This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer File: EewaDmTqhLaaQHzz8qklOIq07LQ.cer (raw, json) Hash identifier: 5iCeqGx2/g3oZVNwqyR75WUniVRrgPTJZv3++p/ibEA= Subject key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED304B0E145205F0DF7B06E4582CC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.25.12.0/22 IP: 185.197.148.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:4b:0e:14:52:05:f0:df:7b:06:e4:58:2c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:ac:e7:90:da:a3:6f:d2:a8:4b:11:a7:a2: 99:d6:bf:c1:f0:fd:99:78:28:f4:54:0c:8b:98:4f: 7a:6f:4a:73:81:3a:44:5d:77:62:7d:a9:a1:1a:32: 10:ea:65:26:11:d6:57:f4:36:86:d5:d3:9e:71:bc: 9f:77:35:db:c5:8d:22:76:29:41:3d:c8:9f:fb:85: c6:6c:0f:8c:27:33:b2:68:1f:95:f0:bb:e7:32:31: b3:f5:7e:83:b1:64:84:fa:c5:65:1d:c0:4a:1c:67: 4f:71:22:b0:2b:df:35:e8:db:24:21:c2:58:3e:b4: d1:89:e6:33:84:03:01:78:98:f0:99:5b:7e:23:26: d4:18:51:cf:a4:c3:62:12:db:a1:c3:df:97:cf:f0: 9c:0e:00:5c:68:39:33:6f:33:65:c8:fb:05:20:70: aa:23:8e:99:5d:34:da:3b:19:7a:9e:0e:f5:7d:9a: db:2d:bb:f1:ae:59:44:5d:d0:bf:a0:36:02:53:6c: 2d:e5:bc:b6:e6:bf:0b:81:e8:fb:e6:1f:39:6b:d7: 58:0c:08:a5:7f:e6:f8:64:8b:28:98:e7:04:19:42: 22:86:03:0b:77:69:d1:20:cd:6b:df:c2:32:de:4c: 12:88:bf:23:55:f4:41:f1:76:07:2b:92:48:ec:8a: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.12.0/22 185.197.148.0/24 Signature Algorithm: sha256WithRSAEncryption 09:b0:a8:41:0d:6d:a1:ed:6b:13:94:0b:f4:cb:8b:08:ae:f0: 2e:09:47:b8:19:ca:5b:4c:7a:1e:ab:fc:83:4c:6f:d4:e4:85: e1:83:83:cb:ee:19:b5:08:39:e8:2b:16:24:04:81:9e:58:49: 52:ca:21:4b:55:4c:db:8c:97:2a:8b:87:36:17:9e:05:2f:f8: c7:22:9a:84:ff:6f:e8:fc:1f:25:79:aa:b0:3f:e8:f7:11:a6: c0:0b:c4:92:93:d6:e3:6c:6b:81:ff:ba:29:7b:bf:f4:b2:e7: dd:23:6d:c6:e6:1e:c0:04:7b:f7:bc:82:f2:a5:d7:48:dc:55: 35:be:e3:5b:4d:d1:fa:36:54:19:ab:77:4a:73:d2:49:0b:38: d4:3d:09:60:9a:0e:a3:e6:ae:9f:6b:c5:3b:5f:30:92:39:97: 2b:cc:be:45:23:62:6f:1f:ef:0c:4c:85:99:f1:31:4c:96:30: 3f:73:e2:c4:cc:1f:00:c0:e6:de:bb:a4:49:21:56:58:57:56: d9:8e:ff:4d:57:16:24:b8:5b:78:d7:71:9d:b8:04:22:5a:0a: a1:f1:7e:c5:45:4d:f9:89:cf:9d:cd:7c:a8:11:51:db:41:ec: f4:8a:54:3d:3c:cf:a2:97:68:de:84:9f:84:9e:0a:41:5a:a0: 72:09:a9:83 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt57TBLDhRSBfDfewbkWCzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWVjMWEwZTY0ZWE4NGI2OWE0MDdjZjNmMmE5MjUzODhhYjRlY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUus55Dao2/SqEsRp6KZ1r/B8P2Z eCj0VAyLmE96b0pzgTpEXXdifamhGjIQ6mUmEdZX9DaG1dOecbyfdzXbxY0idilB Pcif+4XGbA+MJzOyaB+V8LvnMjGz9X6DsWSE+sVlHcBKHGdPcSKwK9816NskIcJY PrTRieYzhAMBeJjwmVt+IybUGFHPpMNiEtuhw9+Xz/CcDgBcaDkzbzNlyPsFIHCq I46ZXTTaOxl6ng71fZrbLbvxrllEXdC/oDYCU2wt5by25r8Lgej75h85a9dYDAil f+b4ZIsomOcEGUIihgMLd2nRIM1r38Iy3kwSiL8jVfRB8XYHK5JI7Iq0VQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBHsGg5k6oS2mkB88/KpJTiKtOy0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzBjZjc0 NS1hNGQ4LTQyM2QtYTJkOS04MzAyZWQ4NTBjODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMGNmNzQ1 LWE0ZDgtNDIzZC1hMmQ5LTgzMDJlZDg1MGM4Ny8xL0Vld2FEbVRxaExhYVFIeno4 cWtsT0lxMDdMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCHxkMAwQAucWUMA0GCSqGSIb3DQEBCwUAA4IB AQAJsKhBDW2h7WsTlAv0y4sIrvAuCUe4GcpbTHoeq/yDTG/U5IXhg4PL7hm1CDno KxYkBIGeWElSyiFLVUzbjJcqi4c2F54FL/jHIpqE/2/o/B8leaqwP+j3EabAC8SS k9bjbGuB/7ope7/0sufdI23G5h7ABHv3vILypddI3FU1vuNbTdH6NlQZq3dKc9JJ CzjUPQlgmg6j5q6fa8U7XzCSOZcrzL5FI2JvH+8MTIWZ8TFMljA/c+LEzB8AwObe u6RJIVZYV1bZjv9NVxYkuFt413GduAQiWgqh8X7FRU35ic+dzXyoEVHbQez0ilQ9 PM+il2jehJ+EngpBWqByCamD -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:44 2026 by rpki-client