This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer File: 7FExTgTslnbytgJI4bm9Au8A4Wg.cer (raw, json) Hash identifier: kFlj0J4thkDRaefkl+TjwId9Ke3DL5qpEfeIaYVCv7E= Subject key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF278FA87D13D11D8E16E6CA04AA517 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204189 IP: 157.97.184.0/21 IP: 185.111.148.0/22 IP: 2a0d:ce80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:78:fa:87:d1:3d:11:d8:e1:6e:6c:a0:4a:a5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:f8:9b:bf:6e:dd:74:6a:bd:db:75:8a:e9: f3:2d:8f:49:b4:3b:c7:a3:99:cc:fb:d7:38:89:0e: 45:22:eb:67:0c:01:6e:0a:78:5b:85:a9:dc:11:07: c1:9a:70:4f:8e:9b:f2:8b:54:ac:0f:61:b2:b9:51: 6e:76:52:12:3c:4c:05:3e:02:2a:4c:9d:28:8b:13: 7d:01:58:87:89:13:b0:76:d6:ea:04:c0:2b:10:2d: 74:b3:e8:1d:ea:ef:ab:14:27:9b:8c:10:ba:08:2a: d1:d0:93:91:1a:78:da:50:30:7a:2a:cb:8b:c5:11: 2e:77:4e:3e:f7:1f:05:d4:c2:49:ed:b1:1e:cb:84: 2d:ac:9f:8d:f7:28:51:99:9e:ac:19:65:eb:e8:09: 3e:43:e7:0a:fa:ea:f6:61:d8:c8:06:05:37:29:6e: 28:33:ca:55:9f:e2:a6:22:97:95:99:25:88:b8:04: 5c:4c:68:10:e0:07:9d:c9:99:1b:9a:ee:43:c7:b5: 4a:95:98:39:2d:4c:f0:d4:c1:ae:a1:24:ae:02:11: 95:2e:99:67:90:03:0c:ac:22:28:1f:a2:b7:3e:d7: 22:86:31:49:91:5d:df:37:30:9c:6d:c6:7f:86:ad: 0b:ba:fc:12:94:16:00:d6:e4:d6:be:e4:c0:26:8a: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.184.0/21 185.111.148.0/22 IPv6: 2a0d:ce80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204189 Signature Algorithm: sha256WithRSAEncryption 14:77:95:92:ec:57:67:91:cc:11:dd:1f:cf:3c:ca:28:fc:25: af:5d:52:ac:05:0f:7a:6e:a3:63:ba:16:6d:34:2d:67:a2:40: f3:1a:e3:57:85:8e:6e:9e:40:9d:46:83:76:f0:1b:c4:c0:df: 4c:aa:61:68:10:35:ec:37:b5:0b:c9:e2:45:17:bd:c7:cc:63: ec:fe:12:63:b8:40:0b:d8:09:6f:44:24:aa:e5:91:97:84:be: 55:86:0b:ea:41:ab:3e:42:5f:fb:f5:2c:f8:e0:90:77:bc:fd: 54:25:f2:f4:31:e8:cb:42:a8:7d:1f:82:92:a6:a5:a5:1b:97: a9:f9:ee:8f:ba:d8:28:df:35:03:17:46:37:7f:de:49:4b:f5: 77:0d:4b:d0:68:b7:be:2d:a3:d3:e6:62:85:8f:83:f4:58:01: 0e:59:71:2b:61:c0:98:db:fe:7a:92:f7:4f:3c:01:31:97:c9: da:23:48:35:b1:49:fe:e2:f8:32:02:ed:8b:6d:bf:c4:3e:c9: 08:99:63:08:53:8d:50:cf:54:08:ef:48:15:c7:be:aa:6c:b8: b5:19:86:3e:f8:41:9a:bf:32:da:79:f7:aa:e1:53:b3:39:c9: dd:07:b9:fe:4d:5f:96:78:98:6a:6c:e7:ad:43:06:62:2d:a5: a9:b4:ca:04 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8nj6h9E9EdjhbmygSqUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzUxMzE0ZTA0ZWM5Njc2ZjJiNjAyNDhlMWI5YmQwMmVmMDBlMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xf4m79u3XRqvdt1iunzLY9JtDvH o5nM+9c4iQ5FIutnDAFuCnhbhancEQfBmnBPjpvyi1SsD2GyuVFudlISPEwFPgIq TJ0oixN9AViHiROwdtbqBMArEC10s+gd6u+rFCebjBC6CCrR0JORGnjaUDB6KsuL xREud04+9x8F1MJJ7bEey4QtrJ+N9yhRmZ6sGWXr6Ak+Q+cK+ur2YdjIBgU3KW4o M8pVn+KmIpeVmSWIuARcTGgQ4AedyZkbmu5Dx7VKlZg5LUzw1MGuoSSuAhGVLpln kAMMrCIoH6K3PtcihjFJkV3fNzCcbcZ/hq0LuvwSlBYA1uTWvuTAJopDjwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOxRMU4E7JZ28rYCSOG5vQLvAOFoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RiNTM5 OS02ZmJiLTRjZTItODk3Yi0zYmJiY2EzMTBkNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGI1Mzk5 LTZmYmItNGNlMi04OTdiLTNiYmJjYTMxMGQ3MS8xLzdGRXhUZ1RzbG5ieXRnSkk0 Ym05QXU4QTRXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDnWG4AwQCuW+UMA0EAgACMAcDBQMqDc6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdnTANBgkqhkiG9w0BAQsFAAOCAQEAFHeV kuxXZ5HMEd0fzzzKKPwlr11SrAUPem6jY7oWbTQtZ6JA8xrjV4WObp5AnUaDdvAb xMDfTKphaBA17De1C8niRRe9x8xj7P4SY7hAC9gJb0QkquWRl4S+VYYL6kGrPkJf +/Us+OCQd7z9VCXy9DHoy0KofR+CkqalpRuXqfnuj7rYKN81AxdGN3/eSUv1dw1L 0Gi3vi2j0+ZihY+D9FgBDllxK2HAmNv+epL3TzwBMZfJ2iNINbFJ/uL4MgLti22/ xD7JCJljCFONUM9UCO9IFce+qmy4tRmGPvhBmr8y2nn3quFTsznJ3Qe5/k1flniY amznrUMGYi2lqbTKBA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:42 2026 by rpki-client