This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer File: EjIwPRY44HNSQEkaqp5CsYh62so.cer (raw, json) Hash identifier: XBDqB8KhxkLvroYEyTf80j5t89gFrDtXSswpyRbG+Lo= Subject key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2286FA12D025B0A3BFBF39BA97A1077E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 15:00:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 51407 IP: 5.34.160.0/21 IP: 5.43.192.0/19 IP: 31.13.160.0/21 IP: 31.25.72.0/21 IP: 31.220.148.0/23 IP: 37.60.144.0/21 IP: 37.76.192.0/19 IP: 37.122.158.0/23 IP: 46.28.136.0/21 IP: 46.32.192.0/19 IP: 46.43.64.0/18 IP: 46.244.64.0/19 IP: 84.242.48.0/20 IP: 85.184.32.0/19 IP: 94.73.0.0/19 IP: 95.215.128.0/22 IP: 176.65.16.0/20 IP: 176.67.56.0/21 IP: 176.67.96.0/19 IP: 178.130.144.0 -- 178.130.191.255 IP: 185.7.120.0/22 IP: 185.17.232.0/22 IP: 188.227.232.0/21 IP: 195.35.85.0/24 IP: 2a03:2940::/32 IP: 2a04:940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fa:12:d0:25:b0:a3:bf:bf:39:ba:97:a1:07:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 15:00:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1232303d1638e0735240491aaa9e42b1887adaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:d3:b4:49:17:04:c8:93:cd:6a:e5:3d:36: 27:4a:43:c9:49:6e:cc:9a:95:e7:f4:e4:0b:7e:7b: 66:ff:ca:19:dc:96:b8:45:a2:2d:67:08:0f:10:05: a8:25:7a:52:78:49:60:ab:2d:25:78:39:2e:b5:04: 38:82:ac:df:54:80:73:6c:1e:2a:d2:e1:f4:89:79: e4:d3:0a:f0:21:b1:08:c5:be:12:df:ef:fd:74:1b: 98:a6:77:2b:fa:a5:c2:3b:2e:52:84:0c:02:0f:df: da:72:96:6c:24:a0:b8:06:4b:83:f5:a4:1c:81:dd: 27:ab:3b:56:40:24:9f:1a:cc:eb:df:ca:6d:88:fb: e8:44:39:22:fe:4e:9b:ea:a8:05:57:4a:24:fa:04: 7f:a8:bc:96:4b:3f:72:8d:2b:34:ec:d7:b4:e7:7f: d9:a4:59:6b:79:f3:11:a4:eb:9d:1e:27:4f:1d:6a: a0:08:db:3f:bf:bb:1b:cf:a0:93:78:6d:77:83:c6: d9:f4:8d:41:a4:b7:b4:8e:c8:7f:0e:e6:6b:c3:b7: 48:93:06:79:b5:25:4f:c1:42:f5:2f:fb:9b:84:57: af:c0:cb:a8:ba:c0:18:9d:2e:ec:da:0c:61:c8:76: f9:ef:8a:fa:8b:50:1e:be:23:72:a1:b1:20:49:26: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.160.0/21 5.43.192.0/19 31.13.160.0/21 31.25.72.0/21 31.220.148.0/23 37.60.144.0/21 37.76.192.0/19 37.122.158.0/23 46.28.136.0/21 46.32.192.0/19 46.43.64.0/18 46.244.64.0/19 84.242.48.0/20 85.184.32.0/19 94.73.0.0/19 95.215.128.0/22 176.65.16.0/20 176.67.56.0/21 176.67.96.0/19 178.130.144.0-178.130.191.255 185.7.120.0/22 185.17.232.0/22 188.227.232.0/21 195.35.85.0/24 IPv6: 2a03:2940::/32 2a04:940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51407 Signature Algorithm: sha256WithRSAEncryption 44:e5:4e:c7:e7:93:b4:b6:a9:89:9b:39:f6:9b:f9:f4:4c:ab: 33:02:f9:11:0a:77:20:cc:43:2e:20:b3:e0:58:d0:69:8b:bb: 0b:5b:eb:f2:c2:df:ee:ea:e4:6b:4b:fc:96:76:0e:b5:21:69: 92:4a:35:e9:04:5a:36:17:a7:c5:ed:bd:da:79:20:26:5a:be: 99:52:bf:8d:d7:c1:55:99:46:4b:a4:4d:0b:58:89:9b:a4:09: 10:ad:e2:2e:c3:ef:8d:a9:7d:9e:c6:c8:16:90:55:84:cf:87: 48:8f:a7:93:e8:e1:89:78:25:74:d8:cf:d1:cf:ff:f8:54:d8: 68:ec:50:3e:cb:22:90:9b:7e:75:65:73:aa:12:b8:f2:b8:1a: 84:da:bf:a5:b8:d6:a5:22:ea:46:e3:40:d6:b9:13:11:db:ca: 21:7e:70:05:e2:96:91:82:0f:81:47:33:d6:10:68:1b:68:6a: 63:88:28:4d:d2:e1:0b:f1:50:7b:80:05:d6:d9:36:98:af:67: 41:9c:ce:6b:38:0b:2a:a3:bb:17:81:ef:81:bb:b5:98:db:06: cd:ad:86:91:70:48:01:a0:35:ac:68:61:a2:3b:c5:a1:c1:84: dd:27:9a:36:77:74:93:15:de:29:2c:0b:31:64:13:94:45:9b: 1c:e1:26:5d -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgISAZsihvoS0CWwo7+/ObqXoQd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTUwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjMyMzAzZDE2MzhlMDczNTI0MDQ5MWFhYTllNDJiMTg4N2FkYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsTTtEkXBMiTzWrlPTYnSkPJSW7M mpXn9OQLfntm/8oZ3Ja4RaItZwgPEAWoJXpSeElgqy0leDkutQQ4gqzfVIBzbB4q 0uH0iXnk0wrwIbEIxb4S3+/9dBuYpncr+qXCOy5ShAwCD9/acpZsJKC4BkuD9aQc gd0nqztWQCSfGszr38ptiPvoRDki/k6b6qgFV0ok+gR/qLyWSz9yjSs07Ne053/Z pFlrefMRpOudHidPHWqgCNs/v7sbz6CTeG13g8bZ9I1BpLe0jsh/DuZrw7dIkwZ5 tSVPwUL1L/ubhFevwMuousAYnS7s2gxhyHb574r6i1AeviNyobEgSSbCfQIDAQAB o4IDTTCCA0kwHQYDVR0OBBYEFBIyMD0WOOBzUkBJGqqeQrGIetrKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzBhYjE2 Ny0zMDk0LTQxMDMtODEzMS0wNjQ0MTRkMDM0MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvMGFiMTY3 LTMwOTQtNDEwMy04MTMxLTA2NDQxNGQwMzQwZi8xL0VqSXdQUlk0NEhOU1FFa2Fx cDVDc1loNjJzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHLBggrBgEF BQcBBwEB/wSBuzCBuDCBnwQCAAEwgZgDBAMFIqADBAUFK8ADBAMfDaADBAMfGUgD BAEf3JQDBAMlPJADBAUlTMADBAElep4DBAMuHIgDBAUuIMADBAYuK0ADBAUu9EAD BARU8jADBAVVuCADBAVeSQADBAJf14ADBASwQRADBAOwQzgDBAWwQ2AwDAMEBLKC kAMEBrKCgAMEArkHeAMEArkR6AMEA7zj6AMEAMMjVTAUBAIAAjAOAwUAKgMpQAMF AyoECUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMjPMA0GCSqGSIb3DQEBCwUA A4IBAQBE5U7H55O0tqmJmzn2m/n0TKszAvkRCncgzEMuILPgWNBpi7sLW+vywt/u 6uRrS/yWdg61IWmSSjXpBFo2F6fF7b3aeSAmWr6ZUr+N18FVmUZLpE0LWImbpAkQ reIuw++NqX2exsgWkFWEz4dIj6eT6OGJeCV02M/Rz//4VNho7FA+yyKQm351ZXOq ErjyuBqE2r+luNalIupG40DWuRMR28ohfnAF4paRgg+BRzPWEGgbaGpjiChN0uEL 8VB7gAXW2TaYr2dBnM5rOAsqo7sXge+Bu7WY2wbNrYaRcEgBoDWsaGGiO8WhwYTd J5o2d3STFd4pLAsxZBOURZsc4SZd -----END CERTIFICATE-----Generated at Tue Dec 16 02:35:28 2025 by rpki-client