This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer File: EbBIqvW7QvbE2dOHrSen6yGfOII.cer (raw, json) Hash identifier: NGafnF2BWsdMGe0Ql6WLxqacTNK06n7YdS4xDxHKr8U= Subject key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380FCCEE5E13EC9CB2895B30CD5798 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.196.44.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0f:cc:ee:5e:13:ec:9c:b2:89:5b:30:cd:57:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:86:48:08:84:bc:60:fc:a1:fc:bb:cb:5c: f8:78:13:76:3c:a1:42:6c:f6:a5:b1:29:3b:33:42: 45:5c:3f:76:90:91:e0:81:aa:88:f2:8a:86:12:8d: 6b:03:be:25:ef:12:3a:b3:19:5b:f2:67:39:ba:90: 65:aa:6c:3a:3c:22:6f:5e:13:b3:77:25:ef:17:ca: 5f:79:cd:d5:8b:b8:fc:16:d0:7b:bb:b0:34:e8:5f: 2e:b3:8d:6e:94:b6:0e:3d:92:57:05:cc:9e:3a:1f: a4:a9:32:4e:a5:21:dc:39:ab:7a:96:c6:cd:54:2a: bd:c7:1f:a6:f9:e3:f8:90:f9:1c:be:53:6d:ea:9a: e5:bd:22:24:eb:8b:16:21:3a:6d:66:03:00:eb:a6: bf:89:ab:5d:ed:73:78:5b:34:3a:05:18:64:56:85: cb:02:44:f1:63:b1:ff:13:87:52:ff:c9:35:2c:ac: 3b:c6:9d:2f:94:70:51:82:75:58:cd:2d:46:1e:ac: 3d:e6:b2:10:f1:71:7c:42:be:e7:bd:0a:12:92:f3: 8d:02:a3:13:6b:f2:08:7c:3d:d2:56:d7:26:ff:77: a5:15:00:2f:27:29:e7:22:24:c2:4a:8f:0b:c8:9a: 20:b8:50:86:27:76:0d:c6:f2:61:ee:c6:0b:bc:ea: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.44.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:87:5f:8a:ea:c7:03:51:44:cd:37:02:ef:2d:2e:36:f3:a6: 4d:a6:c8:74:32:89:67:74:8a:e3:e8:ee:c8:4f:05:f6:e2:ef: 49:49:62:ce:3a:07:45:d6:7e:e5:e8:3a:5b:cb:d3:03:ae:9e: d5:b1:a2:cd:39:4c:59:28:c5:ad:3c:80:57:e3:31:82:4c:a0: fc:14:0d:e0:ef:47:28:e1:e4:02:b3:51:a0:90:8f:ac:b7:3a: c3:3b:cd:fd:7a:19:76:b8:db:3c:28:4b:55:fc:37:57:97:00: a6:13:3f:e9:af:97:20:2f:5e:9f:d3:bd:eb:ed:11:51:6d:7b: e8:18:08:c6:cc:78:16:fc:cc:1e:6d:d0:62:ca:62:74:98:3c: 37:33:25:87:b4:3a:84:92:de:39:c1:87:d0:41:dd:52:75:d5: 3e:84:a2:f5:ab:9e:34:f4:90:0a:25:0b:84:5c:fb:49:b3:ed: eb:ef:de:15:99:00:fc:b6:c6:c2:f8:a8:c2:8e:76:6a:4a:19: 4a:88:dd:4f:0f:af:be:1b:ce:c1:1d:4e:bc:89:41:8c:c5:ed: 32:35:06:d8:93:9a:24:7f:5e:f3:7b:e8:00:8f:05:c9:a4:a7: f0:23:23:3c:e6:d2:42:6c:a8:23:31:5c:0a:84:7d:a3:af:fe: 61:45:31:1f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OA/M7l4T7JyyiVswzVeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWIwNDhhYWY1YmI0MmY2YzRkOWQzODdhZDI3YTdlYjIxOWYzODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/6GSAiEvGD8ofy7y1z4eBN2PKFC bPalsSk7M0JFXD92kJHggaqI8oqGEo1rA74l7xI6sxlb8mc5upBlqmw6PCJvXhOz dyXvF8pfec3Vi7j8FtB7u7A06F8us41ulLYOPZJXBcyeOh+kqTJOpSHcOat6lsbN VCq9xx+m+eP4kPkcvlNt6prlvSIk64sWITptZgMA66a/iatd7XN4WzQ6BRhkVoXL AkTxY7H/E4dS/8k1LKw7xp0vlHBRgnVYzS1GHqw95rIQ8XF8Qr7nvQoSkvONAqMT a/IIfD3SVtcm/3elFQAvJynnIiTCSo8LyJoguFCGJ3YNxvJh7sYLvOo0TQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBGwSKr1u0L2xNnTh60np+shnziCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzdiZTli Mi0yZTE5LTRmZTAtYjE3YS01Y2YzZTc2YTFlYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvN2JlOWIy LTJlMTktNGZlMC1iMTdhLTVjZjNlNzZhMWViYy8xL0ViQklxdlc3UXZiRTJkT0hy U2VuNnlHZk9JSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAucQsMA0GCSqGSIb3DQEBCwUAA4IBAQCdh1+K 6scDUUTNNwLvLS4286ZNpsh0MolndIrj6O7ITwX24u9JSWLOOgdF1n7l6Dpby9MD rp7VsaLNOUxZKMWtPIBX4zGCTKD8FA3g70co4eQCs1GgkI+stzrDO839ehl2uNs8 KEtV/DdXlwCmEz/pr5cgL16f073r7RFRbXvoGAjGzHgW/MwebdBiymJ0mDw3MyWH tDqEkt45wYfQQd1SddU+hKL1q5409JAKJQuEXPtJs+3r794VmQD8tsbC+KjCjnZq ShlKiN1PD6++G87BHU68iUGMxe0yNQbYk5okf17ze+gAjwXJpKfwIyM85tJCbKgj MVwKhH2jr/5hRTEf -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:28 2026 by rpki-client