This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer File: EHWcamLieNqDEa_sj3Z3xBNj0fg.cer (raw, json) Hash identifier: 3VOd6VgNMe5lLg40FNetWvLBtYS79T26p+I7WKxX4f4= Subject key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CED9123C973B2F5EA7BEB5AFA9E73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202110 IP: 193.39.96.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:91:23:c9:73:b2:f5:ea:7b:eb:5a:fa:9e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10759c6a62e278da8311afec8f7677c41363d1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:65:98:a1:b6:72:ad:08:91:66:64:94:64:cd: c9:e0:f2:22:2a:c6:6e:79:f0:65:cd:1d:43:c6:f4: 0f:d2:f2:4a:52:6f:99:ca:aa:a0:d0:aa:b2:51:f9: e9:ea:42:c4:66:40:1b:55:26:a7:99:d7:51:46:52: dc:0e:0f:f6:8b:df:bd:cd:73:63:34:7e:5d:84:23: 60:60:2b:e0:94:4d:8e:3f:cb:55:7e:0d:8c:66:84: d2:47:c4:e2:eb:4b:e1:83:13:18:2e:56:76:fb:ab: 93:dc:86:8c:ed:0a:a7:29:6c:41:cd:6c:0b:76:3d: ad:ad:fe:73:75:61:8d:9b:d7:5c:17:d6:b9:02:b9: 58:c2:c0:15:e0:8a:55:3c:86:47:ff:7b:1b:6f:8f: 2b:3e:28:ce:ca:ca:3b:40:d0:dc:bd:b2:69:40:a2: dd:70:14:2d:b5:86:89:a4:0c:64:c3:8e:11:78:e6: 8e:2e:e8:97:ed:60:45:82:f7:df:6b:07:35:6a:10: 32:c2:9d:fa:38:4a:37:d8:74:ba:3d:71:c5:d8:48: e6:71:32:8f:8d:1c:98:e3:ab:28:dc:86:97:79:ca: 87:c8:7a:09:23:99:bf:16:4e:c9:29:f3:3c:f2:4b: f1:40:fa:df:fd:27:5f:1e:7f:ee:5e:ad:6c:1a:14: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.96.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202110 Signature Algorithm: sha256WithRSAEncryption 62:58:87:06:a8:50:d4:f1:9a:5d:55:ca:92:5f:bc:9e:8c:4d: 42:6f:1a:3e:0e:a3:e2:c1:be:da:ac:f2:6f:57:ef:f4:08:71: 8b:f4:0e:f3:90:4b:e5:d9:d7:27:f7:29:80:b9:31:c9:cb:da: 43:3e:6f:6c:37:7c:ef:fe:3d:a1:84:aa:81:1f:6b:6c:ac:5e: d7:f7:a9:2d:81:91:4a:54:85:be:a8:0f:2f:3b:9d:ec:ef:82: 93:f7:89:31:17:dd:23:66:00:1b:1b:f1:81:7d:96:8a:58:ea: a0:f6:ad:c6:3d:66:30:36:ba:a6:81:82:c4:47:d5:5c:ea:6c: 84:bc:25:b6:ff:fe:de:95:fa:6e:6d:fa:45:f1:6e:3c:43:36: ac:e4:f8:33:75:71:3b:e9:96:29:88:ee:53:a6:01:20:45:d0: b7:60:bb:5d:d1:dd:0f:08:32:76:b5:4d:3d:98:44:22:eb:b5: d6:08:68:7c:dc:c0:97:9b:34:d5:f3:7a:2a:70:71:fc:79:f3: ce:fc:81:af:9d:83:97:34:9d:60:1d:ba:53:1a:e5:ae:14:67: 33:13:ba:4e:60:1b:6b:d3:83:e3:cd:5d:0c:96:8c:ed:f4:56: 6e:c4:d6:de:d7:45:c8:9c:e0:3a:06:67:b9:99:de:3a:13:5c: 72:b9:dc:52 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XO2RI8lzsvXqe+ta+p5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDc1OWM2YTYyZTI3OGRhODMxMWFmZWM4Zjc2NzdjNDEzNjNkMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGWYobZyrQiRZmSUZM3J4PIiKsZu efBlzR1DxvQP0vJKUm+Zyqqg0KqyUfnp6kLEZkAbVSanmddRRlLcDg/2i9+9zXNj NH5dhCNgYCvglE2OP8tVfg2MZoTSR8Ti60vhgxMYLlZ2+6uT3IaM7QqnKWxBzWwL dj2trf5zdWGNm9dcF9a5ArlYwsAV4IpVPIZH/3sbb48rPijOyso7QNDcvbJpQKLd cBQttYaJpAxkw44ReOaOLuiX7WBFgvffawc1ahAywp36OEo32HS6PXHF2EjmcTKP jRyY46so3IaXecqHyHoJI5m/Fk7JKfM88kvxQPrf/SdfHn/uXq1sGhS1ywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBB1nGpi4njagxGv7I92d8QTY9H4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2E3ZTU1 YS0yNjcyLTRkNzYtOTg3OS0yZWU0ZmY4YjBhODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYTdlNTVh LTI2NzItNGQ3Ni05ODc5LTJlZTRmZjhiMGE4MC8xL0VIV2NhbUxpZU5xREVhX3Nq M1ozeEJOajBmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwSdgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMVfjANBgkqhkiG9w0BAQsFAAOCAQEAYliHBqhQ1PGaXVXKkl+8noxNQm8aPg6j 4sG+2qzyb1fv9Ahxi/QO85BL5dnXJ/cpgLkxycvaQz5vbDd87/49oYSqgR9rbKxe 1/epLYGRSlSFvqgPLzud7O+Ck/eJMRfdI2YAGxvxgX2WiljqoPatxj1mMDa6poGC xEfVXOpshLwltv/+3pX6bm36RfFuPEM2rOT4M3VxO+mWKYjuU6YBIEXQt2C7XdHd DwgydrVNPZhEIuu11ghofNzAl5s01fN6KnBx/HnzzvyBr52DlzSdYB26UxrlrhRn MxO6TmAba9OD481dDJaM7fRWbsTW3tdFyJzgOgZnuZneOhNccrncUg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:28 2026 by rpki-client