This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer File: eBmwlu34dg6OUA-UFpvAA3iulHU.cer (raw, json) Hash identifier: UkuI4a5xoZME6ZIfsU5lDI6TjRj2gQMWV+XvWfDfRbg= Subject key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC84CBF3AF91CD73DFFEFDF00225AD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51294 IP: 178.23.56.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4c:bf:3a:f9:1c:d7:3d:ff:ef:df:00:22:5a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7819b096edf8760e8e500f94169bc00378ae9475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:ac:b9:5d:c9:61:e0:c5:50:c5:66:af:a7: c4:73:1f:5b:55:96:d2:49:fd:8a:a7:f7:d4:3a:1e: 44:e1:7a:b0:c7:91:dd:2b:12:72:3f:b5:9f:e4:5f: ea:d8:25:7c:f5:fc:30:f5:bc:5c:35:80:bf:88:3b: 1e:8d:d3:83:b2:25:f0:09:e9:f1:4f:68:b2:a1:bd: a9:2e:f4:22:2c:6b:b8:ff:7e:63:47:24:21:4d:eb: ec:a2:43:fe:95:b1:23:f4:4b:0e:22:98:82:18:61: 07:95:31:0a:9c:54:a2:f2:fa:be:c4:ea:99:27:1c: 15:d4:c3:f2:19:da:ce:2f:3f:1b:58:94:4d:16:59: bc:a6:4c:35:9e:00:9f:41:9a:9e:43:c6:39:c3:3c: 52:54:47:44:b4:72:91:3f:37:d6:51:29:12:1b:26: d3:40:83:5e:93:34:fd:5f:16:cd:68:ba:96:58:0b: cc:b5:e0:ea:a4:36:72:6d:ca:38:79:0f:c7:f8:df: c7:70:97:15:50:5e:12:b7:ed:06:09:9b:a8:71:2f: e9:7a:88:59:48:d8:77:5f:b4:aa:08:4d:bc:3c:58: 95:16:42:4a:12:e4:99:28:5a:24:c8:c3:e7:26:9b: 23:60:0d:85:07:3e:c2:ee:82:02:d5:f3:5f:56:92: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.23.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51294 Signature Algorithm: sha256WithRSAEncryption a0:b9:c5:a0:57:70:e5:59:76:0d:33:32:74:38:76:fc:7f:27: cb:15:76:a3:bd:42:20:fd:8f:26:03:45:7b:ee:a7:3d:98:4e: e5:45:2f:5f:4a:8f:cd:28:8b:1e:17:a0:5c:30:db:ea:44:43: 12:7b:cc:36:7d:d3:98:04:c6:c5:cb:cc:73:f7:d3:aa:a9:75: 18:7f:ce:bf:55:ab:f3:72:44:39:e7:6f:f5:23:6d:c0:c5:3d: 5f:52:f0:a4:27:6c:82:0e:b8:8a:74:49:bd:f7:07:92:dd:6a: 99:40:f3:f6:3f:f9:de:02:fa:fc:ac:e9:c2:31:e7:12:f4:4c: 8c:c9:a8:ab:a2:fe:83:4e:14:87:dc:4e:33:93:fd:cb:af:dd: 4d:dd:39:d4:3e:65:9a:a6:26:01:83:a0:bb:4e:9d:63:b7:33: 1a:5e:f8:07:50:dc:b3:84:42:f4:3d:17:d4:0a:ca:ee:c8:7a: 58:73:0a:6a:b6:a1:79:5e:f4:18:9e:e8:2d:da:14:ff:6f:9d: ce:ef:85:d9:98:2f:00:d0:25:c0:2c:f4:08:69:88:bf:96:31: 15:07:90:64:bc:71:92:83:8b:8b:2e:b1:8c:7a:4c:58:b7:6e: b9:74:e8:bd:f2:54:af:d9:06:88:55:10:3e:bb:73:db:1e:6c: c6:25:b1:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yEy/Ovkc1z3/798AIlrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE5YjA5NmVkZjg3NjBlOGU1MDBmOTQxNjliYzAwMzc4YWU5NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpysuV3JYeDFUMVmr6fEcx9bVZbS Sf2Kp/fUOh5E4Xqwx5HdKxJyP7Wf5F/q2CV89fww9bxcNYC/iDsejdODsiXwCenx T2iyob2pLvQiLGu4/35jRyQhTevsokP+lbEj9EsOIpiCGGEHlTEKnFSi8vq+xOqZ JxwV1MPyGdrOLz8bWJRNFlm8pkw1ngCfQZqeQ8Y5wzxSVEdEtHKRPzfWUSkSGybT QINekzT9XxbNaLqWWAvMteDqpDZybco4eQ/H+N/HcJcVUF4St+0GCZuocS/peohZ SNh3X7SqCE28PFiVFkJKEuSZKFokyMPnJpsjYA2FBz7C7oIC1fNfVpLSKQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHgZsJbt+HYOjlAPlBabwAN4rpR1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzFiY2E2 YS01MTFlLTQxNTAtOWNmYS1jNTJjNmMwZTNhOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMWJjYTZh LTUxMWUtNDE1MC05Y2ZhLWM1MmM2YzBlM2E4YS8xL2VCbXdsdTM0ZGc2T1VBLVVG cHZBQTNpdWxIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDshc4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDIXjANBgkqhkiG9w0BAQsFAAOCAQEAoLnFoFdw5Vl2DTMydDh2/H8nyxV2o71C IP2PJgNFe+6nPZhO5UUvX0qPzSiLHhegXDDb6kRDEnvMNn3TmATGxcvMc/fTqql1 GH/Ov1Wr83JEOedv9SNtwMU9X1LwpCdsgg64inRJvfcHkt1qmUDz9j/53gL6/Kzp wjHnEvRMjMmoq6L+g04Uh9xOM5P9y6/dTd051D5lmqYmAYOgu06dY7czGl74B1Dc s4RC9D0X1ArK7sh6WHMKaraheV70GJ7oLdoU/2+dzu+F2ZgvANAlwCz0CGmIv5Yx FQeQZLxxkoOLiy6xjHpMWLduuXTovfJUr9kGiFUQPrtz2x5sxiWxGA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:20 2026 by rpki-client