This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer (raw, json) Hash identifier: ZrAJ8d63k2/Vs3AC76WB1EMYCWTrvujD5kI9VqSFj9o= Subject key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE9E3D31046B1073236136CC2883A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.222.228.0/22 IP: 2a0c:f800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e9:e3:d3:10:46:b1:07:32:36:13:6c:c2:88:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a17259a863c3d637d457e119b750df95e003fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:23:57:e6:0e:d7:7c:67:58:80:02:a4:67: c9:cc:79:a4:36:d9:fb:24:cc:a4:fc:fa:bc:a8:6f: 0a:7a:5b:ca:51:4f:69:06:a7:c4:d5:59:59:3a:9a: 7e:c5:61:67:33:b8:af:94:3c:df:1c:40:de:cf:3c: 4a:0f:af:48:2e:b9:8c:04:20:5a:5d:47:8f:94:10: 6d:50:98:9d:86:61:83:87:e9:43:62:20:6e:57:24: fc:7a:de:2f:85:82:ca:10:65:e1:7b:85:d5:65:f5: ab:ef:7d:5f:e8:78:7b:e3:75:f7:9c:6a:f8:09:fc: ef:31:2c:d1:d6:5c:fd:d3:6f:94:70:71:b9:79:9f: f9:f8:0f:19:9c:e9:60:95:9b:db:18:fe:3a:e0:ed: 89:5a:4e:56:98:57:76:87:de:a9:25:17:b1:73:32: 43:ef:40:10:a7:13:9f:72:d2:34:85:cd:b0:0e:e4: 17:70:7f:fa:8c:c5:ae:c3:39:91:56:af:fb:7c:05: 46:07:58:13:9d:25:19:0d:94:ac:c8:0b:40:bc:54: e0:ca:8c:3b:d2:d4:ce:d7:b3:0e:f2:c4:31:78:46: 74:b3:3e:9d:36:d6:09:54:3f:8c:f9:8b:05:4c:a7: db:95:75:87:a3:4b:02:c3:d3:ae:9c:65:9a:1c:41: c4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.228.0/22 IPv6: 2a0c:f800::/29 Signature Algorithm: sha256WithRSAEncryption a4:28:63:bf:19:cc:dd:b5:9c:a7:b1:0b:62:c9:c7:10:b2:53: 78:7e:ff:96:d1:dc:5c:1e:26:2a:d2:11:91:e5:d5:88:27:1c: 00:2e:ec:19:23:2b:75:80:d6:5a:d7:0e:0c:76:ee:4a:e6:40: 4b:80:97:2d:a5:1e:92:90:6c:e6:66:c1:10:17:3e:af:57:aa: 7f:4e:34:e2:87:f5:87:0b:2f:ff:65:f7:e8:28:47:7c:62:52: 6f:4d:0c:4f:18:d8:e8:ac:9b:14:96:ff:42:6e:c6:88:2d:9e: 57:7b:3b:14:c0:f5:bc:91:9a:58:d0:f1:06:ac:fa:57:7e:e3: 4e:75:ec:45:d2:27:05:09:6b:8b:2e:35:f5:d5:9d:42:79:65: 4d:18:98:3c:e8:ec:fc:b0:16:4b:85:53:46:6b:ba:f4:d8:95: 61:65:2d:bb:d6:ac:b0:20:06:4b:eb:8a:12:95:ef:67:fc:7b: 3b:ae:5a:00:a7:a5:85:bf:e0:df:d3:95:50:d3:6c:f8:5a:21: 06:23:a6:02:5e:8a:c4:d2:fe:a7:83:93:99:61:aa:1b:7b:8b: 7c:22:a2:a0:aa:a8:60:9e:22:9e:a5:80:40:46:c2:81:de:b3: 62:3e:fe:58:b1:ac:84:1f:6e:36:83:17:ba:9c:1b:ba:a4:ad: 79:65:9a:86 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57Onj0xBGsQcyNhNswog6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTE3MjU5YTg2M2MzZDYzN2Q0NTdlMTE5Yjc1MGRmOTVlMDAzZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKUjV+YO13xnWIACpGfJzHmkNtn7 JMyk/Pq8qG8KelvKUU9pBqfE1VlZOpp+xWFnM7ivlDzfHEDezzxKD69ILrmMBCBa XUePlBBtUJidhmGDh+lDYiBuVyT8et4vhYLKEGXhe4XVZfWr731f6Hh743X3nGr4 CfzvMSzR1lz902+UcHG5eZ/5+A8ZnOlglZvbGP464O2JWk5WmFd2h96pJRexczJD 70AQpxOfctI0hc2wDuQXcH/6jMWuwzmRVq/7fAVGB1gTnSUZDZSsyAtAvFTgyow7 0tTO17MO8sQxeEZ0sz6dNtYJVD+M+YsFTKfblXWHo0sCw9OunGWaHEHEMQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHoXJZqGPD1jfUV+EZt1DfleAD/WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzAwODQ5 ZS1kOGU2LTRiYjEtYWQzMC1hZDhiYzhiYzc5NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvMDA4NDll LWQ4ZTYtNGJiMS1hZDMwLWFkOGJjOGJjNzk2Ny8xL2VoY2xtb1k4UFdOOVJYNFJt M1VOLVY0QVA5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCud7kMA0EAgACMAcDBQMqDPgAMA0GCSqGSIb3 DQEBCwUAA4IBAQCkKGO/GczdtZynsQtiyccQslN4fv+W0dxcHiYq0hGR5dWIJxwA LuwZIyt1gNZa1w4Mdu5K5kBLgJctpR6SkGzmZsEQFz6vV6p/TjTih/WHCy//Zffo KEd8YlJvTQxPGNjorJsUlv9CbsaILZ5XezsUwPW8kZpY0PEGrPpXfuNOdexF0icF CWuLLjX11Z1CeWVNGJg86Oz8sBZLhVNGa7r02JVhZS271qywIAZL64oSle9n/Hs7 rloAp6WFv+Df05VQ02z4WiEGI6YCXorE0v6ng5OZYaobe4t8IqKgqqhgniKepYBA RsKB3rNiPv5YsayEH242gxe6nBu6pK15ZZqG -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:36 2026 by rpki-client