This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer File: 735cdfZIrGkrFLwiLiwYDIY7ReI.cer (raw, json) Hash identifier: o3cOUPbWB8sVwmUHYVSBkXGrL/RoA4CwXxl+hYvJDy4= Subject key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC94B0B2EB700AE2DB549962FCBAB8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213852 IP: 2a13:bf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4b:0b:2e:b7:00:ae:2d:b5:49:96:2f:cb:ab:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:f4:ba:a5:cf:1c:9c:fc:0b:5c:9d:33:ed: 8e:07:7c:70:98:54:c6:64:dc:ae:64:2a:6f:24:96: d8:05:df:c9:a5:fc:95:44:a2:d2:cb:e8:d4:e7:2c: cf:ee:67:95:ba:79:0b:c8:ed:2e:3c:8f:59:44:1d: 09:d8:73:f6:c0:14:d3:f5:c6:45:ad:7b:ea:04:15: 22:0f:35:0b:cb:0b:33:0c:ab:4e:81:09:86:25:f6: 2b:75:d9:ea:99:d8:e4:df:0e:b2:1c:9c:db:2c:ca: 1f:2e:b2:74:76:a7:fd:46:a0:2c:54:2a:00:73:da: d8:4b:4c:ad:c0:7d:1f:66:2f:3b:9b:a1:fc:0f:de: 76:6e:cc:14:fc:79:57:93:a1:85:17:3b:e9:ba:bb: e1:26:47:5b:3a:8b:41:e5:4d:bf:f2:28:d5:99:0c: e1:b3:42:3a:a2:14:24:3e:7e:67:eb:da:c5:25:f9: e1:a1:cb:4a:4f:af:ee:35:4c:56:04:7d:d3:01:af: 8d:72:4d:f9:d9:1b:cd:db:e5:d0:dd:96:12:96:a8: c0:ce:f4:a7:a2:44:99:c3:da:6a:89:9b:5d:74:4a: 2a:a9:13:b3:bc:1b:79:e4:2e:f1:f4:4e:83:01:62: 98:81:b0:ec:b4:a1:07:73:d0:e9:81:51:7a:7c:cf: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:bf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213852 Signature Algorithm: sha256WithRSAEncryption 1f:db:53:92:ef:46:90:fe:af:c6:c9:d0:3c:0f:fb:32:23:69: ca:90:31:f6:29:1a:20:28:60:75:7b:fa:81:7f:d7:ca:80:89: fe:c7:c8:8f:8f:26:6b:8a:46:b5:6b:57:40:66:d3:12:17:90: 66:ea:b9:31:7b:5e:26:ce:4f:c3:d0:5c:cd:3e:6e:18:86:d7: 95:9c:d8:75:16:82:a1:b3:3e:ec:79:0d:f3:fb:7f:b3:fc:22: 4d:5e:59:70:3e:21:20:23:4c:ea:47:c9:10:4d:86:97:a9:48: 6f:1f:59:ee:2e:35:a2:bc:ba:5a:61:f0:79:ee:c3:41:e4:49: b7:7a:83:42:40:40:c7:a0:34:df:00:91:1f:ef:c5:60:01:41: e9:0f:68:97:8c:bc:2d:27:08:fc:fa:ef:7c:93:f1:a7:3a:b3: 04:69:77:42:27:d1:92:b1:db:9d:52:16:9f:11:c1:38:da:b7: d4:17:ba:1b:dc:b1:71:56:9b:09:f5:cd:e6:76:18:09:d1:1a: 07:5a:00:ae:ae:0b:c3:fe:ca:a9:92:43:87:10:f4:5a:9d:ed: 67:40:65:5a:e1:38:79:87:b7:d5:13:dd:2e:e1:1c:a5:5d:d1: 0b:c2:14:ee:41:63:eb:a8:a8:ff:5b:98:33:29:2c:53:94:20: 09:aa:58:ba -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6yUsLLrcAri21SZYvy6uLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjdlNWM3NWY2NDhhYzY5MmIxNGJjMjIyZTJjMTgwYzg2M2I0NWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rn0uqXPHJz8C1ydM+2OB3xwmFTG ZNyuZCpvJJbYBd/JpfyVRKLSy+jU5yzP7meVunkLyO0uPI9ZRB0J2HP2wBTT9cZF rXvqBBUiDzULywszDKtOgQmGJfYrddnqmdjk3w6yHJzbLMofLrJ0dqf9RqAsVCoA c9rYS0ytwH0fZi87m6H8D952bswU/HlXk6GFFzvpurvhJkdbOotB5U2/8ijVmQzh s0I6ohQkPn5n69rFJfnhoctKT6/uNUxWBH3TAa+Nck352RvN2+XQ3ZYSlqjAzvSn okSZw9pqiZtddEoqqROzvBt55C7x9E6DAWKYgbDstKEHc9DpgVF6fM8K+QIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2ExNDJh OS1hMDBhLTQyMzUtYjcxZi1lNmIyMGIwOWY4NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvYTE0MmE5 LWEwMGEtNDIzNS1iNzFmLWU2YjIwYjA5Zjg2Ni8xLzczNWNkZlpJckdrckZMd2lM aXdZRElZN1JlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhO/ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQ1wwDQYJKoZIhvcNAQELBQADggEBAB/bU5LvRpD+r8bJ0DwP+zIjacqQMfYp GiAoYHV7+oF/18qAif7HyI+PJmuKRrVrV0Bm0xIXkGbquTF7XibOT8PQXM0+bhiG 15Wc2HUWgqGzPux5DfP7f7P8Ik1eWXA+ISAjTOpHyRBNhpepSG8fWe4uNaK8ulph 8Hnuw0HkSbd6g0JAQMegNN8AkR/vxWABQekPaJeMvC0nCPz673yT8ac6swRpd0In 0ZKx251SFp8RwTjat9QXuhvcsXFWmwn1zeZ2GAnRGgdaAK6uC8P+yqmSQ4cQ9Fqd 7WdAZVrhOHmHt9UT3S7hHKVd0QvCFO5BY+uoqP9bmDMpLFOUIAmqWLo= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:48 2026 by rpki-client