This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer File: e4huM5cQFPDjX65u41WpXuU_E5c.cer (raw, json) Hash identifier: Sz4airZgSnIBbPSitfQoQU8D0HiKwXfHWrGlB/gb5zQ= Subject key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC2C61FC099DA14F493DF948A2812 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205814 IP: 185.249.159.0/24 IP: 2a13:6400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c2:c6:1f:c0:99:da:14:f4:93:df:94:8a:28:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:67:07:ec:93:a6:f7:6a:7f:06:24:15:14: db:e5:6d:5b:3e:b1:5e:b6:54:a2:cd:23:b6:db:71: d7:d4:32:38:0e:f1:fe:00:e0:6d:33:e7:78:1f:74: c9:93:8d:80:3c:af:af:8b:7d:8c:e0:04:e3:9f:1f: c6:f4:f3:01:6d:a6:a2:ce:a1:ac:b7:a6:0a:28:06: 40:31:fd:96:a4:e9:c5:75:60:1e:79:87:76:95:cf: bc:95:11:a7:b3:9e:d8:4b:15:f0:a9:b4:5b:91:59: ef:44:0d:e0:f4:ef:61:50:37:54:5d:b2:3e:2a:93: ed:85:c7:ae:9f:dd:fe:00:4b:b7:bc:61:ce:51:26: c0:d2:cf:51:83:cd:1e:29:41:37:8c:35:66:8a:0e: fb:38:99:8d:f8:13:bc:fc:da:6c:59:c2:27:e2:3f: a6:78:7f:ba:dc:fb:da:93:7c:1e:3e:f6:ac:ec:c0: 76:1b:00:7c:0a:cb:74:95:15:bd:e9:62:23:86:74: a3:c3:8e:d7:26:b9:f0:a0:b6:28:a4:5f:8f:1f:f5: 68:a0:93:b0:1c:ae:77:0f:f7:e3:2f:25:b5:a3:ea: 3d:63:d3:9c:ac:61:27:f7:2b:b0:3d:95:4d:e9:31: 82:00:21:21:0e:cb:b9:7c:58:bb:7c:ec:fc:c5:9e: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.159.0/24 IPv6: 2a13:6400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205814 Signature Algorithm: sha256WithRSAEncryption 8f:10:48:5e:50:36:3e:8d:69:7d:ef:6f:bf:ea:2c:c0:3a:97: ac:f8:7d:2a:c3:6b:59:64:c4:2a:13:f7:2d:5b:fc:a2:9a:e2: ee:ee:70:7b:e5:36:35:c2:4c:d7:e2:1d:6c:8e:ca:48:cf:3b: ae:36:d1:08:3c:99:1e:ec:17:32:33:15:e5:cb:0b:a6:cd:17: 83:f0:15:13:e8:ff:8c:1f:e0:37:25:7e:48:6d:2f:de:03:32: b4:8e:03:f7:0e:c9:24:a5:5f:57:fe:29:42:73:f9:77:a3:ed: 00:2e:d1:a2:9d:69:29:c2:fb:f1:4a:08:2d:3f:ef:c2:13:9d: cc:da:2e:2d:93:de:cb:7f:3f:5d:23:4a:5b:38:ac:63:d6:01: 7e:e1:6f:f8:9d:59:6c:2d:fe:2d:9c:f2:6f:16:96:66:88:21: 49:a0:ac:8c:c1:2c:a1:fb:62:50:22:19:37:50:43:d4:66:ff: 3a:ff:05:76:fc:f3:ef:55:50:07:a9:f4:39:3e:f9:37:e7:03: 51:7a:4a:ff:03:93:71:2b:d8:43:c3:15:ef:f1:02:d0:e0:9a: 59:e5:a0:d4:bf:84:ef:03:6b:02:db:f2:6a:1d:c8:ce:40:d1: b0:df:ed:83:2e:3f:55:40:4b:a9:32:b8:de:c0:8d:1b:e8:e1: 4e:6d:46:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WsLGH8CZ2hT0k9+UiigSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg4NmUzMzk3MTAxNGYwZTM1ZmFlNmVlMzU1YTk1ZWU1M2YxMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYNnB+yTpvdqfwYkFRTb5W1bPrFe tlSizSO223HX1DI4DvH+AOBtM+d4H3TJk42APK+vi32M4ATjnx/G9PMBbaaizqGs t6YKKAZAMf2WpOnFdWAeeYd2lc+8lRGns57YSxXwqbRbkVnvRA3g9O9hUDdUXbI+ KpPthceun93+AEu3vGHOUSbA0s9Rg80eKUE3jDVmig77OJmN+BO8/NpsWcIn4j+m eH+63Pvak3wePvas7MB2GwB8Cst0lRW96WIjhnSjw47XJrnwoLYopF+PH/VooJOw HK53D/fjLyW1o+o9Y9OcrGEn9yuwPZVN6TGCACEhDsu5fFi7fOz8xZ5nCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHuIbjOXEBTw41+ubuNVqV7lPxOXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzJiNDg3 ZS0wYTdjLTRjNDYtYTI0MS0zZDBkYjhlYjRlMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMmI0ODdl LTBhN2MtNGM0Ni1hMjQxLTNkMGRiOGViNGUxMy8xL2U0aHVNNWNRRlBEalg2NXU0 MVdwWHVVX0U1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufmfMA0EAgACMAcDBQMqE2QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMj9jANBgkqhkiG9w0BAQsFAAOCAQEAjxBIXlA2Po1p fe9vv+oswDqXrPh9KsNrWWTEKhP3LVv8opri7u5we+U2NcJM1+IdbI7KSM87rjbR CDyZHuwXMjMV5csLps0Xg/AVE+j/jB/gNyV+SG0v3gMytI4D9w7JJKVfV/4pQnP5 d6PtAC7Rop1pKcL78UoILT/vwhOdzNouLZPey38/XSNKWzisY9YBfuFv+J1ZbC3+ LZzybxaWZoghSaCsjMEsoftiUCIZN1BD1Gb/Ov8Fdvzz71VQB6n0OT75N+cDUXpK /wOTcSvYQ8MV7/EC0OCaWeWg1L+E7wNrAtvyah3IzkDRsN/tgy4/VUBLqTK43sCN G+jhTm1G/A== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:34 2026 by rpki-client