This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer File: ewjibqnz2CXszWTl_cNVyFKnr1Q.cer (raw, json) Hash identifier: 4cZBLCeOMi6AXzMfOsstiPHGRqYm8fZyjPmJzzUspro= Subject key identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFE75EE7F61C96AD8A0D1DA0491C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216336 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fe:75:ee:7f:61:c9:6a:d8:a0:d1:da:04:91:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:27:b4:0f:c4:43:12:ba:27:5b:aa:3d:39: e5:d1:14:af:4c:d2:c2:22:b3:34:ce:1f:1f:e2:c1: 24:c9:83:76:ef:26:46:d9:8d:97:6f:eb:5f:a1:78: 37:a3:a5:27:4a:a3:b2:14:49:d0:f8:48:78:14:9e: 32:c3:96:85:83:f0:f3:08:2e:10:15:3a:00:a8:6f: fd:be:ad:31:27:f4:c2:6c:d6:bf:cd:dc:7b:86:f6: b4:75:28:09:9b:ae:7f:a2:39:b6:36:5d:bf:13:87: 54:d1:57:f7:8a:1b:63:1d:57:88:af:c8:6a:ea:4f: 00:c1:58:a7:17:10:50:81:17:2a:b4:0a:e4:b9:37: 46:db:0b:11:1d:eb:23:dc:5e:94:be:42:61:b7:18: e8:2c:4c:0a:76:31:1f:8a:f9:31:8a:ad:be:a0:1c: 97:09:d3:ef:c4:d2:a2:4e:b9:bb:23:9a:92:88:89: 68:24:92:dd:2b:3e:2c:9d:81:da:e8:63:9a:dc:cf: ba:e3:7c:b7:33:94:b4:c7:98:2f:39:a6:5d:27:45: ac:d7:6c:20:55:bd:c2:73:9a:ff:72:8a:5d:0e:01: 37:15:89:c8:6a:77:3b:0d:d9:5b:36:8c:c4:db:89: da:bb:6c:78:03:a6:32:4e:07:4b:b1:1b:45:cd:c3: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216336 Signature Algorithm: sha256WithRSAEncryption 90:c4:f8:ac:67:73:a9:22:2b:ae:d2:a3:ec:50:c1:29:45:e3: 54:23:42:56:0b:b7:43:67:e7:47:41:62:4d:2e:34:81:8d:9a: f5:3a:92:51:c5:51:d0:38:b2:4a:5f:28:0a:22:48:a7:1c:f2: 7c:13:ff:64:14:a4:fe:ec:86:d2:3f:2f:5d:24:7a:61:92:26: df:5d:2d:e6:a1:b7:e6:c8:97:14:99:f2:69:e7:a4:6a:3e:1d: 72:92:d6:64:07:89:f9:cc:3c:2f:44:10:1f:76:64:ec:b3:f0: dd:0e:53:5e:ad:37:03:ca:0e:e2:24:0d:f0:df:83:fe:be:c5: 48:43:84:88:06:fb:79:e0:12:48:92:a8:36:33:4a:cf:10:c3: a5:bd:f0:f8:d6:03:2d:04:9d:90:cb:d8:81:0d:d4:69:cd:44: c7:e8:99:a4:37:60:ca:91:cd:f4:68:1f:8f:7a:b3:da:2b:9d: 73:ca:b6:90:a4:8e:1a:7a:1a:f6:c8:99:d6:f7:9c:ba:59:50: 3f:f0:37:1a:9d:8e:f3:36:ac:01:92:4c:55:18:29:96:3d:df: 30:e4:26:ee:b2:11:b5:9a:82:ed:0e:45:8d:f9:d7:01:a5:7c: 75:c0:7d:71:0d:c5:92:78:7f:3f:27:b6:b6:86:aa:df:96:92: 5a:c0:6f:ce -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5fv517n9hyWrYoNHaBJHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjA4ZTI2ZWE5ZjNkODI1ZWNjZDY0ZTVmZGMzNTVjODUyYTdhZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf8ntA/EQxK6J1uqPTnl0RSvTNLC IrM0zh8f4sEkyYN27yZG2Y2Xb+tfoXg3o6UnSqOyFEnQ+Eh4FJ4yw5aFg/DzCC4Q FToAqG/9vq0xJ/TCbNa/zdx7hva0dSgJm65/ojm2Nl2/E4dU0Vf3ihtjHVeIr8hq 6k8AwVinFxBQgRcqtArkuTdG2wsRHesj3F6UvkJhtxjoLEwKdjEfivkxiq2+oByX CdPvxNKiTrm7I5qSiIloJJLdKz4snYHa6GOa3M+643y3M5S0x5gvOaZdJ0Ws12wg Vb3Cc5r/copdDgE3FYnIanc7DdlbNozE24nau2x4A6YyTgdLsRtFzcOVEwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFHsI4m6p89gl7M1k5f3DVchSp69UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M5OTI2 NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzk5 MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdkLzMvN0IwOEUyNkVBOUYz RDgyNUVDQ0Q2NEU1RkRDMzU1Qzg1MkE3QUY1NC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTRAw DQYJKoZIhvcNAQELBQADggEBAJDE+Kxnc6kiK67So+xQwSlF41QjQlYLt0Nn50dB Yk0uNIGNmvU6klHFUdA4skpfKAoiSKcc8nwT/2QUpP7shtI/L10kemGSJt9dLeah t+bIlxSZ8mnnpGo+HXKS1mQHifnMPC9EEB92ZOyz8N0OU16tNwPKDuIkDfDfg/6+ xUhDhIgG+3ngEkiSqDYzSs8Qw6W98PjWAy0EnZDL2IEN1GnNRMfomaQ3YMqRzfRo H496s9ornXPKtpCkjhp6GvbImdb3nLpZUD/wNxqdjvM2rAGSTFUYKZY93zDkJu6y EbWagu0ORY351wGlfHXAfXENxZJ4fz8ntraGqt+WklrAb84= -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:52 2026 by rpki-client