This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer File: epHmw2HvM-JQ3YijH32Sfq03Xtk.cer (raw, json) Hash identifier: p7kxrGsQ2Jnr490vFS9uS60455i+9MfeOX2nVVpXxk0= Subject key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1321B00783100129CCE3B42577E980 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209330 IP: 5.253.148.0/22 IP: 2a09:56c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:21:b0:07:83:10:01:29:cc:e3:b4:25:77:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:22:ac:a0:d9:39:f1:70:d8:93:72:80:e1: 40:c0:c3:9b:78:e5:2b:ad:7a:74:31:f7:fc:1a:d8: 3f:8a:99:c5:47:4a:c0:36:30:a3:a4:1f:52:e8:7c: d2:fa:ea:10:0a:20:a0:6d:87:dc:81:d3:c4:ce:ae: b8:d3:55:fb:32:34:2d:47:49:fb:2c:cd:c1:1e:01: 7c:e4:0d:f6:05:14:0a:f3:c3:be:23:d9:58:e6:a3: 2c:6e:38:90:1a:aa:61:15:54:76:14:25:28:19:a2: fb:16:31:a6:c3:cd:3e:40:f5:e2:98:d6:90:36:2b: d7:28:00:8a:93:55:e8:f6:b1:4f:36:d5:3b:bf:73: 5b:3d:bf:a5:1d:6d:a0:5f:18:dd:14:b8:6a:d1:fe: 70:f2:f7:02:c1:33:c7:79:ea:b4:34:0f:45:e9:de: f2:01:0d:f1:5e:40:de:ca:ce:ca:28:d4:12:6e:5e: 26:97:03:9c:b1:d6:bc:15:1e:df:23:f2:0d:7a:39: 0e:3a:d4:8a:64:44:47:d8:0a:e0:64:7c:dc:2a:b6: 3b:a5:5b:77:47:e0:5b:ec:ad:5b:b2:79:a7:0e:9d: d9:ad:c7:87:51:54:b8:7d:f4:77:d9:c5:a1:74:24: b9:39:c8:d6:21:ce:54:06:f0:6e:6c:0e:59:6d:51: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.148.0/22 IPv6: 2a09:56c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209330 Signature Algorithm: sha256WithRSAEncryption 77:d3:73:5f:12:39:27:9b:67:9e:1d:94:a6:2d:67:06:6a:47: 38:c6:44:68:89:aa:dd:75:79:3d:8f:0b:ae:5f:7b:7c:dc:2a: a1:29:e2:10:53:72:e5:3d:2e:25:02:bf:5b:d2:cb:55:e6:00: eb:dc:32:bf:f3:7a:10:b3:ec:d1:a7:d0:cc:8e:17:97:25:87: 07:c1:d9:41:f6:1e:c7:6a:1f:7b:96:bf:fd:b8:47:4b:6d:2e: 9f:43:9b:49:42:08:09:55:2f:58:b5:f3:45:07:07:4d:8a:2e: 0a:f0:d6:de:57:0f:78:54:3c:dd:e8:45:dc:b9:61:24:c2:a4: 8e:d0:bb:bb:69:8b:87:35:62:4d:a0:9c:fb:49:c0:90:9c:1f: 98:84:35:83:ab:84:35:8d:e9:8a:c9:c3:eb:83:6d:bf:22:40: bd:54:5b:dd:9d:8c:1d:1a:38:45:0b:be:a2:58:7c:56:62:ad: 99:b0:8a:51:75:67:1b:12:70:15:cb:18:a2:62:2f:af:ce:04: eb:57:e3:60:29:0e:2c:81:1d:3c:27:60:f1:4c:3e:53:82:17: 74:a6:8a:74:44:07:e5:7c:81:c1:fa:9e:d2:81:52:a2:0a:4e: 54:be:79:26:2e:e8:2c:a1:50:6b:2f:48:fe:0b:89:3e:4b:3e: 78:31:85:15 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EyGwB4MQASnM47Qld+mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTkxZTZjMzYxZWYzM2UyNTBkZDg4YTMxZjdkOTI3ZWFkMzc1ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R4irKDZOfFw2JNygOFAwMObeOUr rXp0Mff8Gtg/ipnFR0rANjCjpB9S6HzS+uoQCiCgbYfcgdPEzq6401X7MjQtR0n7 LM3BHgF85A32BRQK88O+I9lY5qMsbjiQGqphFVR2FCUoGaL7FjGmw80+QPXimNaQ NivXKACKk1Xo9rFPNtU7v3NbPb+lHW2gXxjdFLhq0f5w8vcCwTPHeeq0NA9F6d7y AQ3xXkDeys7KKNQSbl4mlwOcsda8FR7fI/INejkOOtSKZERH2ArgZHzcKrY7pVt3 R+Bb7K1bsnmnDp3ZrceHUVS4ffR32cWhdCS5OcjWIc5UBvBubA5ZbVHg+wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHqR5sNh7zPiUN2Iox99kn6tN17ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzRlM2Zj My0wNDhkLTRiNjYtYTk1MS0zZTI1MzQ1ODM2MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNGUzZmMz LTA0OGQtNGI2Ni1hOTUxLTNlMjUzNDU4MzYxMS8xL2VwSG13Mkh2TS1KUTNZaWpI MzJTZnEwM1h0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBf2UMA0EAgACMAcDBQMqCVbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxsjANBgkqhkiG9w0BAQsFAAOCAQEAd9NzXxI5J5tn nh2Upi1nBmpHOMZEaImq3XV5PY8Lrl97fNwqoSniEFNy5T0uJQK/W9LLVeYA69wy v/N6ELPs0afQzI4XlyWHB8HZQfYex2ofe5a//bhHS20un0ObSUIICVUvWLXzRQcH TYouCvDW3lcPeFQ83ehF3LlhJMKkjtC7u2mLhzViTaCc+0nAkJwfmIQ1g6uENY3p isnD64NtvyJAvVRb3Z2MHRo4RQu+olh8VmKtmbCKUXVnGxJwFcsYomIvr84E61fj YCkOLIEdPCdg8Uw+U4IXdKaKdEQH5XyBwfqe0oFSogpOVL55Ji7oLKFQay9I/guJ Pks+eDGFFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:34 2026 by rpki-client