This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer (raw, json) Hash identifier: AMMDA+C+x3qAdUYnEzDXoFs+STbPkeH5O8BN7YoSJIg= Subject key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B354924A15BBDEAE5EBC8A3543FFCCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60532 AS: 209717 IP: 45.140.20.0/22 IP: 64.190.118.0/23 IP: 64.190.167.0/24 IP: 88.218.228.0/22 IP: 185.23.188.0/22 IP: 2a04:26c0::/29 IP: 2a09:b580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:24:a1:5b:bd:ea:e5:eb:c8:a3:54:3f:fc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:5c:8d:3f:82:15:1a:a2:47:de:ec:74:fa: f9:57:1a:6d:4f:3a:5b:77:00:da:d9:1e:e2:94:9d: 44:2e:f8:e6:02:39:86:94:ac:4e:a5:64:4f:38:ca: 15:65:d5:44:0d:0e:26:f3:e1:21:d2:6f:d9:13:05: b2:c4:db:d7:55:8f:9f:e3:29:b9:28:78:5e:22:40: d2:d4:eb:92:4c:7d:20:a5:67:d4:f1:06:d2:00:9a: 0a:f9:b9:6a:79:d4:7b:db:a8:a1:57:e8:9b:ee:79: cc:61:4f:ad:91:d0:b1:c4:cb:3c:11:05:3b:60:ff: 3f:17:bb:5f:c5:52:b9:06:85:78:32:6d:5c:27:a8: 4f:d7:2a:5d:d5:7d:1c:8d:a3:f5:22:db:56:6e:7b: b4:73:8f:3c:fd:5d:7f:d3:95:a4:df:97:99:b4:8e: 30:3e:be:7b:fc:af:0e:a0:29:5f:6c:d0:50:57:4a: 90:c8:2b:95:19:d9:43:87:9d:0c:a5:5d:27:2d:1e: 34:af:04:b0:49:02:f0:b3:25:e6:71:b4:ac:ec:36: e3:c3:ea:cf:1d:81:e3:10:68:b1:1a:a9:30:98:99: b8:e3:70:de:70:0c:53:fa:2f:11:8d:ee:d0:f1:1e: c3:84:20:15:5d:2f:4e:b8:34:91:e3:39:4c:33:17: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.20.0/22 64.190.118.0/23 64.190.167.0/24 88.218.228.0/22 185.23.188.0/22 IPv6: 2a04:26c0::/29 2a09:b580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60532 209717 Signature Algorithm: sha256WithRSAEncryption 19:db:7e:79:70:10:b9:d6:90:ca:35:40:32:1c:54:3a:76:9b: e5:98:a1:ca:73:45:3a:82:54:45:2a:88:01:40:05:97:ff:01: e4:91:92:31:a3:92:64:14:53:28:aa:11:2e:09:15:ad:81:25: b4:ff:95:48:21:4f:2b:33:d0:64:1d:a8:9c:2e:5b:0d:89:e1: c0:6d:1f:9c:83:29:fa:da:90:52:e5:de:b4:86:44:5e:45:92: c4:51:f9:d2:65:70:4a:fc:b1:14:53:23:60:e9:6a:ea:ca:d3: ea:d8:74:15:06:ca:8c:88:f5:24:80:cc:fd:2e:b4:1f:36:de: 1d:65:7c:d0:09:d7:2f:41:df:e7:ec:64:3e:bd:b3:21:c9:fc: b0:3b:ac:7f:e5:7d:04:0e:96:55:0e:bd:62:56:bc:45:44:c3: ba:4f:5b:a6:55:0c:77:80:7a:52:50:a6:f6:6f:5b:8d:7f:f4: a1:20:20:cb:82:4b:43:ac:30:6c:60:27:cf:d2:85:46:90:0d: b9:35:14:b2:d7:1d:4f:a9:20:40:2a:ad:13:94:b3:5f:2a:1c: f8:f6:92:9b:85:a7:4b:e1:76:65:d4:30:9b:e6:b2:e4:dd:c2: e1:22:3b:81:55:71:a6:11:b8:a7:97:09:66:a2:f0:4e:d8:b7: eb:aa:14:57 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt7NUkkoVu96uXryKNUP/zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZkNDdiNDdlMDViMTNkMDU4YjFjYjQyNTI5YTdjMTg2NmRjZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MZcjT+CFRqiR97sdPr5VxptTzpb dwDa2R7ilJ1ELvjmAjmGlKxOpWRPOMoVZdVEDQ4m8+Eh0m/ZEwWyxNvXVY+f4ym5 KHheIkDS1OuSTH0gpWfU8QbSAJoK+blqedR726ihV+ib7nnMYU+tkdCxxMs8EQU7 YP8/F7tfxVK5BoV4Mm1cJ6hP1ypd1X0cjaP1IttWbnu0c488/V1/05Wk35eZtI4w Pr57/K8OoClfbNBQV0qQyCuVGdlDh50MpV0nLR40rwSwSQLwsyXmcbSs7Dbjw+rP HYHjEGixGqkwmJm443DecAxT+i8Rje7Q8R7DhCAVXS9OuDSR4zlMMxfLZQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFOxtR7R+BbE9BYsctCUpp8GGbc3yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzJhNTkx Yy0zYzRhLTQyODgtYmU5MS1jMzlhZGI5OGY0MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMmE1OTFj LTNjNGEtNDI4OC1iZTkxLWMzOWFkYjk4ZjQyOS8xLzdHMUh0SDRGc1QwRml4eTBK U21ud1ladHpmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCLYwUAwQBQL52AwQAQL6nAwQCWNrkAwQCuRe8 MBQEAgACMA4DBQMqBCbAAwUDKgm1gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA 7HQCAwMzNTANBgkqhkiG9w0BAQsFAAOCAQEAGdt+eXAQudaQyjVAMhxUOnab5Zih ynNFOoJURSqIAUAFl/8B5JGSMaOSZBRTKKoRLgkVrYEltP+VSCFPKzPQZB2onC5b DYnhwG0fnIMp+tqQUuXetIZEXkWSxFH50mVwSvyxFFMjYOlq6srT6th0FQbKjIj1 JIDM/S60HzbeHWV80AnXL0Hf5+xkPr2zIcn8sDusf+V9BA6WVQ69Yla8RUTDuk9b plUMd4B6UlCm9m9bjX/0oSAgy4JLQ6wwbGAnz9KFRpANuTUUstcdT6kgQCqtE5Sz Xyoc+PaSm4WnS+F2ZdQwm+ay5N3C4SI7gVVxphG4p5cJZqLwTti366oUVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:55 2026 by rpki-client