This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer (raw, json) Hash identifier: 3BSIZRxsdCbuvpd4Ru7VjSk9V6VCTVdKZmOBzVr+5r0= Subject key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2741161835C58A8772C332B33D49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.249.32.0/22 IP: 2a09:2b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:27:41:16:18:35:c5:8a:87:72:c3:32:b3:3d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a43253a368fc6475853971ba9235be0233d8b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:88:c0:cb:2e:08:17:a3:d4:e6:fa:57:a8: 1a:06:d5:4d:da:ac:eb:1e:ba:84:e1:38:2e:8c:c1: e4:63:e8:b0:12:cf:f2:5f:de:8f:e4:a6:d9:79:3d: 1a:25:22:95:a2:e2:f9:fa:39:f7:98:36:42:7c:ad: e3:05:27:87:f9:0d:5e:3f:53:5c:37:b7:fb:3e:16: 43:c7:e6:0e:33:c6:6e:de:0f:fa:66:b8:fb:6a:f3: 74:b1:4c:dc:89:4f:00:ab:af:7b:d3:52:5b:41:54: 71:47:cb:34:9b:04:b7:68:e5:ce:be:ac:90:0e:ae: b1:48:7f:53:5a:ea:b6:80:33:95:e2:30:1d:53:fd: 07:9b:e3:26:3d:c0:68:5a:80:b1:fd:d9:37:65:f4: 08:ab:18:24:d7:9d:56:aa:16:db:b8:f8:64:6b:a3: d2:2b:c4:90:07:44:c3:62:21:5c:e0:0f:d7:2d:57: 48:b8:5d:33:8f:a9:87:0d:bd:bb:31:16:15:d7:29: 9d:60:7b:6b:63:c8:38:05:d6:7e:4c:d9:9e:29:e1: 01:74:5d:a6:11:65:66:39:43:1a:69:5c:6c:ac:de: 8a:49:bd:c8:c5:f3:5d:7b:fd:51:ee:93:f3:ab:2b: e7:27:5e:9e:a3:66:05:80:8e:9e:91:f4:4c:f0:18: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.32.0/22 IPv6: 2a09:2b40::/32 Signature Algorithm: sha256WithRSAEncryption 21:1a:a9:bf:b9:60:3d:a2:59:ca:be:06:a1:6a:ac:86:84:f6: b2:1a:2a:2c:f6:42:ba:b5:5c:12:74:d1:4c:1d:8d:af:28:ea: 46:b1:41:2d:05:0f:7f:cd:32:07:0a:e7:c4:b0:f2:a9:37:f2: 14:79:7e:cd:23:97:56:10:e3:e1:be:1b:7a:7d:c9:e1:9e:7b: d4:f3:3f:a6:58:75:b6:ed:43:f4:09:09:29:95:02:d6:3b:05: ec:60:2a:2c:03:60:4f:54:d5:13:0f:e6:92:91:08:23:92:dc: d5:a1:6f:1f:f5:86:e0:4e:21:55:96:b1:a0:80:9d:a5:19:38: 9a:d8:40:91:a7:da:9e:2a:b3:94:7b:b9:fd:00:a1:80:93:34: a1:63:45:5e:b1:9b:dd:f1:18:d8:ab:a6:4f:0d:66:66:d5:4a: 1b:67:7f:c1:b2:0c:76:70:57:31:0f:6c:ea:e5:43:93:f7:c8: cf:20:4a:cb:3d:88:90:8f:46:d2:9f:d2:3a:5b:eb:77:33:b4: ba:e1:5c:15:2a:7e:53:50:81:81:80:23:a1:a8:35:dd:59:88: a3:fb:41:a9:db:e2:c2:99:c5:b0:f6:b0:de:c0:f4:4b:9d:35: d7:ba:d6:ba:f2:17:cf:e4:ed:0e:ed:c3:1f:46:cc:30:f1:1f: f7:03:5a:cc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26ydBFhg1xYqHcsMysz1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTQzMjUzYTM2OGZjNjQ3NTg1Mzk3MWJhOTIzNWJlMDIzM2Q4YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyIwMsuCBej1Ob6V6gaBtVN2qzr HrqE4TgujMHkY+iwEs/yX96P5KbZeT0aJSKVouL5+jn3mDZCfK3jBSeH+Q1eP1Nc N7f7PhZDx+YOM8Zu3g/6Zrj7avN0sUzciU8Aq69701JbQVRxR8s0mwS3aOXOvqyQ Dq6xSH9TWuq2gDOV4jAdU/0Hm+MmPcBoWoCx/dk3ZfQIqxgk151WqhbbuPhka6PS K8SQB0TDYiFc4A/XLVdIuF0zj6mHDb27MRYV1ymdYHtrY8g4BdZ+TNmeKeEBdF2m EWVmOUMaaVxsrN6KSb3IxfNde/1R7pPzqyvnJ16eo2YFgI6ekfRM8BhzvwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHpDJTo2j8ZHWFOXG6kjW+AjPYt8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2JjYWU3 ZC05ZGFhLTRmYzEtODA3Yi03ZjZkZWEzOGU3YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvYmNhZTdk LTlkYWEtNGZjMS04MDdiLTdmNmRlYTM4ZTdhYS8xL2VrTWxPamFQeGtkWVU1Y2Jx U05iNENNOWkzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufkgMA0EAgACMAcDBQAqCStAMA0GCSqGSIb3 DQEBCwUAA4IBAQAhGqm/uWA9olnKvgahaqyGhPayGios9kK6tVwSdNFMHY2vKOpG sUEtBQ9/zTIHCufEsPKpN/IUeX7NI5dWEOPhvht6fcnhnnvU8z+mWHW27UP0CQkp lQLWOwXsYCosA2BPVNUTD+aSkQgjktzVoW8f9YbgTiFVlrGggJ2lGTia2ECRp9qe KrOUe7n9AKGAkzShY0VesZvd8RjYq6ZPDWZm1UobZ3/Bsgx2cFcxD2zq5UOT98jP IErLPYiQj0bSn9I6W+t3M7S64VwVKn5TUIGBgCOhqDXdWYij+0Gp2+LCmcWw9rDe wPRLnTXXuta68hfP5O0O7cMfRsww8R/3A1rM -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:52 2026 by rpki-client