This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer (raw, json) Hash identifier: TmAs6tRLLskEqxN6f+U/tlcoayjYrsybvubHrHWKPsU= Subject key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD4E9A15BBC2C1E5EE5D8CEA931AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209171 IP: 2.58.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d4:e9:a1:5b:bc:2c:1e:5e:e5:d8:ce:a9:31:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb0a25810d02646656f909c44eb2ba939d23209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:38:c6:05:a9:04:45:1f:86:4b:83:7e:27: f1:9b:a8:3f:8d:3e:f1:b5:df:3a:98:cb:b3:99:e8: 33:92:a3:12:46:a8:c1:e9:e7:76:23:10:34:c6:c5: ba:c7:6f:91:0c:5f:ea:72:2a:bf:5c:56:dd:bc:03: 6e:1b:34:27:2d:56:e3:2d:c6:4f:0c:31:f2:6f:69: 49:13:80:d2:bf:85:aa:77:69:b8:d7:cf:5e:02:d2: fe:40:a6:5d:a3:4d:2c:9c:36:2b:90:92:8f:80:e0: 51:0d:c5:42:1d:97:2d:94:a7:b6:80:e7:6b:be:f7: ac:cd:97:93:72:30:22:34:04:00:dd:0c:c2:da:9d: 39:0f:87:b6:0a:4c:9f:7e:21:c1:aa:2e:4d:a5:01: 30:c2:79:57:bc:27:5e:9b:fe:20:da:18:d7:8b:8a: b5:ff:4e:03:52:a2:e9:5b:c2:0a:ae:a0:68:c1:a4: 58:e1:09:e9:63:33:a1:86:1e:cd:53:cc:23:19:3f: f8:a1:f6:99:7f:f3:03:3c:d4:7a:8a:6c:0b:b5:7f: a9:be:69:f3:06:aa:3c:39:90:ee:9f:45:07:bf:e6: a4:2d:a6:11:38:d8:60:72:80:1b:03:0d:36:0b:c1: 35:07:d7:29:4a:8c:9e:18:6a:26:de:19:1d:0d:26: d3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209171 Signature Algorithm: sha256WithRSAEncryption 2a:6b:11:b2:1f:07:e6:91:89:4d:23:1b:8c:ab:d8:f8:47:4c: f4:29:e3:b0:06:95:92:31:76:30:fa:3a:71:45:5b:80:2b:0f: ec:e8:56:e3:bc:5b:c1:24:f1:82:46:85:ec:c6:d6:97:6c:3f: 6a:81:5f:51:b8:82:44:15:b8:6b:6e:8a:13:9c:7c:29:c5:32: ee:10:c0:52:35:54:8b:a5:f5:0b:31:39:40:0b:9a:52:2e:e1: 2d:1d:86:f4:ef:b9:ad:8f:e8:9b:e9:ea:53:e5:ae:c7:ed:1f: 7a:5d:8c:a5:bf:3d:e3:c4:59:8f:90:25:ba:06:5c:5f:31:93: 15:25:09:c7:65:f7:34:fc:c7:96:2d:2c:2f:80:94:9f:31:1b: cc:08:fa:7a:5e:d6:61:d8:0a:0e:03:46:5f:9b:28:15:fb:84: 2c:e8:0a:a6:c5:68:00:ee:20:b1:96:9e:e8:7b:d0:76:97:39: 06:67:e3:d2:7e:eb:18:82:dd:05:c9:4c:51:c0:ed:a0:92:01: a2:93:f5:ae:70:eb:97:f1:31:a3:34:27:fe:c5:d0:6d:4e:63: df:ae:89:42:e2:f7:8e:9f:55:a1:22:97:a4:78:ac:65:60:9f: 38:63:14:ba:80:94:20:d7:e6:16:38:37:be:02:43:57:9c:ef: fc:8c:d7:8d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9ytTpoVu8LB5e5djOqTGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmIwYTI1ODEwZDAyNjQ2NjU2ZjkwOWM0NGViMmJhOTM5ZDIzMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSY4xgWpBEUfhkuDfifxm6g/jT7x td86mMuzmegzkqMSRqjB6ed2IxA0xsW6x2+RDF/qciq/XFbdvANuGzQnLVbjLcZP DDHyb2lJE4DSv4Wqd2m4189eAtL+QKZdo00snDYrkJKPgOBRDcVCHZctlKe2gOdr vveszZeTcjAiNAQA3QzC2p05D4e2CkyffiHBqi5NpQEwwnlXvCdem/4g2hjXi4q1 /04DUqLpW8IKrqBowaRY4QnpYzOhhh7NU8wjGT/4ofaZf/MDPNR6imwLtX+pvmnz Bqo8OZDun0UHv+akLaYRONhgcoAbAw02C8E1B9cpSoyeGGom3hkdDSbTwwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPuwolgQ0CZGZW+QnETrK6k50jIJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzM0Y2Mx Mi1jODI0LTQ0OTktYTVhZi0yOWVmMTc1NDAyMjIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMzRjYzEy LWM4MjQtNDQ5OS1hNWFmLTI5ZWYxNzU0MDIyMi8xLzEtN0NpV0JEUUprWmxiNUNj Uk9zcnFUblNNZ2subWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI6jDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMRMwDQYJKoZIhvcNAQELBQADggEBACprEbIfB+aRiU0jG4yr2PhHTPQp47AG lZIxdjD6OnFFW4ArD+zoVuO8W8Ek8YJGhezG1pdsP2qBX1G4gkQVuGtuihOcfCnF Mu4QwFI1VIul9QsxOUALmlIu4S0dhvTvua2P6Jvp6lPlrsftH3pdjKW/PePEWY+Q JboGXF8xkxUlCcdl9zT8x5YtLC+AlJ8xG8wI+npe1mHYCg4DRl+bKBX7hCzoCqbF aADuILGWnuh70HaXOQZn49J+6xiC3QXJTFHA7aCSAaKT9a5w65fxMaM0J/7F0G1O Y9+uiULi946fVaEil6R4rGVgnzhjFLqAlCDX5hY4N74CQ1ec7/yM140= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:35 2026 by rpki-client