This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer File: eH4xzl1QHRqUr9q71OAkzCp4jvU.cer (raw, json) Hash identifier: L4/LlyES5//24SypxHrallyQ7A0vYIOJmYoXl6Fcydc= Subject key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59B791D0B7553096709A49E447EF9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41281 AS: 215551 IP: 45.154.252.0/22 IP: 193.189.100.0/23 IP: 193.243.183.128/26 IP: 2001:67c:130c::/48 IP: 2001:7f8:153::/48 IP: 2a0f:df00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b7:91:d0:b7:55:30:96:70:9a:49:e4:47:ef:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ff:6c:ef:c4:07:e3:5b:dd:96:52:14:b4:8b: 48:89:e1:46:ee:bc:be:df:c0:a2:c3:6c:8f:50:ad: ab:28:ca:19:74:3d:f5:90:9c:23:be:6c:aa:33:66: 7b:67:63:3b:a3:fe:fb:37:dc:e4:7c:1c:cc:6d:14: a8:69:2f:fd:e3:bf:da:66:fb:5b:25:24:9f:f0:36: c9:63:ef:d0:c4:7b:8a:74:67:fb:c1:42:98:7e:26: a1:0f:e0:d3:e8:d9:0b:cb:21:07:83:bf:7e:17:7f: ff:c7:34:30:af:a7:52:29:cd:9a:f9:de:2b:0e:13: aa:e9:20:0a:fe:06:e8:b8:01:bd:0e:ec:1a:f1:77: c6:01:b1:bb:dc:cf:0e:ca:7f:f0:00:e2:6f:75:1e: 0e:9b:e5:6d:bd:c5:d8:2d:c6:3e:31:e2:9f:9c:02: d7:f6:e6:67:4e:af:a7:8f:a1:54:5c:56:ad:a9:ca: d6:08:b6:69:cb:58:76:50:51:e1:4f:20:5f:e6:a8: 2e:01:43:e9:48:07:13:1e:11:15:f2:7f:b5:1f:3e: ab:30:7e:0f:06:94:51:8d:d7:93:30:54:b6:af:03: d7:07:0a:eb:4c:91:b9:7f:aa:09:4e:d6:9c:ac:bf: 94:32:3a:4d:1f:82:43:02:76:4c:dd:87:67:e1:df: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.252.0/22 193.189.100.0/23 193.243.183.128/26 IPv6: 2001:67c:130c::/48 2001:7f8:153::/48 2a0f:df00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41281 215551 Signature Algorithm: sha256WithRSAEncryption 4b:fb:ce:1f:c9:e5:04:6b:9c:9e:70:49:0a:d4:72:14:37:9c: 00:59:9e:b3:a1:b6:62:3c:48:7b:45:6b:b9:b0:01:09:4d:af: 8e:57:5d:f3:6e:b8:db:cb:c3:71:93:76:27:a9:cf:9c:62:29: c4:39:1c:51:1b:0a:5d:78:cd:42:64:b6:b7:bf:cc:94:5e:38: e8:f4:ad:4e:82:c5:09:6d:c0:bf:e7:9a:e0:17:e0:2c:c0:25: 86:dd:85:87:1c:b4:0b:06:94:84:ab:4e:00:d5:f9:35:43:3b: 85:ea:38:80:07:80:1e:83:11:bd:24:88:88:be:13:67:58:af: 8b:43:69:44:f8:0c:14:63:97:84:03:6c:f4:0b:ab:47:97:e7: 7b:3c:a7:b6:b7:7b:c7:3c:97:0f:35:e6:60:b4:c9:08:64:79: 60:69:e5:21:8f:ce:06:ef:bf:42:c3:95:d8:f1:68:fa:aa:ae: 82:0b:93:a1:c2:0e:09:98:35:d7:d2:09:96:25:1a:f5:73:b4: cf:33:7c:20:bd:d9:b8:46:38:62:f8:c5:33:b4:50:61:21:da: 09:4b:99:57:d3:0a:cd:c8:8e:28:70:ae:81:2e:ac:2f:94:77: 89:05:60:02:4d:50:2c:fb:bf:96:1d:1d:11:d8:5d:bf:5e:ff: fa:91:f8:19 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt6WbeR0LdVMJZwmknkR++eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdlMzFjZTVkNTAxZDFhOTRhZmRhYmJkNGUwMjRjYzJhNzg4ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/9s78QH41vdllIUtItIieFG7ry+ 38Ciw2yPUK2rKMoZdD31kJwjvmyqM2Z7Z2M7o/77N9zkfBzMbRSoaS/947/aZvtb JSSf8DbJY+/QxHuKdGf7wUKYfiahD+DT6NkLyyEHg79+F3//xzQwr6dSKc2a+d4r DhOq6SAK/gbouAG9Duwa8XfGAbG73M8Oyn/wAOJvdR4Om+VtvcXYLcY+MeKfnALX 9uZnTq+nj6FUXFatqcrWCLZpy1h2UFHhTyBf5qguAUPpSAcTHhEV8n+1Hz6rMH4P BpRRjdeTMFS2rwPXBwrrTJG5f6oJTtacrL+UMjpNH4JDAnZM3Ydn4d9PYQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFHh+Mc5dUB0alK/au9TgJMwqeI71MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzdjNTVk Mi0zODFjLTRlODctOGNhNS0yMzA3YmI1OTIyNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvN2M1NWQy LTM4MWMtNGU4Ny04Y2E1LTIzMDdiYjU5MjI1Zi8xL2VINHh6bDFRSFJxVXI5cTcx T0FrekNwNGp2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAZBAIAATATAwQCLZr8AwQBwb1kAwUGwfO3gDAfBAIAAjAZAwcA IAEGfBMMAwcAIAEH+AFTAwUDKg/fADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA oUECAwNJ/zANBgkqhkiG9w0BAQsFAAOCAQEAS/vOH8nlBGucnnBJCtRyFDecAFme s6G2YjxIe0VrubABCU2vjldd826428vDcZN2J6nPnGIpxDkcURsKXXjNQmS2t7/M lF446PStToLFCW3Av+ea4BfgLMAlht2Fhxy0CwaUhKtOANX5NUM7heo4gAeAHoMR vSSIiL4TZ1ivi0NpRPgMFGOXhANs9AurR5fnezyntrd7xzyXDzXmYLTJCGR5YGnl IY/OBu+/QsOV2PFo+qqugguTocIOCZg119IJliUa9XO0zzN8IL3ZuEY4YvjFM7RQ YSHaCUuZV9MKzciOKHCugS6sL5R3iQVgAk1QLPu/lh0dEdhdv17/+pH4GQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:51 2026 by rpki-client