This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer File: EHQA5PCchADaMYvWywP9XFSqqfE.cer (raw, json) Hash identifier: d6efPENy+//pNtjutMu1RNKNJJnMj4ehMVYHW/FMTBg= Subject key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EABEDF1933E4F83BD529235C012430 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207879 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:be:df:19:33:e4:f8:3b:d5:29:23:5c:01:24:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:7a:27:ac:76:0e:5e:8d:ef:9e:16:22:70: 62:71:24:e0:98:39:a8:95:b4:33:a7:cc:ef:76:0f: 58:1a:f2:ec:de:c7:6d:d4:0c:a1:a0:1c:5b:dd:21: 5f:68:84:8d:d6:3d:73:b6:64:7d:6d:a9:23:d6:53: e4:08:dc:f2:c4:c2:6d:64:9c:ba:bc:a3:d4:67:a5: 58:67:19:15:f8:37:6d:b8:ba:93:cd:e1:7d:6f:fc: d8:f3:ce:80:ee:31:20:d7:4b:7a:7c:f6:09:30:58: 37:35:c3:85:28:42:f5:78:3f:79:48:36:5a:65:6d: b9:95:97:42:77:97:8a:68:66:60:5d:b6:3c:ad:d0: 95:7c:0c:f5:80:20:b8:8c:df:6d:d4:da:ad:87:09: 8c:19:30:2e:68:2c:40:57:62:cd:44:43:9d:1f:18: 70:73:ac:ae:18:59:26:9a:09:7b:f3:33:62:46:79: 13:cd:cc:62:43:92:77:8c:97:1c:17:ed:eb:67:7a: a8:c4:0e:7f:3f:0b:be:cc:eb:14:8f:b3:69:f6:8b: 9f:0d:81:ec:30:7d:7d:34:77:f9:a1:0b:c3:d4:b5: 43:7e:07:d9:dd:97:93:ca:8e:88:6c:16:c4:9a:2a: 17:20:ac:d7:f3:d5:68:c4:30:98:73:34:6a:12:26: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207879 Signature Algorithm: sha256WithRSAEncryption 6e:e1:91:81:be:9f:e9:9c:4b:93:2b:22:04:80:2e:af:86:ab: 66:24:b9:c6:2e:29:f6:a5:e3:9e:66:3e:24:60:bc:6f:e4:cb: 2b:c4:ae:8a:2a:19:89:29:19:8c:a5:05:ed:42:01:a7:df:63: c7:cf:6c:c6:3d:fa:43:21:b7:47:7a:0d:57:76:6b:71:7c:51: b7:f1:30:6a:b4:01:dc:3b:76:e7:84:cb:d6:84:38:43:81:78: 0e:2f:72:30:be:11:8b:ee:a7:c2:37:cb:e4:ec:86:c1:aa:c4: e7:d9:f8:3e:24:5b:72:c9:4d:05:cf:bf:34:3c:ba:94:f1:23: 1e:5c:fd:71:7f:80:9f:f5:36:cd:07:3f:ee:16:d0:f6:9a:a1: 46:0a:cf:6e:82:e0:65:90:27:76:db:ec:09:ba:10:c8:73:25: 9b:52:8d:49:a3:f3:4f:4a:5f:ee:ab:ff:f2:88:b7:d0:c6:93: 3f:75:dd:2c:55:68:84:2a:79:16:dd:fb:0f:87:e5:42:a5:f9: 48:38:38:4c:6e:82:cf:c3:5c:98:fa:f4:2f:08:b0:32:85:d4: 3b:3c:1a:5d:ef:cc:f8:e2:ac:ed:2b:02:5e:7e:f6:b1:78:5c: b6:76:9a:76:44:7e:fb:10:94:04:7f:51:ff:0d:c0:d3:07:98: 54:9d:de:4a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26r7fGTPk+DvVKSNcASQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDc0MDBlNGYwOWM4NDAwZGEzMThiZDZjYjAzZmQ1YzU0YWFhOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a16J6x2Dl6N754WInBicSTgmDmo lbQzp8zvdg9YGvLs3sdt1AyhoBxb3SFfaISN1j1ztmR9bakj1lPkCNzyxMJtZJy6 vKPUZ6VYZxkV+DdtuLqTzeF9b/zY886A7jEg10t6fPYJMFg3NcOFKEL1eD95SDZa ZW25lZdCd5eKaGZgXbY8rdCVfAz1gCC4jN9t1NqthwmMGTAuaCxAV2LNREOdHxhw c6yuGFkmmgl78zNiRnkTzcxiQ5J3jJccF+3rZ3qoxA5/Pwu+zOsUj7Np9oufDYHs MH19NHf5oQvD1LVDfgfZ3ZeTyo6IbBbEmioXIKzX89VoxDCYczRqEiZRswIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBB0AOTwnIQA2jGL1ssD/VxUqqnxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2YxZWZh OS1kN2VhLTRjMjktYmNlZi0wMzU2MzllOWViYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvZjFlZmE5 LWQ3ZWEtNGMyOS1iY2VmLTAzNTYzOWU5ZWJiNS8xL0VIUUE1UENjaEFEYU1Zdld5 d1A5WEZTcXFmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsBzANBgkqhkiG9w0BAQsFAAOCAQEAbuGRgb6f6ZxL kysiBIAur4arZiS5xi4p9qXjnmY+JGC8b+TLK8SuiioZiSkZjKUF7UIBp99jx89s xj36QyG3R3oNV3ZrcXxRt/EwarQB3Dt254TL1oQ4Q4F4Di9yML4Ri+6nwjfL5OyG warE59n4PiRbcslNBc+/NDy6lPEjHlz9cX+An/U2zQc/7hbQ9pqhRgrPboLgZZAn dtvsCboQyHMlm1KNSaPzT0pf7qv/8oi30MaTP3XdLFVohCp5Ft37D4flQqX5SDg4 TG6Cz8NcmPr0LwiwMoXUOzwaXe/M+OKs7SsCXn72sXhctnaadkR++xCUBH9R/w3A 0weYVJ3eSg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:32 2026 by rpki-client