This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Gxxd1Ib15Ggf6CqEucQtoTwaYU.cer File: 7Gxxd1Ib15Ggf6CqEucQtoTwaYU.cer (raw, json) Hash identifier: ohLZvFx5oBBWEC5Or7G2bnd5Lnp3e06By04gL7mPpr4= Subject key identifier: EC:6C:71:77:52:1B:D7:91:A0:7F:A0:AA:12:E7:10:B6:84:F0:69:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE7D1A77D5B92CEAA0DB7ABD228CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198057 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e7:d1:a7:7d:5b:92:ce:aa:0d:b7:ab:d2:28:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec6c7177521bd791a07fa0aa12e710b684f06985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:a5:f2:62:b2:0c:9a:30:f4:3a:1b:f6:f6: d6:d5:45:9f:35:6f:35:b2:e3:0d:31:b9:99:14:4a: 4e:8c:81:e1:04:b0:03:47:ed:a4:7c:13:60:9c:54: 46:2f:ac:97:77:9e:d3:00:3d:9f:05:2c:82:df:ed: a9:a9:6c:1a:fd:ae:e4:40:39:4b:ee:15:4d:6e:a3: 86:97:38:72:12:c7:2f:2c:94:ae:ec:75:4b:a1:f0: ee:d8:f0:bd:52:8a:97:06:e2:b1:95:cd:51:73:8f: b7:b0:ca:ad:6b:56:7f:eb:32:93:3f:4c:d5:e7:c4: 33:1d:f0:92:f3:cb:c5:66:7b:c4:d4:26:a9:28:e6: 6a:43:a3:5b:dc:aa:1d:da:48:cf:68:af:28:58:9f: 7e:14:60:a1:16:c7:57:1d:76:27:01:9e:0c:f9:6b: 5f:9b:43:42:71:7f:b8:85:8b:23:b7:b5:28:cb:88: 84:a3:59:e6:96:bd:af:64:c4:ab:46:bc:0b:b2:89: ce:cb:cd:8c:5f:24:8b:9f:7d:c0:56:72:26:d9:da: 60:f4:c9:63:52:79:e6:75:8b:e1:55:2c:65:5d:c4: fa:13:b2:21:53:88:d7:65:42:60:4c:17:dd:a0:d3: 2d:7b:3a:cd:5f:ee:b6:b3:4b:ef:d3:aa:76:37:8d: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:71:77:52:1B:D7:91:A0:7F:A0:AA:12:E7:10:B6:84:F0:69:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198057 Signature Algorithm: sha256WithRSAEncryption 19:ab:8e:17:6f:0e:91:3d:47:ed:b8:39:57:15:01:f4:cb:e3: c8:4b:91:f1:3c:49:bb:80:20:b4:08:41:72:bc:ec:e7:11:72: 9c:d5:9e:2a:ee:dc:6e:85:55:8a:88:64:c0:f9:c7:5b:d4:99: 64:cc:a7:48:4e:70:26:00:b0:6f:69:44:d0:e7:94:ad:e9:6d: 6b:ad:3b:71:30:45:d0:3e:68:7c:d1:f8:2f:96:07:ff:7a:d5: 3b:b2:7c:7c:1f:db:15:61:f5:b3:77:06:8c:ae:d2:1e:f8:ee: 1d:c7:7f:d8:53:5f:de:79:44:00:09:0f:5e:e5:0f:81:0a:71: 47:05:7a:fa:bd:3e:53:0d:22:1e:e1:fc:7b:2c:1b:44:f5:c7: 02:d4:85:88:35:21:13:27:ad:20:ed:7d:19:ce:15:8b:13:46: f4:76:31:de:d4:f1:38:b2:95:95:85:ba:a1:0a:60:30:2e:34: 9b:d4:09:e4:ab:d1:ec:b3:44:3a:26:fc:8b:78:42:e1:ad:b0: b4:60:02:a7:e3:d2:43:3e:48:28:43:46:7b:3c:8d:50:bf:e4: 1d:0e:dd:39:19:3b:aa:f0:e1:f0:9d:60:b3:84:8f:62:b9:47: 60:74:2a:f3:b9:d9:87:57:87:8d:1b:41:2a:3a:0d:8e:74:90: 62:7f:21:2b -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26ufRp31bks6qDber0ijKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzZjNzE3NzUyMWJkNzkxYTA3ZmEwYWExMmU3MTBiNjg0ZjA2OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg2l8mKyDJow9Dob9vbW1UWfNW81 suMNMbmZFEpOjIHhBLADR+2kfBNgnFRGL6yXd57TAD2fBSyC3+2pqWwa/a7kQDlL 7hVNbqOGlzhyEscvLJSu7HVLofDu2PC9UoqXBuKxlc1Rc4+3sMqta1Z/6zKTP0zV 58QzHfCS88vFZnvE1CapKOZqQ6Nb3Kod2kjPaK8oWJ9+FGChFsdXHXYnAZ4M+Wtf m0NCcX+4hYsjt7Uoy4iEo1nmlr2vZMSrRrwLsonOy82MXySLn33AVnIm2dpg9Mlj UnnmdYvhVSxlXcT6E7IhU4jXZUJgTBfdoNMtezrNX+62s0vv06p2N43BUwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFOxscXdSG9eRoH+gqhLnELaE8GmFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJmZWFi MjA1LWQxNGItNGEyYS1hMzhhLTZiZTllZTQ4M2FjZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZl YWIyMDUtZDE0Yi00YTJhLWEzOGEtNmJlOWVlNDgzYWNlLzAvRUM2QzcxNzc1MjFC RDc5MUEwN0ZBMEFBMTJFNzEwQjY4NEYwNjk4NS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDBakw DQYJKoZIhvcNAQELBQADggEBABmrjhdvDpE9R+24OVcVAfTL48hLkfE8SbuAILQI QXK87OcRcpzVniru3G6FVYqIZMD5x1vUmWTMp0hOcCYAsG9pRNDnlK3pbWutO3Ew RdA+aHzR+C+WB/961TuyfHwf2xVh9bN3Boyu0h747h3Hf9hTX955RAAJD17lD4EK cUcFevq9PlMNIh7h/HssG0T1xwLUhYg1IRMnrSDtfRnOFYsTRvR2Md7U8TiylZWF uqEKYDAuNJvUCeSr0eyzRDom/It4QuGtsLRgAqfj0kM+SChDRns8jVC/5B0O3TkZ O6rw4fCdYLOEj2K5R2B0KvO52YdXh40bQSo6DY50kGJ/ISs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:34 2026 by rpki-client