This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer File: EImgJR4yvzxID1qUq7X7TrkGpbM.cer (raw, json) Hash identifier: SlY9on5hMni8bzT3Vf45d7nsLtjgg7V4jlxuhUzSRcE= Subject key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A5C7D8B1BF267E609812AFD9E922 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.49.23.0/24 IP: 194.55.162.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a5:c7:d8:b1:bf:26:7e:60:98:12:af:d9:e9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:d6:0a:9d:00:21:0d:1a:23:a1:90:6b:3c: 11:58:69:07:ba:5f:e1:80:c7:8a:a3:13:8c:4c:9a: 07:7e:6b:7a:e2:7b:b7:39:51:7c:8c:3c:22:1e:f4: 0e:ff:fc:8b:98:eb:4c:8d:b1:5c:b4:8f:81:fa:4d: a1:a2:6e:fe:cc:42:b1:12:c1:80:57:82:e4:f2:56: a9:ee:bc:d3:eb:1f:a4:14:30:ec:04:c2:63:32:cc: 55:66:3a:7c:9d:6f:aa:c1:ef:a3:03:41:b3:e1:0a: 8c:b9:2a:93:65:17:ef:46:7f:1f:0a:28:d8:b0:44: c9:68:5d:3b:e6:08:7c:f6:6d:0a:89:66:f1:fa:0d: 4f:5c:ff:7c:f6:27:fa:87:d2:b1:39:81:ea:e4:5f: ff:0b:07:5b:ff:c1:c8:8a:6d:a9:5a:ca:ae:01:33: 66:f3:9c:92:19:cb:20:0f:ed:a9:18:9b:7e:f3:09: f4:83:64:81:28:87:c4:1a:6e:9a:6c:71:c2:20:f6: 34:27:b5:0b:19:41:e8:b2:fb:58:2a:fe:14:e5:c6: 25:f0:d3:11:15:32:33:e9:09:91:a5:52:9b:a9:59: 47:b6:56:cb:87:5f:f7:bc:3a:5b:04:d2:0e:75:25: 22:ed:a7:cd:23:20:7b:d6:e1:d9:cb:3e:9f:5f:7d: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.23.0/24 194.55.162.0/24 Signature Algorithm: sha256WithRSAEncryption 29:dc:2c:6e:75:43:10:b4:49:ee:ee:4a:3e:4b:c3:b6:fc:e0: 4c:55:d6:8f:82:eb:22:5a:04:00:ea:98:c1:34:34:da:fc:43: dd:8c:12:95:2c:07:65:38:6e:cc:c1:ec:41:ac:6e:8e:f6:ef: 3f:ab:fc:7c:5b:ad:8f:1b:c1:24:82:bc:a9:0b:89:cb:75:ed: 02:c1:d4:aa:3b:a7:e1:57:c9:01:e2:8a:8a:8f:23:fb:3f:6a: f0:58:c9:4a:48:14:50:a1:71:9a:e6:2a:5e:fc:a3:0f:44:5a: 47:d0:24:48:dd:d1:16:39:ac:34:0d:b2:7a:69:6f:8a:06:cf: dc:94:1b:a3:4d:69:09:66:2d:82:48:1d:4f:77:19:ef:c8:20: 6e:66:00:b2:f7:8f:42:f4:ff:7d:07:46:80:92:92:c6:43:0a: 3b:95:6a:f5:9a:16:01:a5:c9:00:a4:e8:b6:41:79:e3:23:6a: 66:48:70:03:33:f1:7f:da:a1:01:e2:39:d9:38:5e:9c:c0:8f: 60:55:f3:c5:ab:b0:3a:ae:23:c2:63:61:df:35:77:3c:0f:8a: 0a:b3:8f:26:58:76:de:aa:fa:85:14:ec:14:9e:07:d5:4e:b4: f2:cc:1f:2c:e9:85:ee:43:06:ad:f3:4e:03:f3:ef:b8:e0:2d: e7:fd:aa:36 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3WKXH2LG/Jn5gmBKv2ekiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDg5YTAyNTFlMzJiZjNjNDgwZjVhOTRhYmI1ZmI0ZWI5MDZhNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPWCp0AIQ0aI6GQazwRWGkHul/h gMeKoxOMTJoHfmt64nu3OVF8jDwiHvQO//yLmOtMjbFctI+B+k2hom7+zEKxEsGA V4Lk8lap7rzT6x+kFDDsBMJjMsxVZjp8nW+qwe+jA0Gz4QqMuSqTZRfvRn8fCijY sETJaF075gh89m0KiWbx+g1PXP989if6h9KxOYHq5F//Cwdb/8HIim2pWsquATNm 85ySGcsgD+2pGJt+8wn0g2SBKIfEGm6abHHCIPY0J7ULGUHosvtYKv4U5cYl8NMR FTIz6QmRpVKbqVlHtlbLh1/3vDpbBNIOdSUi7afNIyB71uHZyz6fX32XGwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBCJoCUeMr88SA9alKu1+065BqWzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzdkYjdh OC04MjdmLTRjZjAtYWJjOS1iOGM0NmY5NTY0MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvN2RiN2E4 LTgyN2YtNGNmMC1hYmM5LWI4YzQ2Zjk1NjQwZS8xL0VJbWdKUjR5dnp4SUQxcVVx N1g3VHJrR3BiTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwjEXAwQAwjeiMA0GCSqGSIb3DQEBCwUAA4IB AQAp3CxudUMQtEnu7ko+S8O2/OBMVdaPgusiWgQA6pjBNDTa/EPdjBKVLAdlOG7M wexBrG6O9u8/q/x8W62PG8EkgrypC4nLde0CwdSqO6fhV8kB4oqKjyP7P2rwWMlK SBRQoXGa5ipe/KMPRFpH0CRI3dEWOaw0DbJ6aW+KBs/clBujTWkJZi2CSB1Pdxnv yCBuZgCy949C9P99B0aAkpLGQwo7lWr1mhYBpckApOi2QXnjI2pmSHADM/F/2qEB 4jnZOF6cwI9gVfPFq7A6riPCY2HfNXc8D4oKs48mWHbeqvqFFOwUngfVTrTyzB8s 6YXuQwat804D8++44C3n/ao2 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:06 2026 by rpki-client