This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.cer (raw, json) Hash identifier: FeSTznHtw8GEdohw/25pq7Azt2e12EfNqtuTVBhAHPk= Subject key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50C9E66EB97A6572E1116752AFB76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209041 IP: 81.21.224.0/22 IP: 2a0d:26c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0c:9e:66:eb:97:a6:57:2e:11:16:75:2a:fb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:2e:dd:82:9f:10:ee:55:d8:cd:c1:fb:ef: 03:03:d3:f2:ea:b9:32:9d:84:99:10:4f:83:51:8b: 54:a0:49:ae:aa:06:cd:cf:13:30:47:67:e6:ed:46: 80:a2:02:c2:5c:5d:58:70:88:aa:92:27:18:10:01: cc:fb:ed:0b:8f:c6:7f:80:63:77:56:2f:15:ab:06: d5:b4:7d:cb:e6:40:ee:60:79:a1:67:37:b7:a7:7c: c5:de:39:8a:09:7b:a4:fc:5b:0b:7b:ba:7f:c6:ba: 4d:88:80:57:4a:7b:95:a1:e5:33:f7:3a:a0:e9:40: e7:12:60:2f:ce:ec:95:9d:39:fc:2e:e1:0d:fb:eb: b0:06:ca:c2:94:de:d6:ca:e7:96:bf:dd:dc:d2:a0: cf:24:d6:21:61:61:27:77:4f:c0:1b:c0:3b:fd:0f: 16:d8:27:fb:d0:2e:bb:80:89:ab:59:4b:fd:a8:f6: 2a:13:6d:53:6a:c9:96:ef:ba:1d:92:25:34:de:53: 94:2e:dc:0d:6f:5b:7f:7d:5b:b6:6d:48:7c:83:58: f3:52:af:ab:48:b4:0a:73:19:fb:d6:bd:66:db:de: 9c:85:52:f1:92:86:09:e5:29:63:2e:72:2a:83:ff: e0:a8:ae:0c:bd:35:ce:f4:ca:be:45:e0:ac:47:2f: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.224.0/22 IPv6: 2a0d:26c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209041 Signature Algorithm: sha256WithRSAEncryption 20:0a:bc:09:e7:91:0e:c6:e8:80:9a:ab:21:d0:00:99:4c:3d: 1f:55:f5:e8:4d:ef:24:0c:b7:8e:17:f4:85:79:0b:99:8e:67: 10:b0:c8:a6:b9:86:bf:65:f7:47:5c:f2:30:8d:f9:f4:90:49: 15:65:43:2f:f5:b8:95:53:3e:4c:83:7a:7d:b0:f7:1f:4b:85: 7e:9e:79:12:d1:38:a0:f1:f3:8b:62:0e:53:3a:b3:fd:b8:2b: 08:f1:ae:c6:16:d3:21:36:4e:03:ad:58:f3:1d:da:3f:34:21: 75:cd:09:d6:50:17:55:27:17:a1:0b:17:d1:d8:56:b6:1b:df: 8c:18:23:c5:0f:09:88:8f:8f:fb:b3:2a:b9:2e:5d:f5:e2:6f: 30:b3:8e:45:28:cb:97:3d:cf:af:60:60:bf:70:d9:db:83:dc: 94:78:58:f6:ec:89:e2:85:de:1e:58:b3:40:9b:90:5e:02:9a: 22:b9:d4:40:98:06:44:c6:2a:7c:b9:7e:d5:fa:ba:8a:57:7a: dd:b1:8f:81:c0:8a:a1:e3:fc:30:f9:54:0c:bf:bb:26:34:fd: 3e:c7:2c:be:43:3f:37:65:2b:7b:91:d3:81:df:16:15:16:ff: 76:9e:52:23:1d:b0:99:6a:64:f4:9d:84:d9:e1:21:40:3f:b8: 53:56:90:9b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pQyeZuuXplcuERZ1Kvt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmVhMTc3YmNjMmIwZWY2NGNhYjYwNGU2ZTY0MjdiMWFkZTBiZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVUu3YKfEO5V2M3B++8DA9Py6rky nYSZEE+DUYtUoEmuqgbNzxMwR2fm7UaAogLCXF1YcIiqkicYEAHM++0Lj8Z/gGN3 Vi8VqwbVtH3L5kDuYHmhZze3p3zF3jmKCXuk/FsLe7p/xrpNiIBXSnuVoeUz9zqg 6UDnEmAvzuyVnTn8LuEN++uwBsrClN7WyueWv93c0qDPJNYhYWEnd0/AG8A7/Q8W 2Cf70C67gImrWUv9qPYqE21TasmW77odkiU03lOULtwNb1t/fVu2bUh8g1jzUq+r SLQKcxn71r1m296chVLxkoYJ5SljLnIqg//gqK4MvTXO9Mq+ReCsRy+AjQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO/qF3vMKw72TKtgTm5kJ7Gt4L9pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzZlZjA5 Yi04MDJhLTQ1ZjctOWU3Zi0wNmQ1MzBjZWZkOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNmVmMDli LTgwMmEtNDVmNy05ZTdmLTA2ZDUzMGNlZmQ4YS8xLzctb1hlOHdyRHZaTXEyQk9i bVFuc2EzZ3Yyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCURXgMA0EAgACMAcDBQAqDSbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwkTANBgkqhkiG9w0BAQsFAAOCAQEAIAq8CeeRDsbo gJqrIdAAmUw9H1X16E3vJAy3jhf0hXkLmY5nELDIprmGv2X3R1zyMI359JBJFWVD L/W4lVM+TIN6fbD3H0uFfp55EtE4oPHzi2IOUzqz/bgrCPGuxhbTITZOA61Y8x3a PzQhdc0J1lAXVScXoQsX0dhWthvfjBgjxQ8JiI+P+7MquS5d9eJvMLOORSjLlz3P r2Bgv3DZ24PclHhY9uyJ4oXeHlizQJuQXgKaIrnUQJgGRMYqfLl+1fq6ild63bGP gcCKoeP8MPlUDL+7JjT9PscsvkM/N2Ure5HTgd8WFRb/dp5SIx2wmWpk9J2E2eEh QD+4U1aQmw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:56 2026 by rpki-client