This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer File: EWU43_13zyOMTq65XKBUh8VnGrU.cer (raw, json) Hash identifier: DRGjDqSEmd6kOBQSs6cWo4zshfIomguVQj8yNEO8+3Q= Subject key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7190CB3CB13B71042DA3F2DF340D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41399 IP: 195.35.103.0/24 IP: 217.148.128.0/22 IP: 2001:67c:7e0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:0c:b3:cb:13:b7:10:42:da:3f:2d:f3:40:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2b:de:63:4b:5f:00:d2:ef:56:b2:1a:67:2e: 5e:d0:ec:b0:15:21:e0:75:e9:4a:02:11:73:ab:66: 43:50:73:ea:1e:d3:fe:48:26:37:93:17:0f:a9:0f: 13:40:2f:b9:0f:59:ea:aa:df:44:d9:0a:04:3e:ac: 40:db:02:20:fb:69:7d:40:86:81:6c:6f:d3:d4:5b: 2b:5e:18:7d:5c:82:37:97:44:db:68:84:c9:7a:da: c7:52:c1:eb:4c:22:a4:3b:5f:45:90:4b:7d:f6:ac: 1f:72:d3:06:44:21:d6:18:48:14:ef:7d:12:cc:ea: 52:20:34:55:d5:d5:4e:02:0f:23:90:05:5c:ee:ec: a7:07:7e:4a:1e:aa:04:51:b5:e5:c6:6a:d5:0a:69: f8:57:74:78:79:b6:c8:15:39:3b:a0:bb:8e:ca:49: e8:bb:ac:dd:8d:6a:8d:a5:96:ad:7e:12:a0:09:6b: dc:2f:42:33:b5:2a:c6:27:21:e1:5b:5a:10:66:42: 2c:27:e0:b1:95:ef:fa:47:43:c9:69:1d:51:bc:d6: 88:30:ca:0f:d5:d8:74:13:2c:42:5e:5c:3d:8f:f4: 39:dc:c8:12:db:e8:45:cb:58:f2:63:ce:86:ac:b5: 0c:01:fc:d0:08:de:21:48:58:98:a7:ef:06:0c:f7: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.103.0/24 217.148.128.0/22 IPv6: 2001:67c:7e0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41399 Signature Algorithm: sha256WithRSAEncryption 0c:b9:1d:66:1c:27:db:16:14:56:d5:3e:bb:be:35:80:ed:d1: 60:5e:b1:a3:7a:34:e4:9a:0a:53:cf:74:fb:6a:94:53:88:58: cb:fc:b7:3c:e8:fa:56:4e:53:0b:bd:a6:d6:a1:61:49:5f:d1: 20:ea:a4:d7:45:28:86:e8:75:eb:1a:18:10:f9:77:e5:a6:cc: 57:39:4a:b8:13:de:d8:ce:5d:ed:a3:9f:3b:eb:bc:b9:d2:de: 6a:e6:43:63:4f:d0:c5:79:5f:b0:6a:25:79:0b:0c:f6:61:d3: 46:93:f2:88:89:56:57:3d:cc:1b:9a:54:2a:50:49:02:18:74: f5:74:15:36:e1:a4:1d:25:55:c6:29:7a:f0:7a:a6:ff:d7:17: c5:63:de:8b:72:23:b3:23:af:bd:f5:d9:9d:e2:f1:fd:1f:a3: 26:b2:23:ac:e1:98:7f:76:ed:01:26:cd:11:45:0e:d7:8e:bf: 01:c5:1b:6d:11:1c:64:4b:8f:85:e9:5d:1d:ef:e5:e7:8f:03: d9:79:ee:ee:8a:42:e9:03:07:0a:65:2d:8b:06:62:69:f6:19: b2:54:63:bc:a0:aa:70:68:e8:69:f4:02:e9:81:92:94:2f:ab: 3c:01:9d:85:a2:ce:b7:03:ec:1d:c6:ac:ae:43:60:22:38:f4: c8:5d:d9:14 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt+pxkMs8sTtxBC2j8t80DUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTY1MzhkZmZkNzdjZjIzOGM0ZWFlYjk1Y2EwNTQ4N2M1NjcxYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iveY0tfANLvVrIaZy5e0OywFSHg delKAhFzq2ZDUHPqHtP+SCY3kxcPqQ8TQC+5D1nqqt9E2QoEPqxA2wIg+2l9QIaB bG/T1FsrXhh9XII3l0TbaITJetrHUsHrTCKkO19FkEt99qwfctMGRCHWGEgU730S zOpSIDRV1dVOAg8jkAVc7uynB35KHqoEUbXlxmrVCmn4V3R4ebbIFTk7oLuOykno u6zdjWqNpZatfhKgCWvcL0IztSrGJyHhW1oQZkIsJ+Cxle/6R0PJaR1RvNaIMMoP 1dh0EyxCXlw9j/Q53MgS2+hFy1jyY86GrLUMAfzQCN4hSFiYp+8GDPeJuwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFBFlON/9d88jjE6uuVygVIfFZxq1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2RlOGQ4 Mi04ZTBhLTQ0NTItYjg5YS02NTA4YzFmNGE0NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvZGU4ZDgy LThlMGEtNDQ1Mi1iODlhLTY1MDhjMWY0YTQ0NS8xL0VXVTQzXzEzenlPTVRxNjVY S0JVaDhWbkdyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwyNnAwQC2ZSAMA8EAgACMAkDBwAgAQZ8B+Aw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKG3MA0GCSqGSIb3DQEBCwUAA4IBAQAM uR1mHCfbFhRW1T67vjWA7dFgXrGjejTkmgpTz3T7apRTiFjL/Lc86PpWTlMLvabW oWFJX9Eg6qTXRSiG6HXrGhgQ+XflpsxXOUq4E97Yzl3to58767y50t5q5kNjT9DF eV+waiV5Cwz2YdNGk/KIiVZXPcwbmlQqUEkCGHT1dBU24aQdJVXGKXrweqb/1xfF Y96LciOzI6+99dmd4vH9H6MmsiOs4Zh/du0BJs0RRQ7Xjr8BxRttERxkS4+F6V0d 7+XnjwPZee7uikLpAwcKZS2LBmJp9hmyVGO8oKpwaOhp9ALpgZKUL6s8AZ2Fos63 A+wdxqyuQ2AiOPTIXdkU -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:42 2026 by rpki-client