This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer (raw, json) Hash identifier: 7pj9K6XLuzdKpm10YRijUB9kcCG3YX5jv5jrrowZchs= Subject key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3482B6C1D86CEBD7DAFB9CC77CDEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.255.0.0/22 IP: 2a0c:4ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:48:2b:6c:1d:86:ce:bd:7d:af:b9:cc:77:cd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7968c4d3ffca8e737868a45696a198fde09fd457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:ea:ee:14:cb:0d:48:34:8c:59:62:57:4e: 85:08:86:8b:dc:ed:88:39:f5:4c:ef:e4:58:d8:cf: bf:14:5a:d2:c5:6e:67:44:e9:eb:be:a2:e4:9f:c3: 43:6b:06:8b:b6:52:17:76:f6:6b:1c:8d:c2:83:5a: 77:4f:55:03:ac:d0:f8:02:8b:ab:f9:f8:d9:d8:8c: 78:ee:c9:0e:4a:1d:73:03:c7:5a:f6:6e:f1:0d:bc: b3:fa:78:28:12:42:23:97:e7:f9:0a:c6:38:29:2e: d9:4b:d1:9e:08:74:10:e1:7f:00:d6:61:fb:62:37: 3d:e3:d4:d2:45:18:43:01:ab:18:12:01:2e:c6:2f: ed:2b:76:e2:a6:38:de:03:d1:89:b3:1f:4f:8b:e0: 71:17:ac:5b:7c:01:3f:6b:e4:52:70:50:48:35:a5: 3a:34:ff:c3:25:73:85:29:96:36:ad:49:53:e6:f7: ac:43:d4:64:84:07:98:b3:b9:b3:1a:13:3d:bd:04: b1:80:7a:ac:c8:f5:c5:eb:81:d4:11:5d:17:c3:04: 7a:5e:9c:a0:eb:3d:ee:ea:1f:7d:cf:45:82:19:36: 72:c2:b2:a3:ae:7e:92:20:21:cb:00:8d:2b:1e:55: 6b:8a:bc:93:40:97:69:08:a2:64:1d:5f:da:0a:68: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.0.0/22 IPv6: 2a0c:4ec0::/29 Signature Algorithm: sha256WithRSAEncryption 2d:2a:b1:c3:76:8e:a4:67:c0:82:3e:97:38:c3:a7:95:79:b6: 4b:ef:41:61:35:28:3e:fe:bf:55:e1:27:4f:a7:47:33:80:b8: 0c:36:2c:ce:b4:97:f5:67:d8:c0:b6:17:78:62:e7:ac:09:c7: 4c:ca:d1:00:0c:80:83:19:7e:80:66:18:b5:86:5b:cd:15:dc: 6f:e4:51:b4:d2:96:88:49:d3:04:6c:cb:80:5a:ba:d3:07:73: 89:73:9d:8f:a3:10:9b:4d:bc:e4:3a:fe:73:43:41:d1:98:44: 2a:78:c4:db:01:a7:92:13:c1:7f:01:64:50:2e:b1:4f:25:58: 39:1b:f9:3b:54:f9:c1:ab:90:5e:6a:04:3f:5f:8d:76:13:30: 49:55:8e:48:6a:ac:d8:69:a3:b9:b4:ec:8a:84:24:2a:cf:09: f6:05:ae:95:aa:b2:e0:2a:f1:f6:6e:8a:bd:12:a6:d1:1c:c0: db:2c:ea:6f:6d:63:1d:db:82:58:44:1f:f3:b1:4a:cf:64:ad: ee:60:6a:9c:02:ba:e8:55:35:7d:1f:9b:01:74:73:82:9f:4a: 3d:c4:5d:43:1d:46:c2:ce:8d:ad:a8:7a:87:70:e6:2d:97:cf: a7:90:2c:4d:36:ce:3e:d8:f9:9b:98:6a:46:76:33:00:df:37: 45:92:ae:97 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7o0grbB2Gzr19r7nMd83uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTY4YzRkM2ZmY2E4ZTczNzg2OGE0NTY5NmExOThmZGUwOWZkNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTLq7hTLDUg0jFliV06FCIaL3O2I OfVM7+RY2M+/FFrSxW5nROnrvqLkn8NDawaLtlIXdvZrHI3Cg1p3T1UDrND4Aour +fjZ2Ix47skOSh1zA8da9m7xDbyz+ngoEkIjl+f5CsY4KS7ZS9GeCHQQ4X8A1mH7 Yjc949TSRRhDAasYEgEuxi/tK3bipjjeA9GJsx9Pi+BxF6xbfAE/a+RScFBINaU6 NP/DJXOFKZY2rUlT5vesQ9RkhAeYs7mzGhM9vQSxgHqsyPXF64HUEV0XwwR6Xpyg 6z3u6h99z0WCGTZywrKjrn6SICHLAI0rHlVriryTQJdpCKJkHV/aCmj2DwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHloxNP/yo5zeGikVpahmP3gn9RXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzk5MDU2 MC1lMzkzLTRmNTQtOTdlOS0wNzczZWQ2ZjRmZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvOTkwNTYw LWUzOTMtNGY1NC05N2U5LTA3NzNlZDZmNGZmZC8xL2VXakUwX19Lam5ONGFLUlds cUdZX2VDZjFGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf8AMA0EAgACMAcDBQMqDE7AMA0GCSqGSIb3 DQEBCwUAA4IBAQAtKrHDdo6kZ8CCPpc4w6eVebZL70FhNSg+/r9V4SdPp0czgLgM NizOtJf1Z9jAthd4YuesCcdMytEADICDGX6AZhi1hlvNFdxv5FG00paISdMEbMuA WrrTB3OJc52PoxCbTbzkOv5zQ0HRmEQqeMTbAaeSE8F/AWRQLrFPJVg5G/k7VPnB q5BeagQ/X412EzBJVY5IaqzYaaO5tOyKhCQqzwn2Ba6VqrLgKvH2boq9EqbRHMDb LOpvbWMd24JYRB/zsUrPZK3uYGqcArroVTV9H5sBdHOCn0o9xF1DHUbCzo2tqHqH cOYtl8+nkCxNNs4+2PmbmGpGdjMA3zdFkq6X -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:46 2026 by rpki-client