This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer File: EJsFo11BCaHkqDTMrazdLG9WsFo.cer (raw, json) Hash identifier: HgOyHX/wj/DlkH4aMi48t/OKUI33G9MRjgJNs9tyDF0= Subject key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B0BF7D998BF618446D8DD438F007 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.139.40.0/22 IP: 2a07:13c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b0:bf:7d:99:8b:f6:18:44:6d:8d:d4:38:f0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:25:b1:4f:ee:fc:fb:b5:a2:3d:3f:7e:ad: 61:a3:c3:a9:d4:e4:8b:1c:70:84:a0:cb:52:b5:62: 5a:d1:f8:87:9a:bf:79:06:73:1c:a8:af:18:10:b9: 30:c5:73:fa:90:7f:32:ae:e5:d7:57:76:15:ae:7a: a3:f6:f4:b3:98:b6:bf:da:0f:4b:18:fc:ec:3f:e5: db:5d:7b:9f:3f:88:b9:18:2a:d0:9e:c1:db:21:ce: 4f:23:f4:4d:67:2a:80:00:28:a2:b0:8a:d5:1e:94: 09:4c:18:8c:71:3f:a0:0c:c1:8a:73:e3:2c:92:0f: cd:66:0c:b1:7b:3a:43:09:15:27:90:41:8e:99:53: 64:c5:90:8f:79:c1:d1:18:73:05:89:6e:9d:3b:d5: f0:3c:9d:4b:5a:fe:e9:63:b3:53:cb:d3:a1:0b:74: 3d:d6:97:45:fe:24:bb:10:77:cd:a9:c8:6f:b3:68: 18:58:a7:91:46:8a:d5:62:90:b0:a7:73:e8:c0:ee: ef:cf:af:ec:71:59:5b:c5:48:22:e1:74:6e:c7:8b: 0c:3d:c7:9d:a6:b2:5e:68:0d:9d:22:4c:90:54:7e: 87:b6:81:78:b5:c7:45:e0:8f:85:12:e5:af:6f:ad: 5f:23:74:06:9e:db:50:64:58:bd:15:c4:5c:33:ca: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.40.0/22 IPv6: 2a07:13c0::/29 Signature Algorithm: sha256WithRSAEncryption 4b:8f:89:46:1b:a8:37:a0:71:06:88:f0:4d:97:d2:53:b9:f6: 01:d9:ce:10:7a:00:f0:0a:dd:89:05:75:bc:95:07:8a:00:a7: 3f:5d:46:60:ba:90:ac:15:4a:76:38:15:19:a6:36:38:ac:68: c0:c5:c7:a0:a3:1e:b5:76:75:a2:88:fa:d1:e1:91:63:8b:7c: 70:63:37:91:f2:33:7d:1e:98:ee:cd:fb:17:3f:8e:e2:b0:75: 1b:4c:e2:d3:0d:90:a2:c3:26:96:53:fa:c6:db:1c:ce:0b:48: d1:8b:45:c6:9e:23:4f:9d:55:d3:55:88:6e:56:b5:57:06:33: 5d:77:a3:12:0d:2c:f1:76:2a:68:68:65:8a:21:cf:ab:87:6c: f0:6d:eb:25:81:a2:e3:b0:fc:bf:db:90:35:23:c5:3b:fc:69: 32:38:8e:8a:57:e7:14:08:91:f2:a3:9d:aa:c8:7b:6e:a6:31: b7:0a:ab:a3:e5:6d:53:d5:e5:ff:91:5f:7b:d1:ba:e5:9e:fd: c3:f8:d9:10:ab:85:84:2d:cb:9b:47:91:4c:85:15:03:8b:0c: be:9e:31:83:7c:71:06:b0:bc:f7:89:42:b0:4e:bf:9a:93:1d: bd:01:72:10:5b:b6:56:3b:f7:f0:16:ba:00:83:fd:37:a0:e5: 66:d9:aa:6a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FbC/fZmL9hhEbY3UOPAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDliMDVhMzVkNDEwOWExZTRhODM0Y2NhZGFjZGQyYzZmNTZiMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknAlsU/u/Pu1oj0/fq1ho8Op1OSL HHCEoMtStWJa0fiHmr95BnMcqK8YELkwxXP6kH8yruXXV3YVrnqj9vSzmLa/2g9L GPzsP+XbXXufP4i5GCrQnsHbIc5PI/RNZyqAACiisIrVHpQJTBiMcT+gDMGKc+Ms kg/NZgyxezpDCRUnkEGOmVNkxZCPecHRGHMFiW6dO9XwPJ1LWv7pY7NTy9OhC3Q9 1pdF/iS7EHfNqchvs2gYWKeRRorVYpCwp3PowO7vz6/scVlbxUgi4XRux4sMPced prJeaA2dIkyQVH6HtoF4tcdF4I+FEuWvb61fI3QGnttQZFi9FcRcM8qS9wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBCbBaNdQQmh5Kg0zK2s3SxvVrBaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2NhYWMw ZS01MjY4LTQyM2EtYWZiMC00NDkxNTJmMWQzYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvY2FhYzBl LTUyNjgtNDIzYS1hZmIwLTQ0OTE1MmYxZDNiNy8xL0VKc0ZvMTFCQ2FIa3FEVE1y YXpkTEc5V3NGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYsoMA0EAgACMAcDBQMqBxPAMA0GCSqGSIb3 DQEBCwUAA4IBAQBLj4lGG6g3oHEGiPBNl9JTufYB2c4QegDwCt2JBXW8lQeKAKc/ XUZgupCsFUp2OBUZpjY4rGjAxcegox61dnWiiPrR4ZFji3xwYzeR8jN9HpjuzfsX P47isHUbTOLTDZCiwyaWU/rG2xzOC0jRi0XGniNPnVXTVYhuVrVXBjNdd6MSDSzx dipoaGWKIc+rh2zwbeslgaLjsPy/25A1I8U7/GkyOI6KV+cUCJHyo52qyHtupjG3 Cquj5W1T1eX/kV970brlnv3D+NkQq4WELcubR5FMhRUDiwy+njGDfHEGsLz3iUKw Tr+akx29AXIQW7ZWO/fwFroAg/03oOVm2apq -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:24 2026 by rpki-client