This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer File: EjujgC-cm_Z1baq9Mk5TJu3kGao.cer (raw, json) Hash identifier: VPrQE665Y9zOj+MZ5V3bwdxnxdOWuSD/vsD77+q/yG0= Subject key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C71F246176E745ABB11DC8E83F165E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60584 IP: 193.200.243.0/24 IP: 2a06:18c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:24:61:76:e7:45:ab:b1:1d:c8:e8:3f:16:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123ba3802f9c9bf6756daabd324e5326ede419aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:92:7b:5e:12:2c:a3:70:e9:7e:bb:89:22: a1:39:48:49:d8:df:e5:da:64:24:f4:bc:b7:ef:41: 0c:ac:a2:4c:3c:b3:99:61:92:8e:71:80:68:c9:2b: f9:dd:68:a6:82:a8:3f:45:0b:5d:5b:1c:29:2c:90: bd:89:b9:54:9c:81:c7:42:54:47:fd:c4:47:c9:0e: a5:d7:b9:f0:5c:b9:f0:1a:c8:b2:27:46:0e:f6:0a: f5:e0:07:37:61:f2:f1:b9:c0:6f:ae:fd:44:21:35: 4e:9b:7d:33:81:5e:27:4c:c8:c6:f2:25:e7:58:63: a8:bd:b2:72:7c:c7:87:bc:a6:da:cd:f0:62:f7:ee: e6:1b:c8:f1:c7:ce:fb:d8:f8:0a:89:e1:a9:cc:22: db:9e:11:5d:88:f1:ac:9e:24:c2:4b:91:58:c9:39: 8c:fb:6c:32:e9:cf:8d:26:df:55:d9:f3:15:93:24: 3d:55:46:66:4e:b7:db:a6:e7:68:4a:e4:36:c0:fb: ab:24:85:c5:5b:d7:9c:33:06:1a:d7:64:53:48:5b: ee:d0:1e:91:0b:a8:90:ca:97:0b:e1:a4:08:18:87: 0e:80:be:23:59:b9:2b:94:91:67:89:5e:f9:00:cb: b8:e1:d7:ab:ff:a0:92:ef:6b:56:e9:1f:8c:a6:2e: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.243.0/24 IPv6: 2a06:18c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60584 Signature Algorithm: sha256WithRSAEncryption 6c:22:16:53:8d:fe:5c:76:ff:9c:a7:cc:4f:9e:75:48:d8:0f: ce:d9:c0:51:25:71:02:ac:24:fa:69:2e:a6:23:d8:d7:e5:44: 09:c3:c6:5c:ca:a7:a8:26:cf:87:bc:a5:87:75:8c:12:f4:ff: e5:51:ee:31:2c:4a:58:87:e5:20:72:dd:3d:35:c1:c8:19:34: 4f:0d:5c:f0:de:79:d5:e1:fb:e9:90:fe:a5:e8:a2:4e:38:eb: cb:d3:3a:23:74:09:4a:20:d9:db:49:0b:60:92:a0:a5:e2:88: a2:24:10:9b:4d:81:ee:ff:c5:eb:68:3c:4d:bc:49:0c:14:4c: e3:4a:fc:96:8e:a0:40:36:0c:c8:02:73:aa:ed:6f:1c:ed:4d: ac:fb:20:88:e5:0f:0c:03:78:fe:de:d9:2f:62:1e:2b:7e:6c: 32:f8:aa:f9:e6:f9:0e:e6:53:05:9a:67:f8:3e:b0:d3:bd:ad: 68:2e:01:1c:80:ef:b0:31:f9:fc:07:4c:d8:88:a8:88:41:68: 4f:dd:72:36:7e:01:c6:b7:a6:7c:16:61:b1:d9:7f:e8:5d:3b: 42:23:15:aa:88:77:95:f7:99:10:4c:1e:b5:53:87:2d:15:1f: 87:21:af:0b:17:a8:9e:f6:a9:d1:b1:05:26:c4:fa:40:08:93: 89:2a:e5:46 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xx8kYXbnRauxHcjoPxZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjNiYTM4MDJmOWM5YmY2NzU2ZGFhYmQzMjRlNTMyNmVkZTQxOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8OSe14SLKNw6X67iSKhOUhJ2N/l 2mQk9Ly370EMrKJMPLOZYZKOcYBoySv53Wimgqg/RQtdWxwpLJC9iblUnIHHQlRH /cRHyQ6l17nwXLnwGsiyJ0YO9gr14Ac3YfLxucBvrv1EITVOm30zgV4nTMjG8iXn WGOovbJyfMeHvKbazfBi9+7mG8jxx8772PgKieGpzCLbnhFdiPGsniTCS5FYyTmM +2wy6c+NJt9V2fMVkyQ9VUZmTrfbpudoSuQ2wPurJIXFW9ecMwYa12RTSFvu0B6R C6iQypcL4aQIGIcOgL4jWbkrlJFniV75AMu44der/6CS72tW6R+Mpi6bdwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBI7o4AvnJv2dW2qvTJOUybt5BmqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzYxZjdj My00MTM0LTRjMDItYjdkZC1lNGQwMjRjZGFlMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNjFmN2Mz LTQxMzQtNGMwMi1iN2RkLWU0ZDAyNGNkYWUwYy8xL0VqdWpnQy1jbV9aMWJhcTlN azVUSnUza0dhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwcjzMA0EAgACMAcDBQMqBhjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsqDANBgkqhkiG9w0BAQsFAAOCAQEAbCIWU43+XHb/ nKfMT551SNgPztnAUSVxAqwk+mkupiPY1+VECcPGXMqnqCbPh7ylh3WMEvT/5VHu MSxKWIflIHLdPTXByBk0Tw1c8N551eH76ZD+peiiTjjry9M6I3QJSiDZ20kLYJKg peKIoiQQm02B7v/F62g8TbxJDBRM40r8lo6gQDYMyAJzqu1vHO1NrPsgiOUPDAN4 /t7ZL2IeK35sMviq+eb5DuZTBZpn+D6w072taC4BHIDvsDH5/AdM2IioiEFoT91y Nn4BxremfBZhsdl/6F07QiMVqoh3lfeZEEwetVOHLRUfhyGvCxeonvap0bEFJsT6 QAiTiSrlRg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:40 2026 by rpki-client