This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer (raw, json) Hash identifier: rEqACDluraATsQLZkgCVAEMNIWVTMr/sxSV4+r2dz84= Subject key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A216776112255D779C6E9551FDB274 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52064 IP: 46.174.72.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:16:77:61:12:25:5d:77:9c:6e:95:51:fd:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:85:a8:5c:fb:58:fe:80:e8:2b:d6:65:30: c7:66:f8:f2:f4:53:32:ae:40:7e:86:8b:0e:e5:7d: ef:5b:6c:c3:74:6d:25:b8:f6:0c:44:62:46:3c:e8: fa:e9:84:5e:80:da:6a:0a:d3:13:37:ec:17:c4:ef: 04:3c:ba:d9:10:fd:a2:4b:7b:58:9c:24:8c:44:7f: 6d:7e:e8:52:bc:98:60:c4:68:eb:8f:cb:49:22:24: 9e:1b:83:67:11:dc:af:66:6a:38:df:44:be:8a:bb: 87:7c:44:bd:23:60:a7:ad:33:2a:eb:c9:ce:3b:f5: b3:7d:27:cc:86:ad:42:d8:bc:b8:91:4e:e8:2b:89: 47:1e:d1:53:ce:b5:79:13:5f:25:4d:2e:22:b4:ad: c8:4d:92:5b:8d:22:eb:ad:16:e4:9f:cb:1f:bf:f0: cb:57:68:10:ae:60:da:62:80:ab:be:f9:61:94:60: 9c:69:6d:66:2d:91:16:16:28:6c:2d:4c:56:48:7d: f1:ae:25:91:52:0f:27:05:84:cf:9c:03:60:dc:ac: 5a:da:0f:c3:cb:fa:a1:ea:47:13:29:99:4b:40:2b: 80:2a:03:0a:84:13:12:d3:28:c3:88:cf:47:0d:2f: db:90:6c:24:14:03:82:6d:a8:c2:d8:a8:49:87:2b: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52064 Signature Algorithm: sha256WithRSAEncryption b0:42:25:d2:48:65:36:1a:ce:b1:13:1b:1f:e7:f2:c9:6b:17: 95:65:95:b1:5c:be:49:e2:5a:ee:62:52:06:76:1d:b5:4f:6c: e0:ae:7e:8d:23:61:b7:51:72:46:81:2d:4d:f2:dc:98:4d:67: 6f:51:56:00:b7:42:18:4f:80:de:bc:55:49:5f:81:2e:bf:c6: 75:b7:cd:7e:77:e6:8b:85:70:48:ea:cf:e2:0d:3c:a6:3e:9d: ee:27:75:96:5e:e3:35:b9:54:fe:c2:25:65:95:56:b4:b9:69: 0d:c7:c5:52:26:c2:b2:0a:84:cc:b2:fb:13:28:ae:b9:e0:f1: 9c:93:49:98:82:7e:dc:85:7a:f4:66:d3:1b:53:fb:6c:3e:4f: d4:c7:c1:0e:a3:31:e9:af:fc:d3:9d:09:0e:6b:35:72:a7:9b: f3:d1:5b:ba:7c:ed:49:54:20:af:50:b8:47:12:f2:0a:e8:ef: 1c:0b:5b:54:45:74:ff:a6:01:8d:98:7f:14:4f:f7:9c:8c:26: 85:0c:8b:c3:43:18:1c:bd:bd:f6:0e:70:83:f9:43:81:55:99: 33:b4:c9:0e:10:75:02:50:dd:6e:11:b0:83:cd:26:a8:43:d8: 15:a5:cd:1e:72:6a:26:5f:cd:ea:18:05:c3:7c:76:d9:9d:c5: 37:81:96:69 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4ohZ3YRIlXXecbpVR/bJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDc5N2ViNWY5YWE5YWJlNTIwMDhjZTdmMjFhYjQ0YWZkZWVhMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst2FqFz7WP6A6CvWZTDHZvjy9FMy rkB+hosO5X3vW2zDdG0luPYMRGJGPOj66YRegNpqCtMTN+wXxO8EPLrZEP2iS3tY nCSMRH9tfuhSvJhgxGjrj8tJIiSeG4NnEdyvZmo430S+iruHfES9I2CnrTMq68nO O/WzfSfMhq1C2Ly4kU7oK4lHHtFTzrV5E18lTS4itK3ITZJbjSLrrRbkn8sfv/DL V2gQrmDaYoCrvvlhlGCcaW1mLZEWFihsLUxWSH3xriWRUg8nBYTPnANg3Kxa2g/D y/qh6kcTKZlLQCuAKgMKhBMS0yjDiM9HDS/bkGwkFAOCbajC2KhJhyvaBwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBB5frX5qpq+UgCM5/IatEr97qDQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2Y1Yzhh My1lNWNhLTQxYWUtYWY4YS04ZGI3MDgzNDc0MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvZjVjOGEz LWU1Y2EtNDFhZS1hZjhhLThkYjcwODM0NzQzOC8xL0VIbC10Zm1xbXI1U0FJem44 aHEwU3YzdW9OQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDLq5IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLYDANBgkqhkiG9w0BAQsFAAOCAQEAsEIl0khlNhrOsRMbH+fyyWsXlWWVsVy+ SeJa7mJSBnYdtU9s4K5+jSNht1FyRoEtTfLcmE1nb1FWALdCGE+A3rxVSV+BLr/G dbfNfnfmi4VwSOrP4g08pj6d7id1ll7jNblU/sIlZZVWtLlpDcfFUibCsgqEzLL7 EyiuueDxnJNJmIJ+3IV69GbTG1P7bD5P1MfBDqMx6a/8050JDms1cqeb89Fbunzt SVQgr1C4RxLyCujvHAtbVEV0/6YBjZh/FE/3nIwmhQyLw0MYHL299g5wg/lDgVWZ M7TJDhB1AlDdbhGwg80mqEPYFaXNHnJqJl/N6hgFw3x22Z3FN4GWaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:38 2026 by rpki-client