This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer File: EhSn4qjHASMlrpc-0aK7oFsrucE.cer (raw, json) Hash identifier: sHcBE1y/ISA4u+I7TwZ7Thi5ZuTs9ZO3R6mYBPDeJbk= Subject key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38847A47C6C36CFBC798BD8BF0C45B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60750 AS: 204790 IP: 185.26.108.0/22 IP: 185.114.32.0/22 IP: 185.240.24.0/22 IP: 213.244.193.0/24 IP: 2a00:8760::/32 IP: 2a06:4c00::/29 IP: 2a0c:6b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:84:7a:47:c6:c3:6c:fb:c7:98:bd:8b:f0:c4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:3e:5b:40:22:2c:96:af:70:bf:8f:7a:c8: a0:41:cf:af:15:de:ce:8c:89:93:ef:3d:ac:0b:16: 9e:06:80:29:91:02:34:e0:8f:fc:2a:d6:26:49:83: 87:fe:eb:14:f1:16:43:29:23:c4:e7:2a:45:5a:2d: a3:80:85:ee:f5:87:f0:e4:15:9e:16:21:b9:6d:2a: c4:a6:fd:49:68:6f:93:ff:cc:d7:a9:f1:95:2e:63: 84:b8:ad:f4:ae:9a:7e:54:59:90:c6:78:b0:a4:72: 99:e4:a0:67:40:9f:74:66:de:29:4a:0c:85:89:dd: d8:3a:be:66:96:47:aa:61:80:45:f7:40:66:15:f7: dc:37:ba:3c:04:8e:a9:78:cb:5e:dc:b3:65:a9:c6: dc:1b:48:a6:9d:35:48:1a:5d:9e:0d:57:1d:a7:fc: e3:8e:8f:fb:5a:db:be:3b:9d:7c:96:3e:10:03:f5: 70:33:57:ce:c2:ec:aa:d7:1a:ad:5b:47:e0:6c:a0: a7:8a:a5:fb:29:4b:f1:a8:3f:b7:1d:22:58:ad:60: 3a:44:72:80:7b:fa:b6:ca:47:32:b7:32:2e:42:82: 4b:bf:bf:90:11:6e:7a:3c:43:09:56:e8:b1:7b:4a: 22:d6:cb:35:29:b3:18:41:65:26:97:46:56:b6:e0: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.108.0/22 185.114.32.0/22 185.240.24.0/22 213.244.193.0/24 IPv6: 2a00:8760::/32 2a06:4c00::/29 2a0c:6b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60750 204790 Signature Algorithm: sha256WithRSAEncryption 78:d3:98:db:f4:66:94:d3:2f:3f:c2:e9:e8:45:cb:9d:5b:bd: 55:77:af:ae:34:f0:db:3a:b3:1f:a3:c8:3a:6f:ff:a1:04:da: 3e:65:ab:c9:06:2d:ed:f4:65:b7:eb:1d:01:2a:c0:f6:db:31: 69:74:04:eb:db:48:f0:99:d9:c9:ac:5e:23:07:49:c8:67:78: 18:35:3c:18:42:69:ae:8a:1a:93:9d:d9:a7:5e:47:68:bb:85: fb:48:df:b9:30:ac:1b:c8:cd:a3:c5:a7:f3:ef:1a:14:75:95: cc:d3:59:9d:27:65:e3:af:d7:a5:94:ac:09:2f:3c:85:c3:5e: 65:bb:77:0a:36:25:07:64:f2:65:98:d5:a5:f1:d3:50:31:d4: a9:55:08:10:8e:4a:61:a5:77:e2:24:7c:54:c6:8d:e9:bd:b6: c1:79:d2:f3:c7:3b:ad:23:80:1c:f2:c9:bb:72:0e:cb:8f:ad: af:66:27:f8:da:04:12:15:16:ff:96:31:1f:aa:54:44:e0:48: e9:8d:14:49:ae:8f:a0:91:04:47:44:4b:47:32:de:f0:49:33: 3e:90:b8:00:07:a4:ee:81:aa:f4:14:8d:49:0d:13:47:8c:aa: 5e:22:89:d2:fb:b3:00:4d:5a:10:5a:e8:14:ee:29:20:eb:9f: b6:4d:1d:6a -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt+OIR6R8bDbPvHmL2L8MRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjE0YTdlMmE4YzcwMTIzMjVhZTk3M2VkMWEyYmJhMDViMmJiOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xU+W0AiLJavcL+PesigQc+vFd7O jImT7z2sCxaeBoApkQI04I/8KtYmSYOH/usU8RZDKSPE5ypFWi2jgIXu9Yfw5BWe FiG5bSrEpv1JaG+T/8zXqfGVLmOEuK30rpp+VFmQxniwpHKZ5KBnQJ90Zt4pSgyF id3YOr5mlkeqYYBF90BmFffcN7o8BI6peMte3LNlqcbcG0imnTVIGl2eDVcdp/zj jo/7Wtu+O518lj4QA/VwM1fOwuyq1xqtW0fgbKCniqX7KUvxqD+3HSJYrWA6RHKA e/q2ykcytzIuQoJLv7+QEW56PEMJVuixe0oi1ss1KbMYQWUml0ZWtuC7GwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFBIUp+KoxwEjJa6XPtGiu6BbK7nBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2E2OGRi Yy0zZjk0LTRmZWQtOGQ5ZC1lOWMzNjQ5YzEyMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYTY4ZGJj LTNmOTQtNGZlZC04ZDlkLWU5YzM2NDljMTIxOC8xL0VoU240cWpIQVNNbHJwYy0w YUs3b0ZzcnVjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCuRpsAwQCuXIgAwQCufAYAwQA1fTBMBsEAgAC MBUDBQAqAIdgAwUDKgZMAAMFAyoMa4AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID AO1OAgMDH/YwDQYJKoZIhvcNAQELBQADggEBAHjTmNv0ZpTTLz/C6ehFy51bvVV3 r6408Ns6sx+jyDpv/6EE2j5lq8kGLe30ZbfrHQEqwPbbMWl0BOvbSPCZ2cmsXiMH SchneBg1PBhCaa6KGpOd2adeR2i7hftI37kwrBvIzaPFp/PvGhR1lczTWZ0nZeOv 16WUrAkvPIXDXmW7dwo2JQdk8mWY1aXx01Ax1KlVCBCOSmGld+IkfFTGjem9tsF5 0vPHO60jgBzyybtyDsuPra9mJ/jaBBIVFv+WMR+qVETgSOmNFEmuj6CRBEdES0cy 3vBJMz6QuAAHpO6BqvQUjUkNE0eMql4iidL7swBNWhBa6BTuKSDrn7ZNHWo= -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:36 2026 by rpki-client