This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer File: ejiftI-wXUgfHyORlMU30Vs1cAk.cer (raw, json) Hash identifier: VAB32EK4iSchvHD7e9OXL12/P1vSfWoVaj1D4V0ONV8= Subject key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C808936B092D527891BC9AB9225CD6E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.118.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:89:36:b0:92:d5:27:89:1b:c9:ab:92:25:cd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a389fb48fb05d481f1f239194c537d15b357009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:66:92:bf:7a:24:cb:cc:6b:50:e1:e5:c2: ae:e4:0c:70:5f:32:6b:ab:e0:64:45:00:a4:04:59: c9:10:89:62:f8:c6:80:00:c3:a8:04:39:52:04:cd: dc:e5:10:cd:54:f1:73:25:ae:cb:8d:6f:87:4d:db: 90:7f:cb:29:2d:85:a5:fd:b0:a2:55:13:56:37:fa: 8c:0f:30:98:1d:85:9f:92:54:a4:f7:3f:5f:d1:b3: 45:92:1a:74:a5:76:c6:fb:be:2f:d6:7c:4b:49:60: f0:cc:cf:8b:b1:46:b8:64:a7:e8:67:99:3e:66:80: 4b:7a:b6:a5:02:6c:a7:2c:18:ba:8c:2b:f5:24:3f: 59:0d:d6:3c:6e:b3:f4:db:c7:95:c4:93:6d:e8:7c: ae:4d:a4:82:36:71:30:7b:56:11:b7:b8:1f:6b:ef: 57:c8:a4:e7:25:e4:2c:c2:4e:cc:76:aa:85:aa:9a: d2:09:84:3e:a7:99:01:5e:01:7b:14:01:94:14:c9: 4d:e5:86:5c:ed:e6:18:d5:bf:d6:d1:f0:16:52:06: fe:f5:74:6e:98:59:df:fb:d3:c6:52:26:7d:f6:51: 5e:d6:c7:3c:b2:ea:c8:0f:78:c4:d4:51:af:9c:b1: 35:d9:f2:87:7d:1e:b1:4e:4b:6e:26:fe:db:16:17: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.224.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:58:ff:d4:da:8b:84:f2:14:24:73:bc:8d:f3:67:c6:8f:46: 3e:21:15:b3:cf:86:e0:f2:24:f8:df:5a:bf:b7:13:62:a7:f0: ba:eb:16:47:0c:04:0a:ab:4e:a8:76:ec:5d:7a:2e:0e:fd:32: 4d:38:98:69:de:ac:c0:c7:6a:85:11:9c:54:d9:c0:49:14:02: 39:7f:a9:a5:d6:88:f0:97:8b:3b:c2:02:cf:6d:eb:71:c2:4a: 0c:af:e9:27:5c:d4:f0:ba:2f:c1:08:22:ac:18:f7:01:67:cc: ec:7f:a6:6e:be:46:10:c8:bf:c6:da:b9:f0:7c:70:fe:8d:79: 93:66:24:09:e9:54:0f:7a:ef:34:14:64:c5:64:c4:c5:dd:8c: d2:4a:73:1a:95:84:d8:63:7c:b4:43:9c:4a:87:83:1f:34:38: fa:b0:e6:0a:13:96:11:f4:a2:08:58:39:5f:af:bd:6a:d7:75: 62:a2:cc:1f:9a:a0:cd:0b:b6:7e:c0:15:ab:65:68:9e:19:09: 9a:c6:52:81:38:c8:c6:26:c9:c4:a8:8a:13:d2:9b:aa:73:c5: e5:49:f1:ae:2c:6c:df:5d:1d:84:a9:47:09:66:5e:c2:26:87: c1:bb:b8:72:52:c0:e1:85:fb:55:f1:1c:60:b8:44:de:f8:fd: ff:41:73:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gIk2sJLVJ4kbyauSJc1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTM4OWZiNDhmYjA1ZDQ4MWYxZjIzOTE5NGM1MzdkMTViMzU3MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5mkr96JMvMa1Dh5cKu5AxwXzJr q+BkRQCkBFnJEIli+MaAAMOoBDlSBM3c5RDNVPFzJa7LjW+HTduQf8spLYWl/bCi VRNWN/qMDzCYHYWfklSk9z9f0bNFkhp0pXbG+74v1nxLSWDwzM+LsUa4ZKfoZ5k+ ZoBLeralAmynLBi6jCv1JD9ZDdY8brP028eVxJNt6HyuTaSCNnEwe1YRt7gfa+9X yKTnJeQswk7MdqqFqprSCYQ+p5kBXgF7FAGUFMlN5YZc7eYY1b/W0fAWUgb+9XRu mFnf+9PGUiZ99lFe1sc8surID3jE1FGvnLE12fKHfR6xTktuJv7bFhfpqQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHo4n7SPsF1IHx8jkZTFN9FbNXAJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2ViMTA2 NC02ZDI2LTQ1NTUtOWZhNS1hMWEwOGViZjRlZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvZWIxMDY0 LTZkMjYtNDU1NS05ZmE1LWExYTA4ZWJmNGVlYS8xL2VqaWZ0SS13WFVnZkh5T1Js TVUzMFZzMWNBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXbgMA0GCSqGSIb3DQEBCwUAA4IBAQCMWP/U 2ouE8hQkc7yN82fGj0Y+IRWzz4bg8iT431q/txNip/C66xZHDAQKq06oduxdei4O /TJNOJhp3qzAx2qFEZxU2cBJFAI5f6ml1ojwl4s7wgLPbetxwkoMr+knXNTwui/B CCKsGPcBZ8zsf6ZuvkYQyL/G2rnwfHD+jXmTZiQJ6VQPeu80FGTFZMTF3YzSSnMa lYTYY3y0Q5xKh4MfNDj6sOYKE5YR9KIIWDlfr71q13VioswfmqDNC7Z+wBWrZWie GQmaxlKBOMjGJsnEqIoT0puqc8XlSfGuLGzfXR2EqUcJZl7CJofBu7hyUsDhhftV 8RxguETe+P3/QXMH -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:05 2026 by rpki-client