This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer (raw, json) Hash identifier: wCZFr1beJw63F6HEhRz/sUYBsH0M+RE37V5+Ws5GqJo= Subject key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA46ED66187B003AA1A6CC5ECBA120A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199510 IP: 193.34.138.0/23 IP: 193.108.220.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:6e:d6:61:87:b0:03:aa:1a:6c:c5:ec:ba:12:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:15:d6:94:62:0d:ff:12:48:2c:f2:2e:a0: ff:c2:7f:e3:a4:8c:d7:bd:64:9a:e2:bc:41:42:c5: c7:2e:ae:e6:19:69:2b:6b:7c:f1:8a:b0:7b:88:bb: 36:14:ba:3e:47:84:f3:8f:f1:77:8c:46:cc:f5:9e: fc:c0:a6:e1:03:56:e7:4e:a7:7c:7b:c7:2f:6a:2a: 7e:5f:63:9a:95:18:1d:86:10:4d:cd:91:a4:33:6c: d6:20:1e:98:2d:3a:60:a9:ba:22:09:29:b0:d0:62: cd:d2:06:f4:4d:8c:fa:d7:60:6b:43:ac:19:91:59: 94:e2:1f:76:b2:e7:65:e4:b4:30:b5:de:b3:bd:81: ac:5b:ad:66:ca:6d:79:6c:38:56:e3:2a:aa:71:4a: f8:25:94:9e:8d:46:f6:e2:bf:6f:29:7d:e2:fb:a2: ad:09:44:d7:60:45:5b:17:06:c8:46:08:7f:52:9d: e4:e4:2c:88:31:89:5c:ff:97:bb:7d:84:2a:37:6d: 90:96:fc:b1:99:b0:c5:81:8a:83:66:1d:29:b5:2d: da:ee:59:0f:d6:3f:95:c7:6c:57:e3:af:4b:e9:15: 27:64:df:2e:6d:9d:97:ed:14:86:a2:25:8c:a6:37: 7e:d1:2b:20:76:44:0b:44:b3:d5:86:59:6f:7b:3f: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.138.0/23 193.108.220.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199510 Signature Algorithm: sha256WithRSAEncryption 81:19:88:1e:41:52:6f:e7:d3:16:66:ed:ef:60:0a:6d:bc:7e: c6:d8:bc:1b:2a:dd:d7:73:aa:70:a7:9a:b3:39:4a:18:84:6b: 99:0d:10:8b:8e:79:3a:1e:53:a7:1d:f0:fb:77:df:d1:37:40: 8e:c6:2c:44:a6:fc:54:4a:56:3b:14:29:0f:56:b3:b2:45:e3: 7a:5a:74:96:cd:d8:6d:96:4d:78:2d:66:32:bf:b8:20:9a:4e: 45:09:1b:fa:10:3f:9c:11:33:42:c7:0b:d1:23:6a:df:03:b2: ab:28:e4:8c:27:64:84:8e:48:95:20:d3:d1:87:8d:b2:18:5c: bc:1f:af:d3:a0:7e:a1:c2:cd:72:4c:f4:ba:04:df:10:bb:3a: 33:85:a7:33:38:88:57:20:1f:5b:42:f0:ab:b5:22:2c:f6:d1: 2a:3e:0e:5a:28:63:76:88:e4:42:dd:55:27:05:a7:3d:cd:dd: f3:03:ef:e0:46:6a:3f:f7:43:91:7e:06:d7:f3:3e:49:d7:59: a4:11:2a:b3:62:54:ce:79:cb:9b:16:64:93:a3:97:f5:28:15: 3a:dc:82:c3:f7:8a:17:d7:0a:b6:85:a9:d1:3f:d0:d2:01:8d: 0c:3c:86:ee:bb:f8:22:b0:89:4a:66:c3:99:29:1f:c8:87:1d: 2c:3e:9d:cb -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+pG7WYYewA6oabMXsuhIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdmNGEzMzg3ZGI4MzhjZGE4MzdhYjkyYTZjZThmNmZmYzNjOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YAV1pRiDf8SSCzyLqD/wn/jpIzX vWSa4rxBQsXHLq7mGWkra3zxirB7iLs2FLo+R4Tzj/F3jEbM9Z78wKbhA1bnTqd8 e8cvaip+X2OalRgdhhBNzZGkM2zWIB6YLTpgqboiCSmw0GLN0gb0TYz612BrQ6wZ kVmU4h92sudl5LQwtd6zvYGsW61mym15bDhW4yqqcUr4JZSejUb24r9vKX3i+6Kt CUTXYEVbFwbIRgh/Up3k5CyIMYlc/5e7fYQqN22QlvyxmbDFgYqDZh0ptS3a7lkP 1j+Vx2xX469L6RUnZN8ubZ2X7RSGoiWMpjd+0SsgdkQLRLPVhllvez/4swIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOx/SjOH24OM2oN6uSps6Pb/w8mQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzIyZjcy OS05N2E4LTQwOGItYjNlNS04YTg2NWZkNjIxYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMjJmNzI5 LTk3YTgtNDA4Yi1iM2U1LThhODY1ZmQ2MjFjOC8xLzdIOUtNNGZiZzR6YWczcTVL bXpvOXZfRHlaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwSKKAwQAwWzcMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMLVjANBgkqhkiG9w0BAQsFAAOCAQEAgRmIHkFSb+fTFmbt72AKbbx+ xti8Gyrd13OqcKeaszlKGIRrmQ0Qi455Oh5Tpx3w+3ff0TdAjsYsRKb8VEpWOxQp D1azskXjelp0ls3YbZZNeC1mMr+4IJpORQkb+hA/nBEzQscL0SNq3wOyqyjkjCdk hI5IlSDT0YeNshhcvB+v06B+ocLNckz0ugTfELs6M4WnMziIVyAfW0Lwq7UiLPbR Kj4OWihjdojkQt1VJwWnPc3d8wPv4EZqP/dDkX4G1/M+SddZpBEqs2JUznnLmxZk k6OX9SgVOtyCw/eKF9cKtoWp0T/Q0gGNDDyG7rv4IrCJSmbDmSkfyIcdLD6dyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:56 2026 by rpki-client