This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer File: EharzETJqVVAzfWx3FQux9Ef4Ho.cer (raw, json) Hash identifier: ucANnMmnSrHvywLht/yZtTyRstWrBwGOhujdgg71XpA= Subject key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA462416A60127E223F6B41E4BDD379 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210000 IP: 31.41.34.0/24 IP: 2a12:3fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:62:41:6a:60:12:7e:22:3f:6b:41:e4:bd:d3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:ae:fd:12:63:18:ac:7c:54:af:44:92:77: b0:f0:19:99:e3:47:8e:a3:62:4c:ae:74:18:f1:df: 7c:22:90:1d:79:37:bd:b5:19:27:f4:35:4b:c4:ec: d8:90:e8:f1:0e:eb:bc:61:20:b6:a5:62:b8:ae:18: 4e:32:35:6b:58:96:6f:f1:a7:36:94:2d:d3:2f:6d: 69:21:37:cd:bd:7b:48:66:5f:53:5d:da:8c:2f:d6: f9:f7:17:0b:0f:ec:a9:22:b1:3a:55:a6:7e:d2:30: d7:06:55:be:01:fa:7c:84:00:39:a2:63:f8:64:ab: 4c:68:38:ee:67:d5:50:f3:d2:87:f3:b8:3d:93:88: 50:b3:52:63:39:4a:e7:5f:05:8b:d2:7d:a8:b3:13: b0:66:c6:ea:b8:7e:4a:4d:49:90:48:d4:e9:f1:b8: f9:5a:75:c4:ea:ae:4f:f6:f6:ad:fa:94:76:42:42: 3f:41:b6:97:5f:67:44:ea:ab:2a:7d:8b:9e:33:96: 89:d0:74:08:1f:a8:03:6c:e7:c3:5e:12:07:c2:92: 7d:be:61:36:1d:bf:88:52:15:b1:09:12:87:d8:1c: 85:a7:c5:34:e0:22:77:44:16:da:33:6b:13:40:14: a0:be:aa:01:0a:ba:c9:83:af:42:1c:e0:36:db:62: 5a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.34.0/24 IPv6: 2a12:3fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210000 Signature Algorithm: sha256WithRSAEncryption 36:f1:fb:78:ce:a8:a6:2e:3b:ee:e1:a6:bb:d1:7e:fd:0c:f0: e8:01:ef:14:dd:8f:6e:95:7e:b6:10:1e:9f:72:c5:87:4b:68: b5:92:5a:cc:6b:df:48:b2:ec:5a:9d:ad:aa:08:0a:c7:62:63: f3:d0:b8:b6:0d:3d:8f:ac:a9:1d:34:75:82:46:a3:9a:19:fb: 63:64:43:76:ea:1a:1a:c3:ea:ed:4c:32:a1:78:73:80:33:b3: 63:66:0c:dd:0b:43:15:14:d5:ec:d3:13:67:88:f2:fe:16:af: 90:a8:68:60:4a:61:93:4c:38:5f:73:da:d0:1b:70:7b:ea:31: 56:52:3b:31:47:22:6f:3e:7e:a9:c4:2b:bd:b5:6f:27:7c:4a: c8:64:f4:f9:85:0a:8f:3c:f1:75:30:45:87:62:88:cb:14:1e: 9f:74:53:f2:e2:48:6f:8c:cf:01:fc:bc:2b:be:fc:66:48:9c: 04:91:24:a9:c0:13:e8:af:3f:3b:9f:08:a0:ae:14:41:8f:57: 6a:27:88:3f:d7:d5:c8:65:f6:f2:6f:1b:10:47:a3:49:0d:9b: 9b:0a:5a:67:eb:ff:18:0e:81:cd:84:d1:db:5d:c5:d9:7b:10: cd:e0:0a:e7:12:b4:6f:99:5a:65:0b:c4:86:92:85:38:46:bf: cb:16:ff:e3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pGJBamASfiI/a0HkvdN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjE2YWJjYzQ0YzlhOTU1NDBjZGY1YjFkYzU0MmVjN2QxMWZlMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOau/RJjGKx8VK9Eknew8BmZ40eO o2JMrnQY8d98IpAdeTe9tRkn9DVLxOzYkOjxDuu8YSC2pWK4rhhOMjVrWJZv8ac2 lC3TL21pITfNvXtIZl9TXdqML9b59xcLD+ypIrE6VaZ+0jDXBlW+Afp8hAA5omP4 ZKtMaDjuZ9VQ89KH87g9k4hQs1JjOUrnXwWL0n2osxOwZsbquH5KTUmQSNTp8bj5 WnXE6q5P9vat+pR2QkI/QbaXX2dE6qsqfYueM5aJ0HQIH6gDbOfDXhIHwpJ9vmE2 Hb+IUhWxCRKH2ByFp8U04CJ3RBbaM2sTQBSgvqoBCrrJg69CHOA222JahwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBIWq8xEyalVQM31sdxULsfRH+B6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2FjOWNm Ni0xYmVjLTQyNGItYWE1MS1hMDk2MmQ5OThlNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvYWM5Y2Y2 LTFiZWMtNDI0Yi1hYTUxLWEwOTYyZDk5OGU2MC8xL0VoYXJ6RVRKcVZWQXpmV3gz RlF1eDlFZjRIby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAHykiMA0EAgACMAcDBQMqEj/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0UDANBgkqhkiG9w0BAQsFAAOCAQEANvH7eM6opi47 7uGmu9F+/Qzw6AHvFN2PbpV+thAen3LFh0totZJazGvfSLLsWp2tqggKx2Jj89C4 tg09j6ypHTR1gkajmhn7Y2RDduoaGsPq7UwyoXhzgDOzY2YM3QtDFRTV7NMTZ4jy /havkKhoYEphk0w4X3Pa0Btwe+oxVlI7MUcibz5+qcQrvbVvJ3xKyGT0+YUKjzzx dTBFh2KIyxQen3RT8uJIb4zPAfy8K778ZkicBJEkqcAT6K8/O58IoK4UQY9XaieI P9fVyGX28m8bEEejSQ2bmwpaZ+v/GA6BzYTR213F2XsQzeAK5xK0b5laZQvEhpKF OEa/yxb/4w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:36 2026 by rpki-client