This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer (raw, json) Hash identifier: EWA/zkMdC2WC8VMDQ8Emn2yeDJLMhU6HYSJLMwEnqpg= Subject key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC4DBDBD50D32F79D700B997C39A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.210.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c4:db:db:d5:0d:32:f7:9d:70:0b:99:7c:39:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=121f13882dd06d098ec49a759101329b1f201f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:e1:b2:9d:be:a1:ab:fa:71:33:74:58:0e: 10:13:ff:4a:d0:44:9a:2e:db:72:fd:5d:a5:c0:de: 67:08:10:56:a3:cd:81:87:67:47:8c:72:6a:97:b1: 3b:2b:2b:53:ac:de:e0:69:dc:e8:9e:80:d1:20:99: f4:5b:0b:2b:b6:80:cd:d2:07:27:79:35:f4:6f:d0: bc:92:a8:6c:92:74:f7:f1:3e:08:0a:1f:37:56:23: 70:18:8c:7f:e4:d0:79:67:88:17:32:ef:45:7d:c8: 07:04:93:db:62:20:40:de:e5:1f:b4:05:a2:a6:44: ea:b8:89:1d:29:ef:98:77:eb:80:31:d1:7b:bd:1d: bb:5f:7e:72:02:fa:57:74:86:cf:6b:fa:6f:46:a1: 71:6d:b8:5c:b6:e0:6a:c4:23:bf:49:71:7e:8c:3e: 3e:79:ce:90:ea:1b:bc:b0:49:d8:52:65:fb:a2:67: eb:3f:ae:16:61:50:7e:b4:55:f3:2c:ac:2a:b5:eb: bf:47:f9:05:ec:b5:1b:d9:9a:18:ae:67:b5:cd:86: e7:4e:87:f7:9f:a1:6e:1f:cc:79:91:88:76:a1:a6: 4a:79:f7:7f:0f:d3:b7:85:7c:d5:ac:cc:cc:de:c3: 02:9c:6b:c6:41:a4:fc:1a:fb:75:92:0f:ff:9d:d9: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:ef:86:f2:7a:b4:1d:6d:e0:7f:d2:89:cd:47:86:af:3b:ac: bb:d2:5c:54:9b:39:4f:fe:7d:81:85:e1:ad:90:51:ba:33:7d: 6f:9e:34:cc:01:25:b0:18:f4:3a:e0:cf:2c:8e:8d:85:54:f3: c5:6d:2e:29:00:fb:53:97:87:de:2c:c1:5a:38:05:df:0c:c4: 3e:58:fe:e7:e6:36:e0:3a:aa:91:3a:bd:58:e6:e3:6e:65:89: 30:47:f4:f4:d8:12:60:f1:fa:e7:42:34:4f:1c:3a:99:e0:5c: 3d:d3:93:8d:4a:64:21:38:34:d0:f6:18:61:cb:65:80:84:23: a2:9c:84:74:30:1c:bc:a7:e0:2a:0e:91:51:a4:0d:90:7c:33: ee:db:2a:3c:6a:6f:65:c2:79:da:89:80:8b:35:ff:a6:f7:ed: 23:39:0f:44:86:84:90:68:21:f5:f8:b9:32:33:77:05:f9:00: f5:c3:50:7d:c2:d2:4c:4b:d5:bd:26:8d:0e:3c:89:1b:51:58: 5a:35:ca:48:8e:05:f7:f2:d3:1e:2a:50:35:9b:d2:9c:28:8b: 54:ef:79:2b:e9:af:45:2e:fa:fe:54:fb:d6:35:8d:3e:5d:21: b7:d5:5f:11:6a:1d:a6:cd:f8:50:00:32:b0:59:e1:bc:f0:1e: 7c:0d:48:be -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt9ysTb29UNMvedcAuZfDmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjFmMTM4ODJkZDA2ZDA5OGVjNDlhNzU5MTAxMzI5YjFmMjAxZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKzhsp2+oav6cTN0WA4QE/9K0ESa Ltty/V2lwN5nCBBWo82Bh2dHjHJql7E7KytTrN7gadzonoDRIJn0WwsrtoDN0gcn eTX0b9C8kqhsknT38T4ICh83ViNwGIx/5NB5Z4gXMu9FfcgHBJPbYiBA3uUftAWi pkTquIkdKe+Yd+uAMdF7vR27X35yAvpXdIbPa/pvRqFxbbhctuBqxCO/SXF+jD4+ ec6Q6hu8sEnYUmX7omfrP64WYVB+tFXzLKwqteu/R/kF7LUb2ZoYrme1zYbnTof3 n6FuH8x5kYh2oaZKefd/D9O3hXzVrMzM3sMCnGvGQaT8Gvt1kg//ndloGQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFBIfE4gt0G0JjsSadZEBMpsfIB8dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzM1ZGYw YS04YWY2LTRmZjAtYjM0NS0wZDI3NzY3Mzc0ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvMzVkZjBh LThhZjYtNGZmMC1iMzQ1LTBkMjc3NjczNzRlYy8xL0VoOFRpQzNRYlFtT3hKcDFr UUV5bXg4Z0h4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAk9IwDQYJKoZIhvcNAQELBQADggEBACjvhvJ6 tB1t4H/Sic1Hhq87rLvSXFSbOU/+fYGF4a2QUbozfW+eNMwBJbAY9DrgzyyOjYVU 88VtLikA+1OXh94swVo4Bd8MxD5Y/ufmNuA6qpE6vVjm425liTBH9PTYEmDx+udC NE8cOpngXD3Tk41KZCE4NND2GGHLZYCEI6KchHQwHLyn4CoOkVGkDZB8M+7bKjxq b2XCedqJgIs1/6b37SM5D0SGhJBoIfX4uTIzdwX5APXDUH3C0kxL1b0mjQ48iRtR WFo1ykiOBffy0x4qUDWb0pwoi1TveSvpr0Uu+v5U+9Y1jT5dIbfVXxFqHabN+FAA MrBZ4bzwHnwNSL4= -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:52 2026 by rpki-client