This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer File: EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer (raw, json) Hash identifier: KeDDWpsw/EuJ/6DXKF5gEUy1clUjkXIepbKssKUHhdM= Subject key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105B4E799A9E760E4922A1036DD1D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205649 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:4e:79:9a:9e:76:0e:49:22:a1:03:6d:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1015129921e7e15faef736024a4337340c857050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:45:be:1d:60:cd:8e:0d:d4:bd:a9:de:2f: b9:8b:66:1b:b4:fe:4d:b0:cb:a6:88:f9:78:64:e0: 58:01:f7:f4:cc:be:fd:55:77:c3:e0:c5:e0:69:8e: 53:24:b1:53:d6:ad:bd:5b:a1:e3:95:89:c3:3f:59: 8b:a2:13:f9:8b:d3:8f:4d:59:b0:cc:21:9f:fb:10: d8:e0:b2:2c:7c:25:a8:10:ae:81:8b:8f:9e:2b:7b: 8d:ea:09:16:7a:9a:5b:0c:d0:50:c3:4c:ab:a0:0b: 8f:f4:d5:35:45:9c:0a:4d:09:82:08:ca:3b:12:38: 51:32:ab:7f:e1:cc:ac:5c:90:5a:0e:83:52:47:fb: 0c:1a:4a:f3:0e:49:06:53:29:8b:13:a9:27:c0:8d: 51:bf:d8:ac:3b:f0:83:d5:db:43:17:aa:a0:65:c2: f4:23:bc:db:cb:6e:bf:78:49:f1:14:6b:20:c2:33: 3f:f0:53:48:b8:e8:a8:a5:66:e9:ea:5a:80:72:19: 4a:ae:66:f8:67:75:40:fc:da:8d:c0:fe:17:1b:df: b8:98:80:cf:80:09:04:6d:1e:a8:d4:a3:ee:e6:f2: e5:3f:9b:82:60:cf:ff:f6:55:99:7b:27:3d:c7:38: 02:6e:bc:62:bd:a6:71:66:01:6e:48:c3:59:24:56: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205649 Signature Algorithm: sha256WithRSAEncryption 11:a5:3e:86:d2:0d:ea:4f:de:9c:42:5b:ea:86:ad:17:42:30: 99:d5:a4:df:a9:ef:e9:ba:52:54:6c:f6:fe:8a:03:43:ad:ca: 24:b2:c9:fe:38:eb:bf:90:d2:02:1d:75:37:07:3c:27:14:58: c4:21:ca:e7:35:ad:c4:c7:4b:b0:d9:79:1e:e1:3c:b4:eb:8f: 04:b0:35:90:41:40:b8:fd:4f:ba:ac:2c:b8:e1:95:ba:8d:ea: ec:d5:79:bf:0d:e8:b7:7c:c2:31:42:07:d1:e0:03:ea:ea:93: 94:00:c2:ab:64:a0:c0:a3:dc:69:ad:2d:39:85:fd:a6:f6:87: 4a:c3:45:b1:64:ad:5d:b1:27:64:b8:59:2e:ef:e1:f4:6d:a6: 75:a7:1c:08:da:b0:b3:dd:a0:c9:d0:a2:de:c2:35:b0:ff:e7: c5:7e:c2:63:95:c4:c6:1f:d6:9c:2a:f8:e4:3b:29:d7:c2:28: 5b:18:8a:90:c8:c7:f1:21:0b:26:38:9a:e0:08:34:87:9b:ec: 42:e1:a8:31:4f:10:a7:96:12:c2:80:2c:3b:63:5e:d5:09:ca: 62:aa:7a:3e:7f:4a:5f:22:79:8c:36:a7:ea:30:45:81:66:44: d6:5d:f6:dc:af:6e:09:4d:28:31:61:95:11:c9:25:41:31:6e: eb:01:af:5a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EFtOeZqedg5JIqEDbdHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDE1MTI5OTIxZTdlMTVmYWVmNzM2MDI0YTQzMzczNDBjODU3MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqlFvh1gzY4N1L2p3i+5i2YbtP5N sMumiPl4ZOBYAff0zL79VXfD4MXgaY5TJLFT1q29W6HjlYnDP1mLohP5i9OPTVmw zCGf+xDY4LIsfCWoEK6Bi4+eK3uN6gkWeppbDNBQw0yroAuP9NU1RZwKTQmCCMo7 EjhRMqt/4cysXJBaDoNSR/sMGkrzDkkGUymLE6knwI1Rv9isO/CD1dtDF6qgZcL0 I7zby26/eEnxFGsgwjM/8FNIuOiopWbp6lqAchlKrmb4Z3VA/NqNwP4XG9+4mIDP gAkEbR6o1KPu5vLlP5uCYM//9lWZeyc9xzgCbrxivaZxZgFuSMNZJFa+UwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBAVEpkh5+Ffrvc2AkpDNzQMhXBQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2ZjMWZh NS0xMjUyLTQ5MzItOThkYy1lZDk1ZjU2YTFhNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZmMxZmE1 LTEyNTItNDkzMi05OGRjLWVkOTVmNTZhMWE1NS8xL0VCVVNtU0huNFYtdTl6WUNT a00zTkF5RmNGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjUTANBgkqhkiG9w0BAQsFAAOCAQEAEaU+htIN6k/e nEJb6oatF0IwmdWk36nv6bpSVGz2/ooDQ63KJLLJ/jjrv5DSAh11Nwc8JxRYxCHK 5zWtxMdLsNl5HuE8tOuPBLA1kEFAuP1PuqwsuOGVuo3q7NV5vw3ot3zCMUIH0eAD 6uqTlADCq2SgwKPcaa0tOYX9pvaHSsNFsWStXbEnZLhZLu/h9G2mdaccCNqws92g ydCi3sI1sP/nxX7CY5XExh/WnCr45Dsp18IoWxiKkMjH8SELJjia4Ag0h5vsQuGo MU8Qp5YSwoAsO2Ne1QnKYqp6Pn9KXyJ5jDan6jBFgWZE1l323K9uCU0oMWGVEckl QTFu6wGvWg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:53 2026 by rpki-client