This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer File: Eipka-1MQXprSAX5PXenpGXjS5M.cer (raw, json) Hash identifier: 04ciWwQG0GOQJC8mlPcM2jdM/+SaK6aQrnJkEcl99hc= Subject key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6EFABAA365C9B9B2A09FA79574D5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49102 AS: 49831 IP: 93.159.128.0/18 IP: 185.1.120.0/24 IP: 2001:7f8:d6::/48 IP: 2a00:1578::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ef:ab:aa:36:5c:9b:9b:2a:09:fa:79:57:4d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:e1:fd:bf:30:4f:18:af:c8:74:50:e0:a0: 97:4a:f6:5d:42:e1:a9:29:c3:00:1d:02:ba:91:e5: 4e:a1:6a:c3:92:eb:d0:82:49:db:66:cd:86:78:11: 4b:52:3e:c1:f6:0a:5d:ab:ad:fe:ef:fa:ed:4d:a3: 48:39:8e:c6:16:68:72:c4:ec:7d:df:da:4d:45:d1: 78:0d:c2:e5:8d:f4:df:fc:27:97:d0:bd:1e:bd:bf: 8b:d9:24:23:91:19:25:71:59:4c:0c:9c:ae:7b:cf: 50:79:06:6a:e2:aa:59:72:b8:26:76:94:75:31:43: f4:f2:48:9d:50:c5:9b:00:ab:e4:8a:d6:4e:63:2c: 69:86:f9:a0:70:bc:9b:aa:8d:67:db:94:7e:92:0a: dd:60:f2:06:cd:05:54:36:13:8e:4e:e3:6f:67:74: 69:d7:fa:c2:49:0e:f9:3b:59:e2:b6:e6:5e:b7:42: 2c:28:12:58:d0:61:85:fb:8f:54:5e:30:cc:17:74: 39:82:21:c2:4d:83:0a:0b:ea:9e:b8:d3:a7:58:4f: e6:8d:b5:db:20:31:5e:1a:d7:5d:5b:1c:7c:8f:1a: 27:9e:5a:3c:cb:db:53:2c:0a:fb:ee:b5:7c:dd:b3: ca:52:11:e3:68:60:9c:84:da:4b:9f:98:10:60:a3: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.128.0/18 185.1.120.0/24 IPv6: 2001:7f8:d6::/48 2a00:1578::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49102 49831 Signature Algorithm: sha256WithRSAEncryption 65:89:b5:a6:e7:3b:87:0a:87:1c:54:bb:e5:29:03:22:20:04: fd:70:f1:90:5e:dd:95:89:fd:87:93:88:31:6d:48:f5:af:e9: 5c:01:3c:fb:2c:6c:bc:dc:b0:c1:cd:80:af:4f:2a:11:dc:5c: 39:3c:f8:64:33:72:6c:ba:5f:99:62:6e:c4:47:92:19:1b:54: 29:16:65:03:7e:f0:3e:44:3b:fb:2c:42:7e:09:8c:99:e2:64: c5:9e:cd:8c:9d:4b:b5:e8:37:7f:ec:2d:2f:55:59:e1:db:3f: b0:2a:9c:ee:b7:bf:53:04:f6:52:1c:d9:d1:da:2a:93:8d:6a: 6c:a9:f3:95:df:9b:2d:f5:72:9f:ac:37:1b:2d:30:15:f7:dd: 6f:4c:64:12:e3:a9:1a:80:69:dd:b3:35:cc:69:39:34:4c:5d: 26:79:27:ed:11:70:7e:e0:ba:5c:2e:a4:0c:d6:74:b5:96:30: 42:89:21:55:04:84:0c:7f:1e:89:54:6a:f3:30:fb:4a:f4:52: df:47:6b:c6:db:a5:92:a8:7e:78:7b:54:8e:6e:5e:43:ae:91: f9:3d:25:c7:fa:38:2a:13:2f:8f:cf:4f:90:c9:63:87:0b:5c: 51:1e:d1:ec:74:21:bc:3b:f0:b9:af:59:97:b4:d7:34:db:56: 9b:2e:c0:98 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt+pu+rqjZcm5sqCfp5V01cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjJhNjQ2YmVkNGM0MTdhNmI0ODA1ZjkzZDc3YTdhNDY1ZTM0YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Lh/b8wTxivyHRQ4KCXSvZdQuGp KcMAHQK6keVOoWrDkuvQgknbZs2GeBFLUj7B9gpdq63+7/rtTaNIOY7GFmhyxOx9 39pNRdF4DcLljfTf/CeX0L0evb+L2SQjkRklcVlMDJyue89QeQZq4qpZcrgmdpR1 MUP08kidUMWbAKvkitZOYyxphvmgcLybqo1n25R+kgrdYPIGzQVUNhOOTuNvZ3Rp 1/rCSQ75O1nituZet0IsKBJY0GGF+49UXjDMF3Q5giHCTYMKC+qeuNOnWE/mjbXb IDFeGtddWxx8jxonnlo8y9tTLAr77rV83bPKUhHjaGCchNpLn5gQYKOcWQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFBIqZGvtTEF6a0gF+T13p6Rl40uTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2E1OTZl Mi0yOWQyLTQ4YzYtOWJhYi01Y2JkMWYzZmYzOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvYTU5NmUy LTI5ZDItNDhjNi05YmFiLTVjYmQxZjNmZjM5YS8xL0VpcGthLTFNUVhwclNBWDVQ WGVucEdYalM1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQGXZ+AAwQAuQF4MBYEAgACMBADBwAgAQf4ANYD BQMqABV4MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC/zgIDAMKnMA0GCSqGSIb3 DQEBCwUAA4IBAQBlibWm5zuHCoccVLvlKQMiIAT9cPGQXt2Vif2Hk4gxbUj1r+lc ATz7LGy83LDBzYCvTyoR3Fw5PPhkM3Jsul+ZYm7ER5IZG1QpFmUDfvA+RDv7LEJ+ CYyZ4mTFns2MnUu16Dd/7C0vVVnh2z+wKpzut79TBPZSHNnR2iqTjWpsqfOV35st 9XKfrDcbLTAV991vTGQS46kagGndszXMaTk0TF0meSftEXB+4LpcLqQM1nS1ljBC iSFVBIQMfx6JVGrzMPtK9FLfR2vG26WSqH54e1SObl5DrpH5PSXH+jgqEy+Pz0+Q yWOHC1xRHtHsdCG8O/C5r1mXtNc021abLsCY -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:01 2026 by rpki-client