This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer (raw, json) Hash identifier: Gf/vCmtJOUB6z/R/Tglbi/+E5XPZMAK0drIhi0y+gtc= Subject key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387FCD6C4417ED3AC070595733C761 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206400 IP: 185.187.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7f:cd:6c:44:17:ed:3a:c0:70:59:57:33:c7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:45:22:f2:de:54:2d:bb:5b:8a:17:63:ed: 8a:14:4d:7e:9f:42:63:74:a0:b9:0c:25:7f:7c:88: b3:0f:e0:a8:9c:91:29:a1:54:95:96:4e:5f:e1:3c: 83:2a:c4:a4:c1:21:b4:db:01:21:67:21:96:e9:61: 15:dd:45:e4:e1:d1:06:a8:34:3f:90:c3:d4:d4:a9: 1c:50:bb:57:c3:9a:4b:1c:3f:7d:fd:a9:4c:5e:fc: e4:e3:d1:2a:27:05:23:f0:c4:16:a2:e4:b8:fd:a0: e8:c3:67:a7:64:21:2e:14:9a:3e:4b:6a:5d:8d:d9: e6:0c:ab:6f:4e:b3:e9:81:46:7a:f9:cf:e8:90:7d: 27:d4:c4:2c:aa:40:d6:ff:76:68:ec:9d:3d:31:cf: 08:6f:ea:17:1d:ee:3e:05:f3:4c:e4:57:ce:c0:b7: c0:d9:73:43:e2:9f:de:3e:0b:28:1f:53:69:41:f5: d1:21:13:24:81:16:4a:00:20:b0:ed:46:aa:e0:0e: ca:2c:80:72:5d:83:de:3e:7e:51:fc:8c:e5:ff:94: 07:0d:0c:61:60:69:c2:c3:96:12:69:99:51:8a:22: 7d:96:07:ff:c8:2f:97:9f:98:ec:b3:97:43:a0:20: bd:ff:88:f4:c4:f0:20:ef:e8:ab:11:86:68:8b:31: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206400 Signature Algorithm: sha256WithRSAEncryption 57:c1:a7:d4:8d:91:c6:2e:cd:24:7f:2c:c7:1a:6c:0b:41:fd: 63:6c:4b:ea:0e:ee:8f:c4:89:e1:68:96:a4:c5:62:f0:4d:bd: b7:07:5f:b9:5e:c8:71:ee:34:ab:ce:d3:14:0a:20:28:d1:12: 00:6a:d7:ab:94:e0:a5:17:e0:9f:45:60:9f:a8:a2:ad:7a:be: ec:2a:ed:89:24:b4:df:3e:9c:27:9a:16:8b:cc:3a:4a:f1:20: 48:4c:30:85:28:c4:3b:97:64:83:82:06:2a:31:1c:df:21:6d: 9b:1a:f0:31:25:fe:0a:6b:32:5a:94:8a:d1:f6:04:39:07:3b: 47:e4:1f:cd:5b:fb:52:48:f5:9a:82:04:e4:f8:ad:13:d1:71: 3e:0c:4b:89:83:86:c2:c6:eb:7c:55:5d:74:eb:25:0f:3c:19: 9a:a8:81:3d:57:e8:48:7c:6c:bf:67:bb:8d:35:8e:32:38:b2: 44:4a:57:bb:b2:ab:ef:3e:bc:59:8d:93:fd:cb:bd:67:d2:3e: 8e:ec:e0:2a:52:86:33:d4:4f:fd:bd:76:64:9f:9f:48:0b:42: 53:79:e9:c8:cc:99:45:be:7f:ce:0d:fd:62:d3:e1:d9:b2:65: fc:29:4e:16:ca:b1:3b:4d:6f:60:df:45:2a:ce:1b:41:d4:00: b3:d7:3d:d0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OH/NbEQX7TrAcFlXM8dhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjE3M2QxYjNlMjMxYzU3YjM1MTllOGQ0ZTU0Nzg2ODYwNmM0ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CRFIvLeVC27W4oXY+2KFE1+n0Jj dKC5DCV/fIizD+ConJEpoVSVlk5f4TyDKsSkwSG02wEhZyGW6WEV3UXk4dEGqDQ/ kMPU1KkcULtXw5pLHD99/alMXvzk49EqJwUj8MQWouS4/aDow2enZCEuFJo+S2pd jdnmDKtvTrPpgUZ6+c/okH0n1MQsqkDW/3Zo7J09Mc8Ib+oXHe4+BfNM5FfOwLfA 2XND4p/ePgsoH1NpQfXRIRMkgRZKACCw7Uaq4A7KLIByXYPePn5R/Izl/5QHDQxh YGnCw5YSaZlRiiJ9lgf/yC+Xn5jss5dDoCC9/4j0xPAg7+irEYZoizH/FQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBIXPRs+IxxXs1GejU5UeGhgbE/TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzczM2Y3 NC0wZGJlLTQ0M2ItODQzMS0zZjgzNzJkOTY4ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNzMzZjc0 LTBkYmUtNDQzYi04NDMxLTNmODM3MmQ5NjhkMC8xL0VoYzlHejRqSEZlelVaNk5U bFI0YUdCc1Q5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubskMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMmQDANBgkqhkiG9w0BAQsFAAOCAQEAV8Gn1I2Rxi7NJH8sxxpsC0H9Y2xL6g7u j8SJ4WiWpMVi8E29twdfuV7Ice40q87TFAogKNESAGrXq5TgpRfgn0Vgn6iirXq+ 7CrtiSS03z6cJ5oWi8w6SvEgSEwwhSjEO5dkg4IGKjEc3yFtmxrwMSX+CmsyWpSK 0fYEOQc7R+QfzVv7Ukj1moIE5PitE9FxPgxLiYOGwsbrfFVddOslDzwZmqiBPVfo SHxsv2e7jTWOMjiyREpXu7Kr7z68WY2T/cu9Z9I+juzgKlKGM9RP/b12ZJ+fSAtC U3npyMyZRb5/zg39YtPh2bJl/ClOFsqxO01vYN9FKs4bQdQAs9c90A== -----END CERTIFICATE-----Generated at Sat Feb 7 21:58:47 2026 by rpki-client