This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer File: EweT4kpnIB99UrZWaG9D2t46E5I.cer (raw, json) Hash identifier: UiwFPdKe2gNsiwBdiO3gGMIhRm3+vOgEWPnXsjhj8fE= Subject key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FA2C867F2B2636E8D00A7C5412291 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49855 IP: 31.24.144.0/21 IP: 91.202.40.0/22 IP: 109.69.64.0/21 IP: 185.98.240.0/22 IP: 2a02:16d0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a2:c8:67:f2:b2:63:6e:8d:00:a7:c5:41:22:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130793e24a67201f7d52b656686f43dade3a1392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:16:86:0e:19:8f:a6:8a:7e:35:b1:11:7c: 15:81:04:94:36:30:e5:a5:50:e6:35:90:a4:37:cf: fd:16:e0:b2:1a:02:e1:8a:7b:2e:c6:0a:e5:bd:5b: ee:a8:04:72:ac:5d:63:ad:4c:a4:d8:b2:74:d7:1e: 88:f1:1e:b4:bc:0f:93:ae:96:7f:df:aa:5e:4e:27: 56:97:7b:96:f1:c0:e8:ef:9f:2a:c1:57:bb:f0:a2: c0:d2:bb:6c:e4:6f:78:df:78:de:75:99:a3:bd:77: 9d:5a:5c:7f:8a:6f:2f:71:c2:6f:03:5c:0a:bb:f7: ab:ed:7f:5c:61:48:ce:fc:71:5d:03:30:c2:35:2d: 2f:1a:17:03:32:11:93:26:e7:0f:f3:24:a3:18:6b: 28:5f:85:dc:7b:68:2c:86:dc:16:45:be:fa:c5:41: f7:8d:f0:ff:98:62:1d:f7:b4:cf:e0:d4:63:94:9c: 7c:73:2b:bd:90:a4:c0:e5:ee:28:54:c1:10:13:b8: 46:27:35:ef:71:85:fe:db:5d:68:ae:4d:aa:98:4f: 51:5c:3f:63:08:57:65:05:94:4c:1b:91:bb:ca:61: b8:0d:06:8c:99:36:23:b9:73:8b:fc:57:bb:91:5f: e8:1c:87:c6:30:48:3a:6f:43:60:88:0d:91:8d:08: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.144.0/21 91.202.40.0/22 109.69.64.0/21 185.98.240.0/22 IPv6: 2a02:16d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49855 Signature Algorithm: sha256WithRSAEncryption 42:46:97:63:86:8d:b7:ec:5a:19:a7:67:5d:67:1a:26:d0:1c: c8:ba:60:10:e9:79:e9:c5:46:48:71:d7:e1:a1:0b:3c:24:9c: 65:c2:af:ec:07:5d:0f:b4:54:d5:ba:e5:8a:dc:16:d7:ac:1c: 6c:02:f1:9a:de:3d:f5:9a:c0:41:a8:92:a5:26:ea:7f:c1:a2: 5a:5a:d2:28:87:2f:1e:ba:14:bd:78:02:a4:81:9a:68:bc:eb: 06:43:c3:6e:44:4d:85:89:33:b6:08:5f:e5:8b:70:bf:b3:c2: 0f:52:fe:fa:b5:54:e5:d2:82:09:9f:50:d0:2a:99:23:87:f5: f1:61:11:bc:f3:ed:56:ec:d0:63:26:b6:e4:cd:fa:5c:ce:54: 1c:1e:78:7e:a5:86:56:7f:8f:20:d8:d9:5e:a1:5b:99:9b:76: 47:36:96:6b:aa:4e:d3:42:96:ae:8f:e3:78:cf:de:65:5a:6f: 51:f4:f2:22:ff:fb:c5:0a:de:24:35:a8:73:d9:a4:cd:c6:6a: 09:1e:2c:f8:a2:a7:29:22:5d:71:87:e5:62:85:e7:84:0f:21: 13:94:6b:b9:67:5e:c4:99:79:e4:d9:0c:52:30:39:03:dc:a6: 62:36:b8:03:4b:11:1a:18:d5:88:bf:57:c2:f8:b9:b3:81:c0: 3f:78:6c:df -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8f6LIZ/KyY26NAKfFQSKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzA3OTNlMjRhNjcyMDFmN2Q1MmI2NTY2ODZmNDNkYWRlM2ExMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybUWhg4Zj6aKfjWxEXwVgQSUNjDl pVDmNZCkN8/9FuCyGgLhinsuxgrlvVvuqARyrF1jrUyk2LJ01x6I8R60vA+TrpZ/ 36peTidWl3uW8cDo758qwVe78KLA0rts5G9433jedZmjvXedWlx/im8vccJvA1wK u/er7X9cYUjO/HFdAzDCNS0vGhcDMhGTJucP8ySjGGsoX4Xce2gshtwWRb76xUH3 jfD/mGId97TP4NRjlJx8cyu9kKTA5e4oVMEQE7hGJzXvcYX+211ork2qmE9RXD9j CFdlBZRMG5G7ymG4DQaMmTYjuXOL/Fe7kV/oHIfGMEg6b0NgiA2RjQgokQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFBMHk+JKZyAffVK2VmhvQ9reOhOSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzkzNGVm OC0wY2I1LTRjNTktOWI4Yi04YmRmOThjMGM4ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvOTM0ZWY4 LTBjYjUtNGM1OS05YjhiLThiZGY5OGMwYzhmMC8xL0V3ZVQ0a3BuSUI5OVVyWldh RzlEMnQ0NkU1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDHxiQAwQCW8ooAwQDbUVAAwQCuWLwMA0EAgAC MAcDBQAqAhbQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCvzANBgkqhkiG9w0B AQsFAAOCAQEAQkaXY4aNt+xaGadnXWcaJtAcyLpgEOl56cVGSHHX4aELPCScZcKv 7AddD7RU1brlitwW16wcbALxmt499ZrAQaiSpSbqf8GiWlrSKIcvHroUvXgCpIGa aLzrBkPDbkRNhYkztghf5Ytwv7PCD1L++rVU5dKCCZ9Q0CqZI4f18WERvPPtVuzQ Yya25M36XM5UHB54fqWGVn+PINjZXqFbmZt2RzaWa6pO00KWro/jeM/eZVpvUfTy Iv/7xQreJDWoc9mkzcZqCR4s+KKnKSJdcYflYoXnhA8hE5RruWdexJl55NkMUjA5 A9ymYja4A0sRGhjViL9Xwvi5s4HAP3hs3w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:04 2026 by rpki-client