This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer File: EHMSpQFqPNzAt-Ydx59V09Xss34.cer (raw, json) Hash identifier: E4MZNJEQr2/T6+QmqlA2VyhsSiQZAp0wr81kR4dzOgw= Subject key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF28667A5868B9D8C855164D379A26E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209576 IP: 91.132.64.0/22 IP: 2a09:1540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:86:67:a5:86:8b:9d:8c:85:51:64:d3:79:a2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a0:c1:6a:57:7c:da:77:a5:7a:93:47:f0:db: ba:75:82:09:b2:7f:ca:73:ec:08:40:85:00:3c:64: 2d:5c:8c:51:66:43:8d:c6:fd:10:20:65:f2:fb:f6: 03:73:d5:4a:c8:db:6b:a3:91:f7:50:a5:ca:dc:d4: 2f:3b:6e:c6:29:50:c7:f0:a6:64:7f:e7:13:d5:0e: 4c:93:4b:f4:44:df:92:9e:28:cd:37:7c:2e:27:49: f3:d7:5c:1f:ac:9e:cb:52:17:13:6b:fb:71:35:50: 27:1f:15:79:61:71:15:71:12:70:f2:81:55:86:b5: 32:25:9b:d8:ef:a1:98:99:47:4a:44:8b:2b:fe:e2: 74:74:c4:64:bc:56:2a:78:62:ff:d9:91:a9:1b:60: 35:45:fb:c7:62:c9:42:b3:ea:60:5b:49:78:73:bb: 0a:d8:2d:ac:fa:ec:3d:1a:aa:74:1e:57:47:26:ae: 28:6d:1e:b5:f8:21:b4:e2:04:13:4c:d0:ee:82:59: 92:9d:57:a4:49:67:36:e1:a9:e6:bf:64:fb:d5:86: 0b:a9:73:77:c7:0b:0a:9c:17:01:f0:b0:ce:e5:51: 14:3a:e3:ac:09:ad:bb:6d:ee:74:e0:17:2a:93:7d: de:77:73:1b:05:31:42:ac:45:bc:58:25:82:fa:56: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.64.0/22 IPv6: 2a09:1540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209576 Signature Algorithm: sha256WithRSAEncryption 12:7c:4b:07:c0:30:08:6e:ac:21:22:c2:4e:c6:4e:88:6b:0e: 79:39:70:24:e1:63:f4:f6:ae:99:21:cf:82:57:e6:0b:d7:a7: 2f:23:a5:4d:39:a6:9b:0c:11:3f:f5:d4:b2:fd:de:22:19:33: 33:57:a5:61:1b:f8:15:aa:5b:aa:53:2f:79:f9:c9:02:17:1b: cb:41:86:06:8d:e4:11:2d:9b:10:81:8d:33:5d:2a:a4:55:4f: 4a:83:c4:90:2e:92:09:6e:23:2e:6e:b0:bf:6f:25:31:e8:43: f5:4f:ca:7f:f6:64:1e:06:42:3b:06:4e:a6:52:98:3c:50:ae: ff:db:87:ac:14:ef:2c:6a:fc:c6:06:21:f1:99:4d:c1:c6:00: db:23:03:26:c6:ab:67:d8:fa:6c:2b:34:3a:f7:5c:f3:33:cf: 25:10:07:18:6a:e2:b8:46:7c:35:25:e6:9d:66:0b:d9:70:1f: 3a:42:01:3a:6c:fa:ae:b7:cb:0c:f5:12:4f:b1:4a:89:71:38: 90:dc:83:20:6c:b6:83:78:57:e2:88:3e:9b:1f:60:7f:55:18: cf:a1:6e:fe:1b:66:8d:5b:af:5b:43:9b:0d:0c:24:a5:38:cb: a5:7b:71:24:64:7f:47:f9:29:41:be:cb:24:b9:13:77:40:85: de:86:a9:e0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8oZnpYaLnYyFUWTTeaJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDczMTJhNTAxNmEzY2RjYzBiN2U2MWRjNzlmNTVkM2Q1ZWNiMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46DBald82nelepNH8Nu6dYIJsn/K c+wIQIUAPGQtXIxRZkONxv0QIGXy+/YDc9VKyNtro5H3UKXK3NQvO27GKVDH8KZk f+cT1Q5Mk0v0RN+SnijNN3wuJ0nz11wfrJ7LUhcTa/txNVAnHxV5YXEVcRJw8oFV hrUyJZvY76GYmUdKRIsr/uJ0dMRkvFYqeGL/2ZGpG2A1RfvHYslCs+pgW0l4c7sK 2C2s+uw9Gqp0HldHJq4obR61+CG04gQTTNDuglmSnVekSWc24anmv2T71YYLqXN3 xwsKnBcB8LDO5VEUOuOsCa27be504Bcqk33ed3MbBTFCrEW8WCWC+lbL0QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBBzEqUBajzcwLfmHcefVdPV7LN+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzk5ZjVj My02Yjc1LTQ4YmMtYThhYS0zZmRiYTk3NjkzMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvOTlmNWMz LTZiNzUtNDhiYy1hOGFhLTNmZGJhOTc2OTMwMi8xL0VITVNwUUZxUE56QXQtWWR4 NTlWMDlYc3MzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW4RAMA0EAgACMAcDBQAqCRVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyqDANBgkqhkiG9w0BAQsFAAOCAQEAEnxLB8AwCG6s ISLCTsZOiGsOeTlwJOFj9PaumSHPglfmC9enLyOlTTmmmwwRP/XUsv3eIhkzM1el YRv4FapbqlMvefnJAhcby0GGBo3kES2bEIGNM10qpFVPSoPEkC6SCW4jLm6wv28l MehD9U/Kf/ZkHgZCOwZOplKYPFCu/9uHrBTvLGr8xgYh8ZlNwcYA2yMDJsarZ9j6 bCs0Ovdc8zPPJRAHGGriuEZ8NSXmnWYL2XAfOkIBOmz6rrfLDPUST7FKiXE4kNyD IGy2g3hX4og+mx9gf1UYz6Fu/htmjVuvW0ObDQwkpTjLpXtxJGR/R/kpQb7LJLkT d0CF3oap4A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:41 2026 by rpki-client