This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer File: ejn7sf-ySyJGNVzXvMwUiFY1acA.cer (raw, json) Hash identifier: SVc5p1bMB8Cb7N7lk385+b9dZahXy0X4I3KxalmCGBk= Subject key identifier: 7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4AC32776FFAD8CB9DE2373D220B6EA12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 10:31:02 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203456 IP: 91.206.54.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:c3:27:76:ff:ad:8c:b9:de:23:73:d2:20:b6:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 10:31:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:07:8c:cc:ce:b5:6b:dc:34:d9:18:b1:21: 2f:59:75:2b:6c:8c:16:39:b0:48:1b:d8:5d:45:6c: ba:9f:62:58:55:2f:20:8d:a1:91:42:f1:9b:62:11: b4:c4:04:65:2f:c8:25:57:20:ff:e4:67:60:5a:00: 3b:99:d5:62:b8:dd:67:57:b3:2e:e6:05:82:11:52: 6a:3a:3c:c1:f0:e0:17:33:78:00:fd:a0:29:d2:3c: d4:0e:68:35:b5:92:c8:a1:d5:89:a9:38:44:3f:09: 56:e8:69:ae:c8:9e:4b:97:b5:da:81:aa:df:e3:69: b3:83:be:27:0e:9d:3d:47:c1:74:17:f9:bf:af:24: 94:b6:5c:ca:e2:77:53:ff:74:12:df:b6:97:75:b5: 8f:b3:ae:5a:0a:6f:2d:dd:78:32:29:c1:44:a9:2a: 63:7e:6b:9e:4e:38:a5:78:f9:62:0e:bf:20:63:bf: 1c:e2:53:45:99:5e:4c:e2:61:ee:66:ba:16:cc:8d: 89:6b:39:ca:c0:04:c3:46:61:be:06:4a:c1:b6:11: 44:f8:8a:22:01:3a:e2:9f:3e:18:16:68:d4:6c:de: d4:96:70:1a:7b:b7:8f:73:cc:1b:e7:fb:3c:c6:03: c9:1a:fd:0b:5c:e1:67:eb:a8:67:80:3e:a8:72:ec: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.54.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203456 Signature Algorithm: sha256WithRSAEncryption a3:78:0e:d0:53:b0:3d:ee:69:56:2e:4b:9e:89:71:73:d5:46: 79:5f:db:65:b0:a9:8f:80:a0:bd:ca:f4:d8:ed:26:41:6c:74: 73:c8:62:f5:4a:68:a9:e5:9a:f8:f6:62:f9:e9:2d:07:84:2b: 5c:73:81:e9:68:ff:69:43:57:ca:f8:c7:68:20:f9:9c:cb:60: 11:31:f2:21:fc:c5:67:6d:a0:55:e4:37:95:6c:92:88:cb:40: b7:ab:bb:14:1b:ec:4d:b1:8d:0b:1e:17:e6:74:58:6e:c1:1c: c4:73:35:63:20:80:6c:a0:56:62:6f:ae:39:b9:e1:52:57:03: 85:73:24:f5:d4:c2:d2:40:21:ff:68:33:a5:d4:9c:32:ac:9e: cb:a0:c8:4d:39:d2:f4:e6:1c:93:a4:b9:27:65:ab:ee:8e:d7: 27:34:d7:91:70:03:9a:51:6b:c9:b9:e2:84:ec:e6:f4:38:45: a0:6e:42:2a:e0:a3:65:2f:4f:a3:a7:f1:f3:0a:ae:13:8a:77: 29:46:7d:62:99:d1:a1:1a:b4:48:2a:4b:c9:52:7e:17:0a:e0: e4:a5:42:99:05:54:ac:fe:60:11:f4:06:6a:8e:4e:76:ff:47: aa:d1:ef:1e:e9:2f:7f:65:75:e8:39:12:83:b6:6c:a3:31:5b: 5f:ee:a3:d3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZtKwyd2/62Mud4jc9IgtuoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTAzMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTM5ZmJiMWZmYjI0YjIyNDYzNTVjZDdiY2NjMTQ4ODU2MzU2OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ0HjMzOtWvcNNkYsSEvWXUrbIwW ObBIG9hdRWy6n2JYVS8gjaGRQvGbYhG0xARlL8glVyD/5GdgWgA7mdViuN1nV7Mu 5gWCEVJqOjzB8OAXM3gA/aAp0jzUDmg1tZLIodWJqThEPwlW6GmuyJ5Ll7Xagarf 42mzg74nDp09R8F0F/m/rySUtlzK4ndT/3QS37aXdbWPs65aCm8t3XgyKcFEqSpj fmueTjilePliDr8gY78c4lNFmV5M4mHuZroWzI2JaznKwATDRmG+BkrBthFE+Ioi ATrinz4YFmjUbN7UlnAae7ePc8wb5/s8xgPJGv0LXOFn66hngD6ocuwTXQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHo5+7H/sksiRjVc17zMFIhWNWnAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2ZiMmE4 MC02NGZmLTRjYTQtYWU0ZC0zZDRiNDY3OGQwNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZmIyYTgw LTY0ZmYtNGNhNC1hZTRkLTNkNGI0Njc4ZDA1Yi8xL2VqbjdzZi15U3lKR05Welh2 TXdVaUZZMWFjQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW842MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMawDANBgkqhkiG9w0BAQsFAAOCAQEAo3gO0FOwPe5pVi5Lnolxc9VGeV/bZbCp j4Cgvcr02O0mQWx0c8hi9UpoqeWa+PZi+ektB4QrXHOB6Wj/aUNXyvjHaCD5nMtg ETHyIfzFZ22gVeQ3lWySiMtAt6u7FBvsTbGNCx4X5nRYbsEcxHM1YyCAbKBWYm+u ObnhUlcDhXMk9dTC0kAh/2gzpdScMqyey6DITTnS9OYck6S5J2Wr7o7XJzTXkXAD mlFrybnihOzm9DhFoG5CKuCjZS9Po6fx8wquE4p3KUZ9YpnRoRq0SCpLyVJ+Fwrg 5KVCmQVUrP5gEfQGao5Odv9HqtHvHukvf2V16DkSg7ZsozFbX+6j0w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:44 2025 by rpki-client