1c:3b:8f:4a:25:f4:73:b7: 68:1f:17:b5:9d:ca:29:be:5b:b8:5b:33:29:1a:df: 5b:e9:2b:46:65:57:67:e2:f9:4e:dd:6d:f6:18:30: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.120.0/21 45.154.208.0/22 185.91.124.0/24 185.118.28.0/22 IPv6: 2a01:5ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25460 Signature Algorithm: sha256WithRSAEncryption 9b:e3:54:70:a6:b9:8a:18:9f:f8:7c:11:12:f9:86:9d:c5:1c: 01:ef:20:2e:a1:e0:2a:43:e8:4c:ea:ab:15:cf:3d:43:9b:d5: c0:a0:fc:8b:c3:91:20:b5:dc:51:02:69:e2:4b:07:b5:f7:3c: 65:5c:de:64:a3:cb:b1:4c:84:84:00:01:52:cb:d8:91:0e:de: af:92:3a:5e:84:9e:24:4c:42:e7:72:7b:1c:a8:ad:16:bd:8d: ad:04:a8:d4:6a:fb:eb:e4:13:47:6c:e3:a5:f3:ac:4b:68:57: 8e:1c:00:0e:5f:fc:3c:87:66:6d:d9:c9:a5:71:2b:43:59:a4: ba:7f:a6:7c:88:fc:f4:57:bc:77:f9:d2:10:72:1d:6d:77:5b: 84:63:5b:65:f6:68:26:f8:a8:1c:15:50:be:2a:90:11:63:78: 91:79:24:2d:5d:23:c0:d4:56:6d:33:ec:60:a8:0c:2c:95:2c: a1:ee:bb:6d:3f:73:f7:10:b4:ca:90:3a:4b:4a:47:b5:9b:0d: 1a:88:09:a0:1d:3a:d8:0e:26:52:c2:5f:69:4e:10:28:f0:bd: f7:d6:ac:5b:34:c2:50:a8:21:0f:79:8a:82:22:7e:14:63:88: c3:04:9a:56:77:42:52:04:e3:5b:e0:dd:40:7e:f3:34:f0:a7: 54:bb:af:9b -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt6WmrhrLn92URU1+OZUl2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmUxMjhkY2I2ODEwZmZkYzUwMmJhMzA0N2NkNDE5MTMyZGEyMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51gD+2pucNr4a6uMV0mvbrMrfrDf N0lpbufuaF7SpeFpyvDeLp96t7hl+5rzrXv9rRfdwY0c7DXGFoAjyNVnnbJr9jl9 LFdeX+Azm1bW2hz7UeSWTza+LCAME1QTMwZAmic5wCeUemywK1bkTMrpGgkrRoUQ vlGJWWRshWjS3y1MFwLgasvaa7emVV3obRISHLjg0R42uISmvc6jM177hLmnrQnx jrbwssjjbbSaCIFkUs4RnfexW87aPU0s3uo8PcAram7UTy1fDLgzaMDs+5yLwHee rrJyHDuPSiX0c7doHxe1ncopvlu4WzMpGt9b6StGZVdn4vlO3W32GDCEGwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2MwNzFh OC01NGFhLTRhYmQtODEyNy1lZGY3YmI2NTNmMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYzA3MWE4 LTU0YWEtNGFiZC04MTI3LWVkZjdiYjY1M2YxMy8xL3UtRW8zTGFCRF8zRkFyb3dS ODFCa1RMYUluUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBT14AwQCLZrQAwQAuVt8AwQCuXYcMA0EAgAC MAcDBQAqAVrAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmN0MA0GCSqGSIb3DQEB CwUAA4IBAQCb41RwprmKGJ/4fBES+YadxRwB7yAuoeAqQ+hM6qsVzz1Dm9XAoPyL w5EgtdxRAmniSwe19zxlXN5ko8uxTISEAAFSy9iRDt6vkjpehJ4kTELncnscqK0W vY2tBKjUavvr5BNHbOOl86xLaFeOHAAOX/w8h2Zt2cmlcStDWaS6f6Z8iPz0V7x3 +dIQch1td1uEY1tl9mgm+KgcFVC+KpARY3iReSQtXSPA1FZtM+xgqAwslSyh7rtt P3P3ELTKkDpLSke1mw0aiAmgHTrYDiZSwl9pThAo8L331qxbNMJQqCEPeYqCIn4U Y4jDBJpWd0JSBONb4N1AfvM08KdUu6+b -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:31 2026 by rpki-client