This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer File: EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer (raw, json) Hash identifier: d7bmjekL4JFjpR0R+YH6JHjSKLOylr7fykA3JIH4uTo= Subject key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F2A2EB40629068829BABD4523E73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50508 IP: 193.105.87.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f2:a2:eb:40:62:90:68:82:9b:ab:d4:52:3e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:06:79:96:45:ef:8a:43:b2:a1:8b:88:8e: 0e:7d:84:3a:19:35:4e:7a:6c:f9:b9:47:ca:4b:42: 71:1c:23:15:d5:ea:b9:c2:a3:97:2e:24:aa:ef:ec: 0f:4b:1b:c0:a0:5d:7d:ac:c3:47:2e:46:c5:1e:fb: 49:51:4c:b4:a3:66:94:66:cd:26:25:9e:5b:c0:7a: 2e:3d:47:19:a4:35:9e:98:4d:1f:85:1c:3a:fe:3a: ce:05:e4:df:c6:ee:9c:43:7c:38:28:89:78:6d:a8: 7b:9f:c4:c7:f6:62:c8:ef:32:46:1c:16:6f:e4:ef: 3a:2a:cf:f7:61:4d:5e:4e:c4:13:ba:22:56:58:b0: a5:ad:60:27:82:e2:ba:2a:cb:44:fc:4e:d9:55:00: d6:e4:ee:fb:00:e1:32:5c:84:b5:da:0b:be:06:d6: a1:cd:5d:ee:22:fd:99:65:53:ad:45:9c:d2:37:63: 96:b5:5b:64:0a:47:a3:9d:bc:70:1b:05:64:94:47: 3a:a0:5d:4e:f2:c3:67:be:66:ca:b5:fd:bb:ca:e3: d3:33:41:a8:49:31:10:99:33:7d:ae:27:9e:b2:7c: bb:90:4c:eb:0e:e4:01:d3:06:c1:02:29:d8:e5:fb: 3d:67:e2:70:3b:29:2f:45:3b:da:bd:04:71:a3:15: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.87.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50508 Signature Algorithm: sha256WithRSAEncryption 52:db:8b:ac:98:f7:0f:38:65:a6:c3:ba:a9:81:65:c3:2a:62: 98:1c:f1:50:71:87:1e:92:6d:0c:82:2e:f2:7c:2e:cb:b7:0f: 82:4e:65:38:78:b7:d8:0e:fd:32:d0:ee:94:4c:b2:ad:b9:6c: c1:55:a9:0e:b7:97:9d:4c:e0:eb:7d:fd:70:74:a2:99:6e:1f: 60:bc:43:63:27:50:ad:a9:ee:70:b2:f7:e7:fb:c4:8c:30:8f: 31:a9:68:84:f8:f1:53:da:ec:ea:35:70:9d:c9:89:02:75:82: af:1a:99:ba:7f:1b:db:43:d2:00:74:03:19:0d:54:e4:d3:cc: c2:44:40:d4:f9:03:7f:ce:a2:8c:55:f9:a7:5a:cb:c3:f9:6e: b3:c4:33:a4:65:31:a9:b3:e3:29:b2:4c:00:8b:e9:34:51:b7: 23:e1:9d:9b:f6:15:90:1f:13:e9:4e:13:ec:a6:2a:df:c9:29: 66:5c:ca:f5:a4:8e:75:f5:92:b9:29:0c:b7:16:ab:d2:81:40: da:1c:ca:32:b2:2c:53:0d:69:fb:c8:56:16:e9:a4:8a:3d:7b: 74:2d:86:be:36:58:7b:b6:b9:3c:3e:32:2d:02:1a:0e:83:34: bb:7d:f8:6e:19:ad:b3:fe:cc:fe:46:f3:1a:08:c8:9d:dc:24: 5d:5e:f3:1a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yfKi60BikGiCm6vUUj5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGMwOTRhZDBmYzdiZjE2MGFhMWMxYWQwYzUzOGU5YmY4MGU1OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDsGeZZF74pDsqGLiI4OfYQ6GTVO emz5uUfKS0JxHCMV1eq5wqOXLiSq7+wPSxvAoF19rMNHLkbFHvtJUUy0o2aUZs0m JZ5bwHouPUcZpDWemE0fhRw6/jrOBeTfxu6cQ3w4KIl4bah7n8TH9mLI7zJGHBZv 5O86Ks/3YU1eTsQTuiJWWLClrWAnguK6KstE/E7ZVQDW5O77AOEyXIS12gu+Btah zV3uIv2ZZVOtRZzSN2OWtVtkCkejnbxwGwVklEc6oF1O8sNnvmbKtf27yuPTM0Go STEQmTN9rieesny7kEzrDuQB0wbBAinY5fs9Z+JwOykvRTvavQRxoxXnXQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBDAlK0Px78WCqHBrQxTjpv4Dln4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzdmZTBl Ny04ZGIxLTQwNTctYjVmZi02NTA0NWY3ZDhlYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvN2ZlMGU3 LThkYjEtNDA1Ny1iNWZmLTY1MDQ1ZjdkOGVhNS8xL0VNQ1VyUV9IdnhZS29jR3RE Rk9PbV9nT1dmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWlXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFTDANBgkqhkiG9w0BAQsFAAOCAQEAUtuLrJj3DzhlpsO6qYFlwypimBzxUHGH HpJtDIIu8nwuy7cPgk5lOHi32A79MtDulEyyrblswVWpDreXnUzg6339cHSimW4f YLxDYydQranucLL35/vEjDCPMalohPjxU9rs6jVwncmJAnWCrxqZun8b20PSAHQD GQ1U5NPMwkRA1PkDf86ijFX5p1rLw/lus8QzpGUxqbPjKbJMAIvpNFG3I+Gdm/YV kB8T6U4T7KYq38kpZlzK9aSOdfWSuSkMtxar0oFA2hzKMrIsUw1p+8hWFumkij17 dC2GvjZYe7a5PD4yLQIaDoM0u334bhmts/7M/kbzGgjIndwkXV7zGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:51 2026 by rpki-client