This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer File: EzzXwanHnILu5chqQjwXwdY8NBM.cer (raw, json) Hash identifier: xrB22rzOE+S1NNLEOr3CqwrVDtSMg7iyNf4cIzCuw7w= Subject key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD4F24E899D5AB4FC26FEB6613267 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.5.44.0/22 IP: 2a02:7ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:f2:4e:89:9d:5a:b4:fc:26:fe:b6:61:32:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:e6:76:27:81:a6:9a:2f:21:d5:ea:41:c2: 65:cb:72:d4:e2:2b:7d:e0:f1:be:4a:b3:2a:43:1a: 4e:f0:8d:ec:5d:84:29:4c:23:c4:4a:80:60:b6:6e: 45:b1:e6:e6:3d:8c:2e:2c:c8:9d:15:85:b5:07:e8: 89:ad:69:2c:05:c5:b2:82:8f:6c:09:b3:72:ed:65: 13:65:2b:28:f1:e2:45:0e:a9:5a:3e:18:4d:fb:cb: c6:5a:66:13:2f:b4:3a:16:73:d9:f3:3e:ce:42:56: fe:7e:b1:99:7d:70:39:e0:f5:10:18:bf:8d:45:8d: 60:de:5b:a5:6a:6a:fe:f4:2e:7e:b8:5b:e6:6a:3f: 4e:58:11:a0:6c:36:7f:7a:a3:79:73:56:b8:db:42: 17:30:a6:39:ac:c0:7d:bd:b1:02:4c:bd:55:b3:54: 08:1c:40:69:33:98:31:a8:f0:18:29:d4:7f:ff:bb: f3:4d:30:c0:b8:12:9e:5f:93:fc:3a:27:e0:03:53: f4:2a:46:db:7f:b4:5c:e8:b9:c9:92:92:07:e5:0e: 69:96:ea:da:ef:b6:1a:dd:57:15:d2:9c:8a:6a:05: 21:e8:e2:3c:b2:4d:c3:d4:6e:14:63:85:50:6f:31: ae:c0:9a:75:0e:f6:6b:54:fa:be:c9:4e:1f:54:05: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.44.0/22 IPv6: 2a02:7ac0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:66:c8:0f:ca:9d:ef:8d:71:34:b9:95:f5:d2:4c:87:a9:76: 73:e0:02:c9:b7:f3:be:ed:de:ad:f1:9d:b0:b7:95:3f:2d:7f: 1b:ee:04:c7:80:a7:b2:8e:17:01:a1:ea:bd:93:b7:11:52:11: ea:dc:c5:57:dd:83:38:a8:be:c3:c2:eb:37:71:37:a7:29:70: 6d:67:3a:3b:d1:da:3b:da:00:9f:5a:da:a4:b4:e2:83:bb:cc: 62:79:90:f9:6b:08:b1:43:bc:37:0e:b2:92:23:d2:4c:f3:2f: 75:aa:96:83:fe:5a:f7:b4:f3:8e:57:ac:b0:78:12:1f:b4:9c: 4f:f4:fa:4d:8b:0f:91:bb:0e:c8:b4:fc:03:ad:4d:22:55:4f: cd:7a:17:d1:ba:71:1c:ea:8e:12:8d:ee:3e:e7:e0:d4:51:c4: 12:2b:1d:c7:a0:54:41:f9:ed:b9:3d:d3:e5:0f:f8:a3:09:80: 4d:60:c6:a4:98:79:fd:6c:40:3b:f4:36:f9:c9:ef:b3:bb:23: 5c:9a:58:3e:c7:cd:7a:8b:17:bd:2b:0b:d2:68:50:d2:d7:ff: 26:86:71:7d:7e:d6:6b:60:90:c5:da:38:f5:bc:c0:22:2f:76: ce:23:49:c8:a0:1b:26:ae:4b:67:c0:da:40:95:16:2d:71:1e: 5b:17:bd:bf -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WtTyTomdWrT8Jv62YTJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNjZDdjMWE5Yzc5YzgyZWVlNWM4NmE0MjNjMTdjMWQ2M2MzNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4/mdieBppovIdXqQcJly3LU4it9 4PG+SrMqQxpO8I3sXYQpTCPESoBgtm5FsebmPYwuLMidFYW1B+iJrWksBcWygo9s CbNy7WUTZSso8eJFDqlaPhhN+8vGWmYTL7Q6FnPZ8z7OQlb+frGZfXA54PUQGL+N RY1g3lulamr+9C5+uFvmaj9OWBGgbDZ/eqN5c1a420IXMKY5rMB9vbECTL1Vs1QI HEBpM5gxqPAYKdR//7vzTTDAuBKeX5P8OifgA1P0Kkbbf7Rc6LnJkpIH5Q5plura 77Ya3VcV0pyKagUh6OI8sk3D1G4UY4VQbzGuwJp1DvZrVPq+yU4fVAXIhwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBM818Gpx5yC7uXIakI8F8HWPDQTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzgyYzBh Mi04MDRiLTQ0NmQtYWIyNC00ZjM4YzY1NmIyNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvODJjMGEy LTgwNGItNDQ2ZC1hYjI0LTRmMzhjNjU2YjI1Ni8xL0V6elh3YW5IbklMdTVjaHFR andYd2RZOE5CTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQUsMA0EAgACMAcDBQAqAnrAMA0GCSqGSIb3 DQEBCwUAA4IBAQCKZsgPyp3vjXE0uZX10kyHqXZz4ALJt/O+7d6t8Z2wt5U/LX8b 7gTHgKeyjhcBoeq9k7cRUhHq3MVX3YM4qL7Dwus3cTenKXBtZzo70do72gCfWtqk tOKDu8xieZD5awixQ7w3DrKSI9JM8y91qpaD/lr3tPOOV6yweBIftJxP9PpNiw+R uw7ItPwDrU0iVU/NehfRunEc6o4Sje4+5+DUUcQSKx3HoFRB+e25PdPlD/ijCYBN YMakmHn9bEA79Db5ye+zuyNcmlg+x816ixe9KwvSaFDS1/8mhnF9ftZrYJDF2jj1 vMAiL3bOI0nIoBsmrktnwNpAlRYtcR5bF72/ -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:18 2026 by rpki-client