This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer File: ehuEnDQHAlATY6H5J-xCQJm5RyY.cer (raw, json) Hash identifier: vWHVlk91hekU2PbkPecg5bBw6SNth4XMSZFAGhFUz6o= Subject key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F142B3CFEC46226E73831EC826FE932 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48684 IP: 31.192.112.0/20 IP: 67.22.32.0 -- 67.22.59.255 IP: 94.199.248.0/21 IP: 104.243.216.0/22 IP: 185.75.252.0/22 IP: 2a01:9dc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:2b:3c:fe:c4:62:26:e7:38:31:ec:82:6f:e9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a1b849c340702501363a1f927ec424099b94726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:ea:7c:9c:9a:4a:81:f9:e8:19:8d:d5:87: b1:19:f6:ae:3c:36:aa:68:c9:74:55:df:b8:56:e4: dc:85:d9:3f:f3:4f:b8:2e:47:7d:0e:b4:61:a0:e8: db:38:70:b6:94:39:72:9a:b3:4d:79:bb:a1:4a:4a: dc:f5:56:11:79:ab:bd:6f:f8:5a:72:4f:7d:7f:05: 6e:0a:12:b3:b2:19:ae:4d:3d:fa:ee:d1:48:71:f1: a3:4a:2a:d9:23:77:32:59:16:de:f1:b7:64:81:f2: e5:7a:a8:08:23:97:75:a2:f7:38:45:40:b6:c9:79: 12:74:eb:6f:48:5e:0e:5a:0e:fe:ff:0d:ac:9b:27: c0:bc:bf:80:b2:5a:18:6d:22:00:77:ce:2e:6a:41: ba:ec:14:e1:3e:d9:e8:1d:e6:01:7d:67:54:ec:a6: ab:6b:46:8e:f3:3b:33:d7:f4:c0:27:22:ed:ed:a3: fc:f2:27:06:94:e4:a5:a7:9b:90:88:b4:d0:ac:97: 2d:4d:d5:ee:ec:a2:39:2b:73:eb:c4:73:e1:3a:cb: c1:2a:d6:d7:3e:33:7b:dc:04:c6:4e:e4:e9:9a:30: 6a:50:c7:cd:46:bb:4e:28:2a:4a:96:f5:e7:61:6c: a8:85:74:35:9e:84:28:74:b3:a4:ff:32:f6:0d:33: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.112.0/20 67.22.32.0-67.22.59.255 94.199.248.0/21 104.243.216.0/22 185.75.252.0/22 IPv6: 2a01:9dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48684 Signature Algorithm: sha256WithRSAEncryption 61:bf:aa:13:d7:5c:48:20:02:15:12:a3:88:75:d0:97:5e:33: c8:fe:05:3b:04:b6:2f:5b:8f:79:c0:5e:0f:ba:ed:58:d6:57: 8a:7d:bf:db:22:0b:6d:a7:69:3a:25:17:64:f6:29:cd:b8:8a: 1c:66:68:97:c4:18:46:71:95:f7:b1:ee:d7:78:d6:dd:24:ee: 50:6f:99:97:66:09:6f:d6:65:df:05:95:44:0e:42:f5:da:ef: 0c:c0:72:ac:42:e7:e5:eb:94:df:85:f0:05:ef:7c:c7:3c:49: 9f:14:d1:cb:bf:c7:b6:2d:a3:18:61:26:09:bf:fc:e0:d2:5f: 55:0d:c4:ca:54:b5:de:f6:53:37:4b:d9:ca:09:67:64:7c:0c: f8:a9:64:28:ce:45:83:c5:b8:e9:89:61:e7:0e:1d:da:df:a4: 7b:5a:40:79:49:8c:57:ff:7a:8e:68:3e:1a:87:af:d7:d8:c2: bc:5e:58:1a:e8:3c:19:95:94:44:19:a0:49:b4:46:5d:f9:77: c8:db:8b:23:3d:ea:49:e4:21:c8:af:5f:f4:95:da:46:62:c4: f3:51:0b:77:4f:b0:7f:90:37:fe:5d:49:3c:c0:3d:cc:ae:83: ec:f8:ad:ae:09:bc:6e:c3:97:92:a2:4c:fa:ac:62:21:06:55: 4a:ca:7a:e5 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt/FCs8/sRiJuc4MeyCb+kyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTFiODQ5YzM0MDcwMjUwMTM2M2ExZjkyN2VjNDI0MDk5Yjk0NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh7qfJyaSoH56BmN1YexGfauPDaq aMl0Vd+4VuTchdk/80+4Lkd9DrRhoOjbOHC2lDlymrNNebuhSkrc9VYReau9b/ha ck99fwVuChKzshmuTT367tFIcfGjSirZI3cyWRbe8bdkgfLleqgII5d1ovc4RUC2 yXkSdOtvSF4OWg7+/w2smyfAvL+AsloYbSIAd84uakG67BThPtnoHeYBfWdU7Kar a0aO8zsz1/TAJyLt7aP88icGlOSlp5uQiLTQrJctTdXu7KI5K3PrxHPhOsvBKtbX PjN73ATGTuTpmjBqUMfNRrtOKCpKlvXnYWyohXQ1noQodLOk/zL2DTMA1wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFHobhJw0BwJQE2Oh+SfsQkCZuUcmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzI3NzMz My1lMWYzLTQyZWMtYThhYy1iMWY1NmE0NTRkODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMjc3MzMz LWUxZjMtNDJlYy1hOGFjLWIxZjU2YTQ1NGQ4Mi8xL2VodUVuRFFIQWxBVFk2SDVK LXhDUUptNVJ5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQEH8BwMAwDBAVDFiADBAJDFjgDBANex/gDBAJo 89gDBAK5S/wwDQQCAAIwBwMFACoBncAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AL4sMA0GCSqGSIb3DQEBCwUAA4IBAQBhv6oT11xIIAIVEqOIddCXXjPI/gU7BLYv W495wF4Puu1Y1leKfb/bIgttp2k6JRdk9inNuIocZmiXxBhGcZX3se7XeNbdJO5Q b5mXZglv1mXfBZVEDkL12u8MwHKsQufl65TfhfAF73zHPEmfFNHLv8e2LaMYYSYJ v/zg0l9VDcTKVLXe9lM3S9nKCWdkfAz4qWQozkWDxbjpiWHnDh3a36R7WkB5SYxX /3qOaD4ah6/X2MK8Xlga6DwZlZREGaBJtEZd+XfI24sjPepJ5CHIr1/0ldpGYsTz UQt3T7B/kDf+XUk8wD3MroPs+K2uCbxuw5eSokz6rGIhBlVKynrl -----END CERTIFICATE-----Generated at Mon Jan 12 04:04:56 2026 by rpki-client