This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer File: Erh8bK-B3jYl_hzgVZ854wUFoFE.cer (raw, json) Hash identifier: +h0U+5N6GgYHKRz9MrwKRbqeLxMFqUw3MC3Vq/y832c= Subject key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B490A0B9BFE5A87E5687A912202D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210070 IP: 185.238.216.0/22 IP: 2a0f:f7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:0a:0b:9b:fe:5a:87:e5:68:7a:91:22:02:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12b87c6caf81de3625fe1ce0559f39e30505a051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:bb:05:64:ea:59:73:3a:1b:eb:69:30:09: e9:fa:c3:ae:bb:e7:5d:49:bf:eb:c0:a4:dc:01:af: 7e:49:85:fb:e4:cc:54:92:4d:9a:92:35:df:1b:7f: e3:d3:66:93:97:4c:f6:cc:75:3d:46:29:59:f7:29: 91:16:d2:64:58:cd:5f:a7:4c:94:ce:8e:44:34:01: 2e:03:84:d6:a0:a6:e7:71:c9:cc:ec:af:f5:27:1c: f8:2b:95:73:d0:67:86:c6:14:fe:39:9d:0b:da:5f: 8d:fd:37:b5:73:8d:06:39:52:7e:99:7d:4a:75:bd: 59:ad:02:1e:8c:c8:b4:ed:0b:84:a6:ad:99:a5:9a: 99:46:d4:93:09:87:68:d5:6f:64:99:d0:e5:37:25: 0c:a1:67:6b:33:3d:5a:de:fa:ac:ea:84:21:81:05: 72:69:a6:89:c9:c0:ff:ac:59:a9:ed:57:8e:29:9e: 20:51:db:fd:55:97:a0:e2:97:4a:bf:86:33:e4:fe: 38:45:34:6d:ec:9d:8c:97:c3:a2:49:ea:c9:e0:01: 95:41:07:f2:15:52:63:10:7b:c1:86:9e:7e:b5:f6: 57:56:ba:ea:fe:06:b5:57:72:fd:68:f9:21:01:99: 35:d1:64:40:82:10:71:82:55:06:ed:0f:73:48:8c: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.216.0/22 IPv6: 2a0f:f7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210070 Signature Algorithm: sha256WithRSAEncryption 38:e8:3d:68:e0:1a:f0:3a:99:51:be:5d:29:e9:52:97:66:06: 61:c9:07:27:7e:9b:24:a2:59:ec:28:2e:56:5e:20:bb:72:9f: d8:cd:d2:59:b7:2c:02:b9:08:b4:c5:4e:df:0e:e8:5e:33:cf: dd:a4:3b:97:6a:5e:54:f0:5b:30:a7:9f:b7:fc:8b:d1:c7:4e: 50:ac:2a:b0:20:7f:2e:b0:aa:97:9f:58:ab:73:be:a7:7d:53: 69:54:4a:aa:69:59:24:29:87:99:a9:9b:d5:b9:9b:3d:a1:bc: 9a:65:2d:3b:78:2e:21:20:bb:b0:53:13:0a:ca:e6:36:ca:5c: a9:6d:45:e8:5a:7f:71:b6:d8:a7:d6:e0:eb:88:4a:8a:28:34: 27:97:8f:4a:db:fc:90:15:66:34:d8:1b:2d:8e:3a:b9:d9:c9: 3a:e6:ed:f5:98:ce:f8:c2:f6:75:be:71:6e:9c:c8:ce:1a:25: 6b:14:45:2a:81:24:73:66:c2:e6:60:7f:88:6f:7f:d7:80:d2: 0e:05:01:e9:ca:79:f1:45:58:ef:80:78:05:44:0a:3e:75:19: 51:fc:25:ab:86:d7:8e:7d:c8:87:a8:06:d4:59:e3:33:bf:87: 2e:04:47:35:bc:a1:73:9f:a5:e2:2e:48:9f:26:e5:c2:c5:f5: 5e:38:90:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W0kKC5v+WoflaHqRIgLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmI4N2M2Y2FmODFkZTM2MjVmZTFjZTA1NTlmMzllMzA1MDVhMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuju7BWTqWXM6G+tpMAnp+sOuu+dd Sb/rwKTcAa9+SYX75MxUkk2akjXfG3/j02aTl0z2zHU9RilZ9ymRFtJkWM1fp0yU zo5ENAEuA4TWoKbnccnM7K/1Jxz4K5Vz0GeGxhT+OZ0L2l+N/Te1c40GOVJ+mX1K db1ZrQIejMi07QuEpq2ZpZqZRtSTCYdo1W9kmdDlNyUMoWdrMz1a3vqs6oQhgQVy aaaJycD/rFmp7VeOKZ4gUdv9VZeg4pdKv4Yz5P44RTRt7J2Ml8OiSerJ4AGVQQfy FVJjEHvBhp5+tfZXVrrq/ga1V3L9aPkhAZk10WRAghBxglUG7Q9zSIx2PQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBK4fGyvgd42Jf4c4FWfOeMFBaBRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2UyOTM0 Yy0wNTNhLTRiOTctYWEyYS02MjgwOGJiYmRkMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZTI5MzRj LTA1M2EtNGI5Ny1hYTJhLTYyODA4YmJiZGQyMS8xL0VyaDhiSy1CM2pZbF9oemdW Wjg1NHdVRm9GRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCue7YMA0EAgACMAcDBQMqD/fAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0ljANBgkqhkiG9w0BAQsFAAOCAQEAOOg9aOAa8DqZ Ub5dKelSl2YGYckHJ36bJKJZ7CguVl4gu3Kf2M3SWbcsArkItMVO3w7oXjPP3aQ7 l2peVPBbMKeft/yL0cdOUKwqsCB/LrCql59Yq3O+p31TaVRKqmlZJCmHmamb1bmb PaG8mmUtO3guISC7sFMTCsrmNspcqW1F6Fp/cbbYp9bg64hKiig0J5ePStv8kBVm NNgbLY46udnJOubt9ZjO+ML2db5xbpzIzholaxRFKoEkc2bC5mB/iG9/14DSDgUB 6cp58UVY74B4BUQKPnUZUfwlq4bXjn3Ih6gG1FnjM7+HLgRHNbyhc5+l4i5Inybl wsX1XjiQmA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:55 2026 by rpki-client