This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer File: ewOpsg0q_QHZocYo0wG5nIfMWs0.cer (raw, json) Hash identifier: Qi+g5fqiiCgiteJeySu3yPluU078yK+jQKcFSil58fA= Subject key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3798216905E8DBA564C637021D7BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57534 IP: 176.101.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:79:82:16:90:5e:8d:ba:56:4c:63:70:21:d7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:50:fb:4e:ad:e0:ab:f8:74:4d:67:ec:28: ff:95:ac:24:bf:4d:69:ca:26:2b:13:7d:2a:79:6e: 2d:3e:17:05:ff:3f:12:34:9d:c8:1d:2a:26:28:a9: f9:e1:ec:27:d8:4c:59:e1:17:18:05:5f:c0:6d:35: 06:36:4a:64:67:00:6a:3c:c7:7e:4e:40:48:7d:95: 2e:de:1f:ed:f5:ce:a3:19:c7:a4:97:ef:dc:77:c8: ec:2e:5b:b3:35:1f:8a:32:d1:a2:38:63:41:eb:5e: 45:10:3b:14:6c:41:8d:55:b2:06:af:ed:f9:1e:b9: ba:72:cf:cc:55:01:1d:a5:61:dd:a9:18:d9:2c:21: f1:e3:b1:fd:a1:87:3d:c1:69:8c:d1:de:cf:66:d9: 93:0c:d2:62:a1:56:bb:0b:05:22:be:d1:0e:eb:6c: db:34:d6:4e:22:67:74:1d:ac:3c:94:8a:77:25:5b: 09:03:f3:ca:4c:08:7c:6b:98:68:6e:4e:2a:09:bd: cd:44:83:a7:35:96:65:2a:a3:30:36:67:26:02:b6: 7b:60:83:6e:1a:e8:8a:16:80:57:4f:f6:7a:4e:8f: 8d:80:c1:f8:5a:cb:11:4b:12:a6:eb:19:d6:ba:72: 6a:cd:0b:0a:09:81:46:94:32:3c:c3:65:5f:18:e2: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.101.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57534 Signature Algorithm: sha256WithRSAEncryption 22:1f:b8:7e:cb:60:d5:65:46:ed:f6:c1:e8:c3:25:de:eb:53: 8d:6f:c9:67:d1:d4:dc:27:11:4f:a7:2a:4e:82:ab:90:ef:c9: ab:84:71:16:bf:e2:b9:bf:00:ed:ca:02:11:7a:92:07:91:9a: 0b:08:90:d4:69:53:d0:2e:e8:8d:d5:2c:31:b8:b7:39:62:16: 45:c5:b4:52:d2:21:aa:d2:4f:df:9c:92:50:1e:1f:7e:21:ef: da:d6:e5:3d:30:8b:73:44:49:97:15:0f:c8:d0:b9:b7:b5:c0: 81:d8:34:e6:79:83:63:7a:06:58:c9:fa:f7:71:f4:72:61:60: f4:84:3c:91:7a:9f:94:c2:b0:56:27:e4:41:77:28:f6:90:f0: 27:9e:68:ee:e6:4f:0c:fb:0d:d1:0d:15:9f:62:57:a5:90:0f: f9:e0:fe:20:cb:b8:64:2a:87:6e:6f:79:77:65:1a:01:2e:1c: e4:a7:93:33:8f:06:92:3d:3c:72:91:5b:b9:bf:f7:1f:ee:3e: d0:4b:26:9c:de:c8:ad:c2:53:a6:01:38:d2:b4:80:68:d2:c6: 6d:b5:1e:fa:ac:24:15:f8:fa:a7:cb:1d:45:7b:20:bd:20:60: 25:b1:10:62:47:10:55:41:c8:52:8a:69:8c:a7:bd:58:91:f0: 26:9a:43:b2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o3mCFpBejbpWTGNwIde9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjAzYTliMjBkMmFmZDAxZDlhMWM2MjhkMzAxYjk5Yzg3Y2M1YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqVQ+06t4Kv4dE1n7Cj/lawkv01p yiYrE30qeW4tPhcF/z8SNJ3IHSomKKn54ewn2ExZ4RcYBV/AbTUGNkpkZwBqPMd+ TkBIfZUu3h/t9c6jGcekl+/cd8jsLluzNR+KMtGiOGNB615FEDsUbEGNVbIGr+35 Hrm6cs/MVQEdpWHdqRjZLCHx47H9oYc9wWmM0d7PZtmTDNJioVa7CwUivtEO62zb NNZOImd0Haw8lIp3JVsJA/PKTAh8a5hobk4qCb3NRIOnNZZlKqMwNmcmArZ7YINu GuiKFoBXT/Z6To+NgMH4WssRSxKm6xnWunJqzQsKCYFGlDI8w2VfGOIBuQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHsDqbINKv0B2aHGKNMBuZyHzFrNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzU2NDc3 NS0zNjFhLTQ3MjktYjk1My1hN2QxOWVjMDdmMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNTY0Nzc1 LTM2MWEtNDcyOS1iOTUzLWE3ZDE5ZWMwN2YxMy8xL2V3T3BzZzBxX1FIWm9jWW8w d0c1bklmTVdzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFsGXgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgvjANBgkqhkiG9w0BAQsFAAOCAQEAIh+4fstg1WVG7fbB6MMl3utTjW/JZ9HU 3CcRT6cqToKrkO/Jq4RxFr/iub8A7coCEXqSB5GaCwiQ1GlT0C7ojdUsMbi3OWIW RcW0UtIhqtJP35ySUB4ffiHv2tblPTCLc0RJlxUPyNC5t7XAgdg05nmDY3oGWMn6 93H0cmFg9IQ8kXqflMKwVifkQXco9pDwJ55o7uZPDPsN0Q0Vn2JXpZAP+eD+IMu4 ZCqHbm95d2UaAS4c5KeTM48Gkj08cpFbub/3H+4+0EsmnN7IrcJTpgE40rSAaNLG bbUe+qwkFfj6p8sdRXsgvSBgJbEQYkcQVUHIUoppjKe9WJHwJppDsg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:14 2026 by rpki-client