This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer (raw, json) Hash identifier: bX1QVevjqTLYGZQ9gnziik2DM3FejkjAXM1pzjkYQXw= Subject key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F41653CCD6DF33F51189910A56D88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35571 IP: 87.236.86.0/23 IP: 185.141.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:41:65:3c:cd:6d:f3:3f:51:18:99:10:a5:6d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787aac71f17ef033cb6536795338fdc7bc0f2263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:21:ae:54:2a:ce:74:dc:46:97:07:41:d2: 15:44:a0:95:3d:c0:74:e3:b4:87:91:2a:f9:68:62: 9e:c3:21:72:21:a0:49:ef:f3:48:f1:d6:4f:96:a6: 3a:39:43:16:7c:f7:7e:6d:b9:80:14:67:a6:9c:23: ad:bf:2c:9e:73:64:bd:08:86:6b:ed:45:b2:d5:fe: b8:19:7c:3a:16:65:0d:bb:57:61:cb:82:71:90:c9: 8c:08:56:ae:44:f3:db:8d:ce:c4:bb:e7:89:41:d8: b2:59:b5:19:a9:2d:bf:6f:a8:02:c1:c7:83:93:3e: 40:01:87:d9:ad:4c:ae:5a:41:36:23:ee:ec:ab:58: 57:c7:ef:65:f4:ff:fe:7f:de:79:4d:81:a9:15:db: c1:a8:f3:04:ac:2a:0a:c6:10:8f:cc:a0:78:e3:a5: 1b:b1:eb:3e:0c:ea:85:15:e9:9c:13:90:d4:5a:54: 5b:3f:71:c2:a5:9a:8b:9f:34:05:3c:7b:ab:fa:03: e1:e3:57:c5:91:02:73:2e:cc:08:4a:42:8d:24:67: af:27:9c:96:b8:d2:a0:f3:83:83:9b:9f:49:b3:46: ba:44:5d:46:1a:a0:09:06:62:83:97:4a:09:da:2e: d7:13:0c:13:57:7c:e8:0c:32:9f:1d:2d:b7:83:24: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.86.0/23 185.141.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35571 Signature Algorithm: sha256WithRSAEncryption 69:5a:09:20:70:e6:71:13:db:36:88:96:bb:43:0a:fd:e1:80: dc:15:36:f9:ef:6f:f6:74:2f:7c:fd:a8:08:93:cb:c6:7c:83: c8:22:1f:e4:69:76:67:63:eb:7f:e3:af:c2:b6:af:2e:74:8f: 96:e1:80:5e:6a:41:09:97:59:3b:16:b9:b2:27:52:ab:89:76: 8a:78:d8:13:2f:8d:f0:a8:eb:28:bf:86:63:34:68:1d:d2:d1: a4:40:33:11:ab:d3:f9:e0:3b:62:e9:24:8d:17:41:ca:d9:b7: 65:da:e8:4a:56:de:d8:9f:ce:4c:1a:86:c8:c8:2d:9f:ec:6c: 4f:f9:fa:d4:5d:cc:5e:71:9a:55:d5:8b:d4:ea:68:c3:f4:87: 9b:bd:3d:c7:de:8f:d2:3a:ec:d7:f5:7a:2e:f7:74:16:e5:99: a1:61:79:9c:b0:df:b0:3b:31:93:73:8e:a0:dd:f1:a9:c0:c5: ad:73:09:99:23:23:a9:f0:6b:23:2a:7a:36:31:0e:72:13:97: c7:17:8d:6d:81:ed:2b:e3:94:14:c9:f5:b1:af:02:ba:b5:14: 09:48:95:4f:de:ed:cb:13:0c:c0:0b:a8:35:24:48:69:ce:54: 6e:d0:16:9f:17:df:3f:fc:29:c1:ff:58:a3:51:0b:ed:d4:40: e2:ca:f3:92 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5f0FlPM1t8z9RGJkQpW2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdhYWM3MWYxN2VmMDMzY2I2NTM2Nzk1MzM4ZmRjN2JjMGYyMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EAhrlQqznTcRpcHQdIVRKCVPcB0 47SHkSr5aGKewyFyIaBJ7/NI8dZPlqY6OUMWfPd+bbmAFGemnCOtvyyec2S9CIZr 7UWy1f64GXw6FmUNu1dhy4JxkMmMCFauRPPbjc7Eu+eJQdiyWbUZqS2/b6gCwceD kz5AAYfZrUyuWkE2I+7sq1hXx+9l9P/+f955TYGpFdvBqPMErCoKxhCPzKB446Ub ses+DOqFFemcE5DUWlRbP3HCpZqLnzQFPHur+gPh41fFkQJzLswISkKNJGevJ5yW uNKg84ODm59Js0a6RF1GGqAJBmKDl0oJ2i7XEwwTV3zoDDKfHS23gyRU9wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHh6rHHxfvAzy2U2eVM4/ce8DyJjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzg1ZGRh ZS01NGE3LTRlN2ItOTZkYS1kMTI4NjdiNDY3MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvODVkZGFl LTU0YTctNGU3Yi05NmRhLWQxMjg2N2I0NjczMy8xL2VIcXNjZkYtOERQTFpUWjVV emo5eDd3UEltTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBV+xWAwQCuY20MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCK8zANBgkqhkiG9w0BAQsFAAOCAQEAaVoJIHDmcRPbNoiWu0MK/eGA 3BU2+e9v9nQvfP2oCJPLxnyDyCIf5Gl2Z2Prf+OvwravLnSPluGAXmpBCZdZOxa5 sidSq4l2injYEy+N8KjrKL+GYzRoHdLRpEAzEavT+eA7YukkjRdBytm3ZdroSlbe 2J/OTBqGyMgtn+xsT/n61F3MXnGaVdWL1Opow/SHm709x96P0jrs1/V6Lvd0FuWZ oWF5nLDfsDsxk3OOoN3xqcDFrXMJmSMjqfBrIyp6NjEOchOXxxeNbYHtK+OUFMn1 sa8CurUUCUiVT97tyxMMwAuoNSRIac5UbtAWnxffP/wpwf9Yo1EL7dRA4srzkg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:22 2026 by rpki-client