This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer File: EhUb9X9TFrLdXNij95hSfqwUt3Q.cer (raw, json) Hash identifier: i3gqYCp8wv35QvjcOhI7z1PzyhW3K/l/hGgDFy+TYdY= Subject key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBEC39D394D8F52326D8AA08255B73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.51.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ec:39:d3:94:d8:f5:23:26:d8:aa:08:25:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:02:32:03:46:97:72:d7:e7:0d:5c:b7:52: 8a:b1:38:73:72:a3:79:11:f8:6a:22:62:0b:0c:fb: d7:69:f0:64:ef:7b:e3:9f:e2:69:bb:e6:7f:02:cb: a0:41:34:a9:94:fb:63:69:da:cc:9d:58:dc:f5:8b: 9b:57:06:1c:5a:df:a2:c9:2a:8b:e5:01:93:7a:75: 19:34:28:0f:a1:41:a8:90:d6:d8:ed:bd:c0:19:c9: 57:d0:11:36:07:61:72:57:c7:8c:57:b2:64:e1:71: d2:e3:12:36:60:c7:44:b5:cf:9d:b6:75:b4:57:1c: 6d:6a:32:ad:57:9c:80:60:78:bd:30:ff:16:6b:d5: 44:39:51:07:4a:4f:bf:03:c8:96:55:98:67:74:f6: 45:45:13:51:88:04:b5:da:1e:6d:75:37:ad:0f:d4: e1:f0:5e:9a:28:c0:22:b3:7c:b2:8c:8e:cd:89:df: b0:00:69:ac:87:c8:54:60:84:d5:bc:18:8f:ca:85: 58:9b:55:a8:da:ae:07:6a:6f:f1:db:30:9e:e3:c1: ed:97:1e:a7:60:14:73:17:85:42:16:8f:1b:c4:44: 7c:cc:e4:3e:6c:f3:c2:2f:e9:8b:3e:8d:cb:86:39: 5a:8f:73:67:2a:17:c4:54:ec:ca:79:5a:1e:fc:90: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.51.0/24 Signature Algorithm: sha256WithRSAEncryption 83:26:60:52:21:f1:e4:35:54:bc:c2:57:6b:5f:c9:61:b3:f5: 9b:f1:b7:cb:94:6b:a0:c6:42:11:05:c5:c6:9a:72:c7:68:97: 0b:d4:f0:02:fe:5e:9c:88:d8:a4:e6:d0:6a:55:88:d2:c8:a6: 69:fc:61:ee:e1:e8:8a:90:4b:06:f0:d9:b4:fb:bd:9f:0a:00: d6:fc:05:7d:5e:df:5a:bf:fa:e3:aa:53:c4:de:e2:e1:19:81: c6:85:b7:46:3e:a7:30:02:f6:00:97:06:95:db:92:05:5d:7b: 4e:13:3b:aa:a6:c4:d2:0e:33:2d:0b:f5:81:db:d8:32:0b:db: a1:b1:20:e9:b5:bc:7e:cd:63:00:a6:8c:22:7d:df:87:36:37: cb:30:e5:51:7f:2c:ed:4e:e9:f7:3b:18:37:1c:a8:ca:8f:35: a6:35:d7:d4:2e:f2:a4:4f:66:95:ab:2b:6f:27:e4:46:b5:24: 30:27:cd:36:65:f4:f7:7b:2c:25:8e:44:24:95:5e:64:4e:a7: 0a:ac:cb:e5:7b:af:0d:f9:c7:f6:57:75:d7:e9:4e:43:25:f2: b1:9d:6d:c0:e1:af:f1:96:ad:f6:7b:1d:a3:6f:29:19:4b:cb: 0d:da:80:1f:e8:5a:b5:2e:c3:4d:e1:43:5f:35:4e:8f:e5:d3: de:dc:94:9b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt56+w505TY9SMm2KoIJVtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjE1MWJmNTdmNTMxNmIyZGQ1Y2Q4YTNmNzk4NTI3ZWFjMTRiNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo0CMgNGl3LX5w1ct1KKsThzcqN5 EfhqImILDPvXafBk73vjn+Jpu+Z/AsugQTSplPtjadrMnVjc9YubVwYcWt+iySqL 5QGTenUZNCgPoUGokNbY7b3AGclX0BE2B2FyV8eMV7Jk4XHS4xI2YMdEtc+dtnW0 VxxtajKtV5yAYHi9MP8Wa9VEOVEHSk+/A8iWVZhndPZFRRNRiAS12h5tdTetD9Th 8F6aKMAis3yyjI7Nid+wAGmsh8hUYITVvBiPyoVYm1Wo2q4Ham/x2zCe48Htlx6n YBRzF4VCFo8bxER8zOQ+bPPCL+mLPo3Lhjlaj3NnKhfEVOzKeVoe/JDAaQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBIVG/V/Uxay3VzYo/eYUn6sFLd0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2M1MGQw Yy0zODhlLTRjMDAtYmVmNC00ZGM2YTRmNGVlNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvYzUwZDBj LTM4OGUtNGMwMC1iZWY0LTRkYzZhNGY0ZWU1NS8xL0VoVWI5WDlURnJMZFhOaWo5 NWhTZnF3VXQzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgAzMA0GCSqGSIb3DQEBCwUAA4IBAQCDJmBS IfHkNVS8wldrX8lhs/Wb8bfLlGugxkIRBcXGmnLHaJcL1PAC/l6ciNik5tBqVYjS yKZp/GHu4eiKkEsG8Nm0+72fCgDW/AV9Xt9av/rjqlPE3uLhGYHGhbdGPqcwAvYA lwaV25IFXXtOEzuqpsTSDjMtC/WB29gyC9uhsSDptbx+zWMApowifd+HNjfLMOVR fyztTun3Oxg3HKjKjzWmNdfULvKkT2aVqytvJ+RGtSQwJ802ZfT3eywljkQklV5k TqcKrMvle68N+cf2V3XX6U5DJfKxnW3A4a/xlq32ex2jbykZS8sN2oAf6Fq1LsNN 4UNfNU6P5dPe3JSb -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:04 2026 by rpki-client