This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer File: ewjhaHh0S4i4QgPu_i13qH2rkLE.cer (raw, json) Hash identifier: kz/2YHDrnmNahr2fZPi5qh2PPLU+IAevM4SFgEGt0tc= Subject key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AD77A1D74FE48413C6A2463E73D37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34903 IP: 45.130.208.0/22 IP: 2a0e:c240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d7:7a:1d:74:fe:48:41:3c:6a:24:63:e7:3d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:34:87:41:59:e8:d5:c8:f9:bd:d3:27:51: a0:1b:66:e1:5e:1a:95:cd:31:6d:2d:d7:96:b2:5a: f6:bc:c1:3a:62:2a:30:a0:2f:26:b1:ea:47:79:cd: 2d:d0:b5:72:68:13:21:1d:07:7e:1b:a3:f1:5c:ad: 6e:35:7a:7c:71:ef:3f:58:78:fb:3b:ac:31:d2:43: 2e:bf:82:6b:b3:a2:68:12:71:d1:c8:46:62:f6:57: 21:1c:f7:35:24:28:3d:89:5c:64:8e:75:46:37:64: ab:30:75:9e:9a:2d:21:6e:bb:89:e5:4b:a7:dd:0e: cd:59:96:7d:61:51:4d:38:2a:e0:ed:b8:49:1a:9d: dd:47:26:35:d3:eb:1b:3a:b6:77:96:5c:53:11:55: 71:ca:01:e6:a1:e8:d5:40:2a:c4:f4:4b:ae:8a:89: 66:db:c3:a4:34:ea:96:72:d2:db:dd:85:74:ca:f6: 3b:01:17:23:2d:7f:7f:99:ee:3f:38:fb:8f:10:b6: 48:33:b4:d1:93:85:c2:ee:79:cf:a6:9b:ab:16:3f: 86:d9:8d:9d:c7:97:f2:84:c9:39:4e:9f:be:52:a3: cb:eb:a3:42:4a:a0:c1:66:58:29:20:38:b2:34:1a: ef:d9:7c:96:06:1c:9d:10:65:ec:ce:1a:42:7e:e8: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.208.0/22 IPv6: 2a0e:c240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34903 Signature Algorithm: sha256WithRSAEncryption 24:f3:a7:4c:3a:23:b6:01:77:7c:8a:5e:76:c9:0f:a7:e7:d6: 27:83:a8:a9:85:15:bd:c3:7a:00:81:35:fe:0b:65:b1:78:d9: 65:5b:13:a0:de:0a:3a:3a:0c:4d:40:96:68:14:0a:64:ed:6d: b0:90:6c:4e:94:5f:58:5b:7c:20:2e:5c:0b:d0:ab:89:cd:73: 88:19:1b:95:37:dd:9f:3b:8a:e1:88:25:04:b2:1e:20:95:15: 42:39:c0:f3:14:99:2f:b8:88:1b:40:e2:17:32:0a:b6:ef:71: 6c:cd:4b:dd:50:c2:af:1e:9e:fc:e7:7b:92:7c:4c:a7:63:8e: aa:8b:cf:ee:d5:f0:d8:28:81:eb:43:3b:b0:87:56:39:14:8a: e7:5e:8e:74:0b:2f:37:dd:28:b1:9a:90:e4:d6:ed:99:cd:85: b8:1f:ba:12:8e:39:82:88:c6:8e:b0:52:ca:bd:aa:4f:27:8e: c5:04:04:a9:d0:7b:b5:8a:f5:c2:b5:aa:1b:8a:f7:11:22:65: f6:8a:bf:73:09:2a:31:f5:9f:e3:21:0e:bd:17:40:c8:2e:87: 0d:7e:58:d9:fa:de:bb:23:c0:f5:63:8f:51:7e:89:da:67:6a: 90:25:b8:28:cd:7a:0a:dd:f7:a4:f2:39:00:a3:e8:1c:59:9d: 2e:67:e3:6b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9Wtd6HXT+SEE8aiRj5z03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjA4ZTE2ODc4NzQ0Yjg4Yjg0MjAzZWVmZTJkNzdhODdkYWI5MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8U0h0FZ6NXI+b3TJ1GgG2bhXhqV zTFtLdeWslr2vME6YiowoC8msepHec0t0LVyaBMhHQd+G6PxXK1uNXp8ce8/WHj7 O6wx0kMuv4Jrs6JoEnHRyEZi9lchHPc1JCg9iVxkjnVGN2SrMHWemi0hbruJ5Uun 3Q7NWZZ9YVFNOCrg7bhJGp3dRyY10+sbOrZ3llxTEVVxygHmoejVQCrE9Euuiolm 28OkNOqWctLb3YV0yvY7ARcjLX9/me4/OPuPELZIM7TRk4XC7nnPppurFj+G2Y2d x5fyhMk5Tp++UqPL66NCSqDBZlgpIDiyNBrv2XyWBhydEGXszhpCfuh7jwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHsI4Wh4dEuIuEID7v4td6h9q5CxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzVlYzc5 NC0xYmIzLTRjNjUtYWM0Mi1hMThjMDZlYzUyZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNWVjNzk0 LTFiYjMtNGM2NS1hYzQyLWExOGMwNmVjNTJlOC8xL2V3amhhSGgwUzRpNFFnUHVf aTEzcUgycmtMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYLQMA0EAgACMAcDBQMqDsJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCIVzANBgkqhkiG9w0BAQsFAAOCAQEAJPOnTDojtgF3 fIpedskPp+fWJ4OoqYUVvcN6AIE1/gtlsXjZZVsToN4KOjoMTUCWaBQKZO1tsJBs TpRfWFt8IC5cC9Cric1ziBkblTfdnzuK4YglBLIeIJUVQjnA8xSZL7iIG0DiFzIK tu9xbM1L3VDCrx6e/Od7knxMp2OOqovP7tXw2CiB60M7sIdWORSK516OdAsvN90o sZqQ5Nbtmc2FuB+6Eo45gojGjrBSyr2qTyeOxQQEqdB7tYr1wrWqG4r3ESJl9oq/ cwkqMfWf4yEOvRdAyC6HDX5Y2freuyPA9WOPUX6J2mdqkCW4KM16Ct33pPI5AKPo HFmdLmfjaw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:26 2026 by rpki-client