This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer File: ejhiE08UE2XviHkC5gV8KLKCnJ0.cer (raw, json) Hash identifier: xPtetoNDijvdwxaXe8RjbUXtvrm88Tm8BxLTQONMEjQ= Subject key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39152CF3A0E3FC9FA0B57591A6CAAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205955 IP: 194.124.232.0/23 IP: 2001:67c:1984::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:2c:f3:a0:e3:fc:9f:a0:b5:75:91:a6:ca:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a3862134f141365ef887902e6057c28b2829c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:31:84:3e:6a:32:81:54:72:61:fb:b8:3e: ff:62:b3:40:7d:fd:8f:42:e4:11:c1:e7:87:47:54: f2:a1:60:9d:e5:22:92:ac:43:74:06:23:d4:48:e5: 4b:0f:a9:14:86:38:63:61:6d:92:d6:ff:9f:92:7a: 5a:c5:84:98:ef:09:1b:e2:82:21:ab:d2:60:58:e7: 63:8e:98:dc:5d:77:af:13:ed:fe:0a:f2:0b:1d:e6: f6:b6:e8:8d:2f:aa:d5:c9:2b:68:21:00:0b:9a:b7: 41:6a:46:f1:0a:4e:e4:cd:ff:95:0a:51:56:74:76: d5:80:75:52:27:0d:56:19:f8:73:c1:2b:f3:bb:e3: 7e:6d:64:21:3d:cb:35:96:1e:a5:7b:90:b6:25:8e: 73:eb:0c:84:cf:19:53:3b:b4:61:54:4e:4e:cb:3e: 85:e4:5e:2b:55:0b:1a:c7:15:6f:81:59:b6:8b:0e: f3:3e:15:5c:8a:17:1d:12:66:ad:1c:28:40:dd:a4: e9:8b:53:0f:52:f3:36:97:ce:46:05:4c:48:81:70: 69:0c:de:04:11:0e:91:96:ec:99:fb:74:3c:38:e1: 27:13:26:ed:a0:fe:a0:71:77:ce:54:fa:27:84:0d: 63:b4:73:c7:6e:98:0a:5c:e2:df:1b:1f:7e:a0:46: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.232.0/23 IPv6: 2001:67c:1984::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205955 Signature Algorithm: sha256WithRSAEncryption aa:40:79:34:02:af:b7:73:61:67:d5:f7:1f:67:ea:a9:c5:ed: 76:bf:70:ee:5e:1d:65:7d:b4:c9:da:8f:48:87:e9:67:6d:1e: 12:6f:7d:bd:07:e9:92:9a:e9:0c:46:8b:87:f8:99:21:c6:c5: a0:65:48:31:e8:7c:44:1f:e6:1e:87:7d:65:c9:c0:49:ce:4b: 28:b0:55:e7:d9:02:5b:c0:6c:44:23:af:e8:3c:27:a6:d3:5a: 4d:9e:2b:a7:4c:50:de:38:77:81:b9:09:ee:e6:cb:02:6c:e3: 30:d0:ab:e3:37:06:dd:e7:f5:bf:5f:ea:2e:58:e8:2a:5a:28: b3:68:8d:7c:aa:fb:00:13:0a:a6:be:e2:5f:e6:22:4c:a6:69: f1:42:dd:01:16:63:d6:2a:0f:ef:79:41:0a:54:e4:9c:73:93: 30:71:12:6e:34:41:3f:3f:60:b4:dd:30:f4:dc:e5:a3:bb:bb: 25:3f:f4:74:c9:d9:f7:49:6c:83:5d:df:7b:1e:3a:58:36:7d: e7:26:2b:ee:55:a7:73:c0:23:71:da:cd:4b:39:9a:aa:12:98: 83:94:cd:3d:5b:ee:94:75:0f:69:fc:6f:66:57:32:b6:bc:c6: 74:f4:18:95:38:f8:7a:48:f8:ff:ed:86:02:db:1f:d7:3c:ba: fd:d6:c7:4d -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+ORUs86Dj/J+gtXWRpsqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTM4NjIxMzRmMTQxMzY1ZWY4ODc5MDJlNjA1N2MyOGIyODI5YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUxhD5qMoFUcmH7uD7/YrNAff2P QuQRweeHR1TyoWCd5SKSrEN0BiPUSOVLD6kUhjhjYW2S1v+fknpaxYSY7wkb4oIh q9JgWOdjjpjcXXevE+3+CvILHeb2tuiNL6rVyStoIQALmrdBakbxCk7kzf+VClFW dHbVgHVSJw1WGfhzwSvzu+N+bWQhPcs1lh6le5C2JY5z6wyEzxlTO7RhVE5Oyz6F 5F4rVQsaxxVvgVm2iw7zPhVcihcdEmatHChA3aTpi1MPUvM2l85GBUxIgXBpDN4E EQ6RluyZ+3Q8OOEnEybtoP6gcXfOVPonhA1jtHPHbpgKXOLfGx9+oEbJCQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHo4YhNPFBNl74h5AuYFfCiygpydMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzQzNDE5 OS1kMjZlLTQxMmUtYTJiYi1kYTBhNDA2NWU4MjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNDM0MTk5 LWQyNmUtNDEyZS1hMmJiLWRhMGE0MDY1ZTgyNC8xL2VqaGlFMDhVRTJYdmlIa0M1 Z1Y4S0xLQ25KMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwnzoMA8EAgACMAkDBwAgAQZ8GYQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAySDMA0GCSqGSIb3DQEBCwUAA4IBAQCqQHk0Aq+3 c2Fn1fcfZ+qpxe12v3DuXh1lfbTJ2o9Ih+lnbR4Sb329B+mSmukMRouH+JkhxsWg ZUgx6HxEH+Yeh31lycBJzksosFXn2QJbwGxEI6/oPCem01pNniunTFDeOHeBuQnu 5ssCbOMw0KvjNwbd5/W/X+ouWOgqWiizaI18qvsAEwqmvuJf5iJMpmnxQt0BFmPW Kg/veUEKVOScc5MwcRJuNEE/P2C03TD03OWju7slP/R0ydn3SWyDXd97HjpYNn3n JivuVadzwCNx2s1LOZqqEpiDlM09W+6UdQ9p/G9mVzK2vMZ09BiVOPh6SPj/7YYC 2x/XPLr91sdN -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:41 2026 by rpki-client