This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer File: ekeMWqImonjosZBvNxxgz8fYfo4.cer (raw, json) Hash identifier: /2WtOkT2U8hGaRuaoqz0p2bBY0M8pSbQVraT8BHWtoM= Subject key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB717D096FE5713975485AD5AF9826 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.106.144.0/21 IP: 94.143.104.0/21 IP: 185.236.124.0/22 IP: 212.1.216.0/21 IP: 2a03:480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:7d:09:6f:e5:71:39:75:48:5a:d5:af:98:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:8c:2a:8d:93:6a:0b:82:18:ba:e5:a1:aa: 7f:66:a2:2d:60:ed:0a:45:bc:a8:a4:3a:d0:44:dc: e5:f9:de:12:19:01:70:09:4f:15:d6:c2:32:d2:bf: 4d:42:8e:74:19:b7:d6:7c:cc:4a:ba:85:76:81:d5: a8:1a:48:94:b5:c0:11:26:bb:d5:7d:d3:aa:03:f2: 0f:58:9d:84:10:8a:3d:ae:d0:05:51:48:24:e4:0a: f6:0c:35:10:97:1f:ce:b9:fa:57:cf:55:5e:e6:97: 04:ca:47:35:95:db:77:37:93:9d:97:15:6f:f5:bf: 74:b4:0f:79:5d:f0:f7:b5:54:e6:2b:82:8a:53:02: 84:05:0e:34:66:17:cc:f2:7c:88:cf:50:85:90:23: e5:e7:22:b8:c6:fd:c3:c6:bf:b2:c6:da:52:83:1d: ad:bd:c8:70:64:5f:d7:6d:8c:41:a4:39:22:52:86: 5d:bd:99:d5:3c:ff:96:0c:00:61:db:7a:dd:5d:41: 12:66:df:d7:1a:17:be:06:fa:f9:ab:64:82:17:38: 00:b0:46:b1:fa:2a:13:56:5f:03:7c:ba:48:59:7d: ff:87:b0:31:57:70:54:92:89:c2:0e:88:27:46:7f: 55:ed:bd:53:ee:94:5b:89:59:0a:d1:5c:db:e5:87: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.144.0/21 94.143.104.0/21 185.236.124.0/22 212.1.216.0/21 IPv6: 2a03:480::/32 Signature Algorithm: sha256WithRSAEncryption 66:f8:a0:0e:61:9e:1f:0f:38:a3:3f:1c:b9:5d:8d:db:27:08: 2d:c4:d9:28:b1:bb:4a:2f:29:ba:b6:06:ef:64:ac:47:fc:b4: 6e:2a:0d:34:01:08:64:c2:49:d9:53:f9:92:23:df:8c:45:32: de:37:af:6d:22:6c:6a:7b:69:a7:72:c3:04:67:aa:f5:e3:71: 92:a4:ee:c8:70:56:d8:aa:15:61:54:a9:c9:4c:c4:9e:66:40: 47:a5:59:c6:4f:74:00:8d:66:3b:16:a1:0d:4e:e5:8d:3c:cf: c7:37:62:32:53:b6:cf:99:46:66:ac:b2:72:69:1b:c9:fc:9a: 48:5b:24:3d:88:c3:43:62:64:09:e1:82:72:30:65:17:6c:6a: 07:c8:6e:03:25:b5:a5:e4:d2:d4:70:86:17:36:bb:5c:c2:bc: 28:2a:26:9b:91:7e:fa:4b:f5:9b:77:ed:cc:59:55:2c:98:4c: 5b:90:35:6a:d3:0c:50:11:d7:88:c2:77:50:f5:52:1a:2e:b1: f8:39:07:78:d5:0f:5c:84:8c:bd:25:ae:ae:ac:40:99:12:64: a8:7a:d5:34:15:ce:8b:85:38:36:70:c7:f6:68:9f:82:21:78: 68:0a:19:04:c8:a1:48:56:17:dc:2d:dc:91:93:47:49:ce:c7: 65:90:c3:3d -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt263F9CW/lcTl1SFrVr5gmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTQ3OGM1YWEyMjZhMjc4ZThiMTkwNmYzNzFjNjBjZmM3ZDg3ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziGMKo2TaguCGLrloap/ZqItYO0K RbyopDrQRNzl+d4SGQFwCU8V1sIy0r9NQo50GbfWfMxKuoV2gdWoGkiUtcARJrvV fdOqA/IPWJ2EEIo9rtAFUUgk5Ar2DDUQlx/OufpXz1Ve5pcEykc1ldt3N5OdlxVv 9b90tA95XfD3tVTmK4KKUwKEBQ40ZhfM8nyIz1CFkCPl5yK4xv3Dxr+yxtpSgx2t vchwZF/XbYxBpDkiUoZdvZnVPP+WDABh23rdXUESZt/XGhe+Bvr5q2SCFzgAsEax +ioTVl8DfLpIWX3/h7AxV3BUkonCDognRn9V7b1T7pRbiVkK0Vzb5YeOCQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHpHjFqiJqJ46LGQbzccYM/H2H6OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzUxYTUy MC1lMDhkLTQzYjMtYTZiMC1kNzZlYzljYzBkMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTFhNTIw LWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8xL2VrZU1XcUltb25qb3NaQnZO eHhnejhmWWZvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDWWqQAwQDXo9oAwQCuex8AwQD1AHYMA0EAgAC MAcDBQAqAwSAMA0GCSqGSIb3DQEBCwUAA4IBAQBm+KAOYZ4fDzijPxy5XY3bJwgt xNkosbtKLym6tgbvZKxH/LRuKg00AQhkwknZU/mSI9+MRTLeN69tImxqe2mncsME Z6r143GSpO7IcFbYqhVhVKnJTMSeZkBHpVnGT3QAjWY7FqENTuWNPM/HN2IyU7bP mUZmrLJyaRvJ/JpIWyQ9iMNDYmQJ4YJyMGUXbGoHyG4DJbWl5NLUcIYXNrtcwrwo KiabkX76S/Wbd+3MWVUsmExbkDVq0wxQEdeIwndQ9VIaLrH4OQd41Q9chIy9Ja6u rECZEmSoetU0Fc6LhTg2cMf2aJ+CIXhoChkEyKFIVhfcLdyRk0dJzsdlkMM9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:56 2026 by rpki-client