This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer File: ean2o4HOSlo-zLJJOmhGCcmIoPw.cer (raw, json) Hash identifier: VH9zcnfmJZ446OeYw70wEERBK0dx9DZHyni74RJUJVk= Subject key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3BE4DA218AA82F460C93CA52B6CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.218.240.0/22 IP: 2a0b:dec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:e4:da:21:8a:a8:2f:46:0c:93:ca:52:b6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:87:ea:8a:29:95:a1:23:ec:35:b2:3e:b8: f9:e6:fa:ec:93:e0:ff:f3:17:91:e7:da:86:96:0d: 07:11:21:1f:b1:40:8f:91:da:8b:f1:af:cf:55:e1: 6f:f8:83:56:7b:88:39:3f:b2:07:12:a1:05:4a:07: 3b:f9:f6:56:e7:4e:00:d4:cb:c5:6b:12:ef:d4:05: 22:5e:bd:00:bd:2d:5c:6a:64:ce:db:33:f8:73:ac: b2:08:9e:d3:81:58:a8:64:36:9c:fd:d8:16:57:ca: ef:73:2b:5b:ae:d0:ad:49:2d:24:98:ba:d1:de:7e: fb:9d:43:03:31:bb:cb:6a:4e:80:64:6e:08:d5:20: 7f:26:e6:4e:7f:cd:9a:a8:c9:74:09:49:68:db:e2: 4e:d8:09:b2:ea:fc:94:ed:e2:71:d3:09:12:af:a9: d2:c9:de:9a:5e:c7:02:ed:5c:40:47:83:3b:70:92: 0e:6c:35:2a:a7:24:74:eb:b8:b5:7f:61:60:fa:d3: 0f:75:f3:4b:f0:cb:1e:aa:f2:dd:d9:00:b0:69:35: 77:66:df:b2:27:64:67:01:96:32:3b:75:6e:ff:2d: af:be:19:4a:fb:9f:9b:3e:73:0d:1e:91:8b:4f:7e: c9:14:1b:3c:6e:1d:82:4d:35:69:79:20:f0:7c:de: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.240.0/22 IPv6: 2a0b:dec0::/29 Signature Algorithm: sha256WithRSAEncryption 6c:10:a9:cb:40:99:9b:36:2c:50:b5:0c:5c:16:ec:22:10:a9: b9:99:a6:0f:a2:6c:37:95:4c:14:5f:cf:e6:95:24:71:e2:41: 0d:8f:4f:8c:8e:57:0f:91:a6:0a:21:12:94:81:3e:5c:33:83: 5e:95:c4:fa:9b:a6:a4:6d:b1:80:3e:76:78:a9:60:19:3b:ab: bc:4a:33:9f:d0:d6:ce:a1:9e:e9:b5:bf:6e:40:c7:ae:8f:99: cd:02:09:46:92:f3:ab:71:18:e7:92:49:5b:4f:6f:99:32:62: 50:a0:32:ef:1b:ec:bc:b1:90:10:92:ef:3d:ed:8a:30:03:71: b1:03:80:ea:43:17:9b:ca:db:2f:42:2b:d4:75:10:73:ac:44: 0c:c3:27:f5:1b:d0:f0:a9:2a:d2:e4:2b:f4:8b:9c:92:14:d2: bc:f2:4d:fd:95:e0:da:6b:b6:3b:d5:6a:e8:4e:dd:93:15:c3: 52:7e:ee:2b:bc:31:d1:e1:ef:57:b1:57:68:1d:09:09:7c:9f: da:a3:24:53:3f:4c:21:ad:b7:64:50:06:e1:19:1e:e9:d5:1c: 6e:0a:f5:d1:fc:2e:08:9f:b4:c3:27:45:cc:46:a0:57:a7:27: ee:1a:d5:38:10:ad:c6:d5:5b:3a:73:e9:51:ee:22:86:2f:62: 55:96:3d:39 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26zvk2iGKqC9GDJPKUrbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWE5ZjZhMzgxY2U0YTVhM2VjY2IyNDkzYTY4NDYwOWM5ODhhMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2SH6ooplaEj7DWyPrj55vrsk+D/ 8xeR59qGlg0HESEfsUCPkdqL8a/PVeFv+INWe4g5P7IHEqEFSgc7+fZW504A1MvF axLv1AUiXr0AvS1camTO2zP4c6yyCJ7TgVioZDac/dgWV8rvcytbrtCtSS0kmLrR 3n77nUMDMbvLak6AZG4I1SB/JuZOf82aqMl0CUlo2+JO2Amy6vyU7eJx0wkSr6nS yd6aXscC7VxAR4M7cJIObDUqpyR067i1f2Fg+tMPdfNL8MseqvLd2QCwaTV3Zt+y J2RnAZYyO3Vu/y2vvhlK+5+bPnMNHpGLT37JFBs8bh2CTTVpeSDwfN6/XwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHmp9qOBzkpaPsyySTpoRgnJiKD8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzkxMWI4 My0wYzI3LTQwNDAtOTcwZS1lY2FmNTUzYzMxZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvOTExYjgz LTBjMjctNDA0MC05NzBlLWVjYWY1NTNjMzFkNy8xL2VhbjJvNEhPU2xvLXpMSkpP bWhHQ2NtSW9Qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudrwMA0EAgACMAcDBQMqC97AMA0GCSqGSIb3 DQEBCwUAA4IBAQBsEKnLQJmbNixQtQxcFuwiEKm5maYPomw3lUwUX8/mlSRx4kEN j0+MjlcPkaYKIRKUgT5cM4NelcT6m6akbbGAPnZ4qWAZO6u8SjOf0NbOoZ7ptb9u QMeuj5nNAglGkvOrcRjnkklbT2+ZMmJQoDLvG+y8sZAQku897YowA3GxA4DqQxeb ytsvQivUdRBzrEQMwyf1G9DwqSrS5Cv0i5ySFNK88k39leDaa7Y71WroTt2TFcNS fu4rvDHR4e9XsVdoHQkJfJ/aoyRTP0whrbdkUAbhGR7p1RxuCvXR/C4In7TDJ0XM RqBXpyfuGtU4EK3G1Vs6c+lR7iKGL2JVlj05 -----END CERTIFICATE-----Generated at Mon Jan 26 20:53:27 2026 by rpki-client