This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer File: EJU-YHZw_3OO7mprV32MiygE4eE.cer (raw, json) Hash identifier: cDF6IDkHmgj7UtecqRWJURm6UBNpMusY38Te0V/Od4M= Subject key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835236C83BA2BEEA36E64AD72710886 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.124.224.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:23:6c:83:ba:2b:ee:a3:6e:64:ad:72:71:08:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:99:5b:f9:fb:75:2e:db:10:be:8e:08:55: 50:b0:29:74:12:c9:85:b3:33:f2:b3:65:e5:df:5a: a0:a3:a1:68:7e:01:4d:af:dd:94:16:e2:9a:61:20: d4:7f:e3:5a:57:de:f3:81:db:38:61:7a:e4:46:4f: e8:35:ac:7a:96:23:17:bb:5b:05:75:8f:68:e5:38: b3:64:37:5d:91:6c:2a:f0:b4:1a:2c:9b:a2:5d:e5: ef:c1:ef:eb:0b:3f:c5:56:0d:e5:a0:26:ff:d0:f0: 34:49:0a:a9:76:c5:19:b6:f6:29:cf:77:28:27:8a: d2:5a:27:d3:9f:4a:0c:bd:2d:51:de:f4:d0:31:b9: 62:f6:e1:60:d6:12:34:80:3c:2e:bc:43:1c:a9:de: 21:a6:1e:c8:89:8d:7d:ab:1d:ee:06:80:e4:a3:ca: f3:e1:e6:a0:5f:23:fc:46:ca:98:2c:f7:c4:3e:e3: d1:3e:19:64:53:09:8b:38:8f:23:77:f7:13:41:70: 6c:d0:4a:9e:af:24:3f:9d:78:ee:62:41:2a:12:8a: db:4e:cc:8a:5d:01:f2:0c:35:4f:de:ae:9b:59:11: 08:77:fd:65:f0:50:d4:fb:ba:82:88:2b:72:77:cb: dd:dd:00:f3:f5:18:1d:26:dc:a4:7e:10:66:ce:5e: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.224.0/23 Signature Algorithm: sha256WithRSAEncryption a1:6d:65:b0:33:e9:a1:d4:ce:1b:d5:87:f9:1d:53:5a:53:df: d0:98:5d:3e:03:04:dd:63:d8:dd:18:cc:79:56:3a:e9:aa:f0: de:16:1c:25:0c:15:00:be:be:56:09:4d:d0:91:69:1e:ed:4f: d5:9c:be:fe:b7:a4:1b:ff:70:10:a1:53:42:bf:df:d3:69:43: 13:0a:f9:54:e6:5c:a6:d1:d8:8d:e6:57:2b:46:18:37:f9:58: c7:e5:fd:c6:14:cb:87:c0:6c:06:af:78:c2:cb:7a:b5:b9:35: df:21:d4:44:95:c1:f4:33:fa:db:9a:4d:5a:8f:0e:2e:81:92: c3:1a:bd:08:b4:59:c1:fa:47:1d:7f:28:78:70:c0:b6:d1:43: 31:f1:64:cd:04:27:f1:32:70:b8:e1:55:1c:d3:b0:63:08:65: 53:c9:11:41:02:2e:fb:83:e5:f2:26:41:34:8d:91:69:f9:81: d1:3e:67:5c:16:6b:26:6e:66:0e:ed:b6:74:63:1f:6f:8e:68: b0:14:44:8f:33:7a:2f:bc:7c:d9:9a:6d:7e:da:9f:2d:c9:fc: 9d:fc:f7:60:3d:f5:a8:13:b7:94:2e:cd:82:20:c5:69:5c:26: 87:80:ef:5c:2d:85:89:93:d2:f4:d4:29:dd:dc:fe:29:6b:50: 1c:31:50:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NSNsg7or7qNuZK1ycQiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDk1M2U2MDc2NzBmZjczOGVlZTZhNmI1NzdkOGM4YjI4MDRlMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6ZW/n7dS7bEL6OCFVQsCl0EsmF szPys2Xl31qgo6FofgFNr92UFuKaYSDUf+NaV97zgds4YXrkRk/oNax6liMXu1sF dY9o5TizZDddkWwq8LQaLJuiXeXvwe/rCz/FVg3loCb/0PA0SQqpdsUZtvYpz3co J4rSWifTn0oMvS1R3vTQMbli9uFg1hI0gDwuvEMcqd4hph7IiY19qx3uBoDko8rz 4eagXyP8RsqYLPfEPuPRPhlkUwmLOI8jd/cTQXBs0EqeryQ/nXjuYkEqEorbTsyK XQHyDDVP3q6bWREId/1l8FDU+7qCiCtyd8vd3QDz9RgdJtykfhBmzl7ThQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBCVPmB2cP9zju5qa1d9jIsoBOHhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2E5OTM1 NS0yZDAxLTRkYTUtOGU3My0xYmM1NTJjMDBkZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvYTk5MzU1 LTJkMDEtNGRhNS04ZTczLTFiYzU1MmMwMGRkNy8xL0VKVS1ZSFp3XzNPTzdtcHJW MzJNaXlnRTRlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBsHzgMA0GCSqGSIb3DQEBCwUAA4IBAQChbWWw M+mh1M4b1Yf5HVNaU9/QmF0+AwTdY9jdGMx5VjrpqvDeFhwlDBUAvr5WCU3QkWke 7U/VnL7+t6Qb/3AQoVNCv9/TaUMTCvlU5lym0diN5lcrRhg3+VjH5f3GFMuHwGwG r3jCy3q1uTXfIdRElcH0M/rbmk1ajw4ugZLDGr0ItFnB+kcdfyh4cMC20UMx8WTN BCfxMnC44VUc07BjCGVTyRFBAi77g+XyJkE0jZFp+YHRPmdcFmsmbmYO7bZ0Yx9v jmiwFESPM3ovvHzZmm1+2p8tyfyd/PdgPfWoE7eULs2CIMVpXCaHgO9cLYWJk9L0 1Cnd3P4pa1AcMVD3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:22 2026 by rpki-client