This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer File: ejClouMyTV5BJmf58pb1KvKXu00.cer (raw, json) Hash identifier: FcpI0NdvpnsI0qCN1OztuU1rF9+DkbMx2wdS5F4xf50= Subject key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8491E6445CAA91D77DDB16CAD85964 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201042 AS: 216319 IP: 194.13.142.0/24 IP: 2a13:4840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:91:e6:44:5c:aa:91:d7:7d:db:16:ca:d8:59:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:10:bd:14:b8:14:28:15:ba:7d:18:ea:b6:af: 58:75:d1:95:d8:63:ec:a5:b8:fa:c5:17:88:d3:4c: 73:c8:d3:6a:45:28:32:38:47:1c:c3:f6:35:08:bd: c2:1f:b0:11:f1:d0:d9:9e:dd:3d:5f:fa:4f:09:0a: 53:9f:e8:d3:42:f9:7b:3a:f9:b8:bc:e8:62:93:ca: 8b:04:07:42:4d:94:bc:a4:16:e8:fd:1f:4e:0a:9e: 0c:11:3b:59:45:19:1b:53:f8:80:49:65:a1:bc:b7: 59:01:4b:8d:a7:31:60:04:e3:4d:48:89:79:cd:3f: ee:7f:bd:10:48:7f:28:ee:06:ec:d4:a5:99:a0:52: b9:94:a3:b0:a0:ce:77:2d:a7:ca:34:1a:cc:6e:59: 69:3b:7d:62:95:1d:a8:da:d4:26:a3:1d:e5:93:3e: 79:33:5e:61:b5:7a:22:7b:2b:65:bc:73:e1:b7:fa: e2:d7:3a:fe:89:9c:72:c1:63:cf:7b:53:a8:51:ed: 64:4b:de:39:c9:54:21:ca:be:fd:fd:cc:71:68:fa: d0:41:21:1f:2e:9c:41:6e:21:45:7e:0f:44:61:d1: cb:9a:29:ad:93:c4:7f:b4:eb:18:6e:50:01:2a:02: 32:f8:a7:4d:77:14:74:a6:f5:ef:92:d9:20:d2:8f: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.142.0/24 IPv6: 2a13:4840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201042 216319 Signature Algorithm: sha256WithRSAEncryption 5b:72:ff:e0:10:6f:f2:b4:9d:89:99:31:5c:c0:ef:28:35:5a: 11:56:6b:e1:64:42:6d:c7:13:fb:01:e6:78:16:39:d2:22:ad: f7:b0:5f:9c:33:28:36:a6:a2:45:fa:a1:ec:38:56:c4:68:df: 49:d3:51:7d:94:66:2a:0e:1a:b8:de:61:61:5a:72:74:a5:89: 20:78:37:29:68:91:18:df:a6:fe:15:d1:07:2e:f9:f1:31:78: 2f:b7:8f:64:79:6e:d8:5c:98:a3:88:52:bd:ce:c4:6b:13:92: e2:55:27:e3:14:1e:c1:8b:e4:62:9b:9c:6e:b9:3d:26:c6:e4: 05:7f:58:d8:f3:00:51:42:e9:ac:ad:45:05:ad:24:02:9f:86: 5d:8c:c2:f2:75:63:ca:b5:d3:61:51:b2:d3:e8:a1:64:3e:1d: 93:3c:11:69:a6:5e:17:56:a3:69:d2:1d:28:17:6c:0c:67:8f: a7:d8:a4:bc:4f:8c:08:30:07:85:25:18:78:b7:21:94:bc:b1: ae:e8:ad:d5:45:ab:5b:c9:d2:32:52:4f:66:27:db:90:10:a3: 15:16:6e:ad:8d:da:d7:b1:41:69:7f:bc:e7:e8:94:01:45:b6: 3f:95:24:9a:2b:85:ba:38:0d:6e:0d:75:db:ac:f4:27:99:50: 8a:ee:6d:1c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/hJHmRFyqkdd92xbK2FlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTMwYTVhMmUzMzI0ZDVlNDEyNjY3ZjlmMjk2ZjUyYWYyOTdiYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xC9FLgUKBW6fRjqtq9YddGV2GPs pbj6xReI00xzyNNqRSgyOEccw/Y1CL3CH7AR8dDZnt09X/pPCQpTn+jTQvl7Ovm4 vOhik8qLBAdCTZS8pBbo/R9OCp4METtZRRkbU/iASWWhvLdZAUuNpzFgBONNSIl5 zT/uf70QSH8o7gbs1KWZoFK5lKOwoM53LafKNBrMbllpO31ilR2o2tQmox3lkz55 M15htXoieytlvHPht/ri1zr+iZxywWPPe1OoUe1kS945yVQhyr79/cxxaPrQQSEf LpxBbiFFfg9EYdHLmimtk8R/tOsYblABKgIy+KdNdxR0pvXvktkg0o81vQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFHowpaLjMk1eQSZn+fKW9Sryl7tNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2NkOWI3 Zi03ZTU3LTRmOTUtYWIzOS1mNGQxYmNiNWM5MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvY2Q5Yjdm LTdlNTctNGY5NS1hYjM5LWY0ZDFiY2I1YzkwMS8xL2VqQ2xvdU15VFY1QkptZjU4 cGIxS3ZLWHUwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwg2OMA0EAgACMAcDBQMqE0hAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMRUgIDA0z/MA0GCSqGSIb3DQEBCwUAA4IBAQBbcv/g EG/ytJ2JmTFcwO8oNVoRVmvhZEJtxxP7AeZ4FjnSIq33sF+cMyg2pqJF+qHsOFbE aN9J01F9lGYqDhq43mFhWnJ0pYkgeDcpaJEY36b+FdEHLvnxMXgvt49keW7YXJij iFK9zsRrE5LiVSfjFB7Bi+Rim5xuuT0mxuQFf1jY8wBRQumsrUUFrSQCn4ZdjMLy dWPKtdNhUbLT6KFkPh2TPBFppl4XVqNp0h0oF2wMZ4+n2KS8T4wIMAeFJRh4tyGU vLGu6K3VRatbydIyUk9mJ9uQEKMVFm6tjdrXsUFpf7zn6JQBRbY/lSSaK4W6OA1u DXXbrPQnmVCK7m0c -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:05 2026 by rpki-client