This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer File: zEaGqhpTLOSwws4IIxfiSU6BgaI.cer (raw, json) Hash identifier: lUO2lOXZnGqr7lNH/ZY7fjocq70KpX8PxWjO82X8aRw= Subject key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D2B543AD3BF77879B4481CF377E4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49614 AS: 213252 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2b:54:3a:d3:bf:77:87:9b:44:81:cf:37:7e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:fe:58:26:86:a3:76:da:35:bc:c0:44:85: e8:84:a5:de:2b:0e:6a:90:e5:65:11:e7:3f:58:31: f8:fb:87:f6:f1:72:d1:74:61:8a:2d:fe:fb:9f:b8: d6:01:12:42:5a:88:84:00:30:ae:aa:7c:da:4a:4b: 59:34:4c:89:96:db:47:62:bb:08:84:26:3d:84:e1: ba:70:5e:24:5a:4d:02:a8:47:0c:39:a0:61:bd:3d: 6a:ba:70:eb:8d:d9:eb:42:ef:f1:c0:30:80:4d:30: 7c:37:ef:fe:97:e5:96:a3:60:16:7a:32:02:58:16: 9b:af:1a:69:bd:1a:4e:4b:a8:f5:4a:0b:b2:65:93: 9c:b9:77:b4:bf:54:9b:36:d3:16:bf:5a:8f:a0:ef: fb:2c:96:67:e3:42:80:f5:c9:9c:72:9e:f2:bc:71: f2:0b:60:a9:ad:20:9a:ee:e3:11:3a:1d:87:73:49: e1:39:44:a3:6d:a2:2a:46:2f:d5:ff:87:09:f8:31: 51:94:07:40:49:13:b8:10:90:0b:19:b8:9b:1a:c9: 1d:c2:12:14:7d:d8:a4:a5:ea:9d:da:bf:5d:b3:11: 4d:22:7b:ec:b6:ec:37:d7:1b:e7:c4:b5:50:6b:9e: e3:02:ff:04:e7:c1:f8:25:62:63:13:45:0d:ba:43: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49614 213252 Signature Algorithm: sha256WithRSAEncryption 60:06:b9:14:7e:0a:fc:91:7b:46:5a:04:5d:3b:0c:ca:44:e5: f4:99:9c:de:5b:69:b9:53:80:d2:0f:f5:26:44:37:3d:dc:67: 02:61:c0:e5:85:64:55:ac:20:75:45:5d:95:8a:e9:7c:80:18: da:e5:cb:f0:79:5b:06:38:38:d7:1d:f1:c1:fa:c3:82:3c:00: 72:8d:d6:12:f2:1d:a7:24:c5:aa:f3:97:16:eb:5b:db:af:21: 61:54:b7:d3:87:49:ad:21:e9:56:f6:a4:c9:3f:4a:2f:da:36: 4e:18:cd:5f:35:df:6b:41:7a:74:43:ff:97:d7:4c:b5:5d:1c: eb:c9:55:65:df:95:ab:70:36:80:9a:5d:1a:a3:b0:eb:8c:0f: 99:aa:4d:07:37:af:a0:ad:03:27:ce:d4:d5:08:c0:b8:2c:27: 59:fd:aa:c1:19:c0:c6:2f:25:71:1c:e8:6a:95:75:59:d1:9d: 76:94:8a:3b:c8:84:18:01:c1:2c:c7:55:81:4b:8b:2a:33:17: 76:ee:d2:5c:4b:0c:aa:03:73:c6:c9:04:6b:69:3d:a0:4f:0f: cf:34:f3:b3:53:f3:3b:64:a7:81:18:50:87:78:17:8c:bc:be: ba:ff:e0:9b:ce:2b:a1:57:df:e7:44:c2:9d:25:5b:a7:0e:7e: a9:29:e1:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XStUOtO/d4ebRIHPN35KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQ2ODZhYTFhNTMyY2U0YjBjMmNlMDgyMzE3ZTI0OTRlODE4MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfv+WCaGo3baNbzARIXohKXeKw5q kOVlEec/WDH4+4f28XLRdGGKLf77n7jWARJCWoiEADCuqnzaSktZNEyJlttHYrsI hCY9hOG6cF4kWk0CqEcMOaBhvT1qunDrjdnrQu/xwDCATTB8N+/+l+WWo2AWejIC WBabrxppvRpOS6j1SguyZZOcuXe0v1SbNtMWv1qPoO/7LJZn40KA9cmccp7yvHHy C2CprSCa7uMROh2Hc0nhOUSjbaIqRi/V/4cJ+DFRlAdASRO4EJALGbibGskdwhIU fdikpeqd2r9dsxFNInvstuw31xvnxLVQa57jAv8E58H4JWJjE0UNukMGIwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMxGhqoaUyzksMLOCCMX4klOgYGiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzQ5M2Zk Yi1hMzg0LTQ3MGMtOWZmYy02MWMxNDNiMWMzYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNDkzZmRi LWEzODQtNDcwYy05ZmZjLTYxYzE0M2IxYzNhNC8xL3pFYUdxaHBUTE9Td3dzNElJ eGZpU1U2QmdhSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwDBzgIDA0EEMA0GCSqGSIb3DQEBCwUAA4IBAQBgBrkU fgr8kXtGWgRdOwzKROX0mZzeW2m5U4DSD/UmRDc93GcCYcDlhWRVrCB1RV2Viul8 gBja5cvweVsGODjXHfHB+sOCPAByjdYS8h2nJMWq85cW61vbryFhVLfTh0mtIelW 9qTJP0ov2jZOGM1fNd9rQXp0Q/+X10y1XRzryVVl35WrcDaAml0ao7DrjA+Zqk0H N6+grQMnztTVCMC4LCdZ/arBGcDGLyVxHOhqlXVZ0Z12lIo7yIQYAcEsx1WBS4sq Mxd27tJcSwyqA3PGyQRraT2gTw/PNPOzU/M7ZKeBGFCHeBeMvL66/+CbziuhV9/n RMKdJVunDn6pKeFW -----END CERTIFICATE-----Generated at Tue Jan 27 05:46:27 2026 by rpki-client