This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer File: 7JsJMRGPCL9KNLPgUv2PilweyrA.cer (raw, json) Hash identifier: ywSJ2HrqsXBJac0x034DYxpoS1l/tc/A6+AGb0FYDP8= Subject key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13166351E3F182DF91E35D2E7BE282 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31621 AS: 42656 AS: 210641 IP: 5.134.208.0/21 IP: 91.194.188.0/23 IP: 91.207.14.0/23 IP: 178.21.152.0/21 IP: 185.31.24.0/22 IP: 193.23.48.0/24 IP: 193.203.222.0/23 IP: 194.0.251.0/24 IP: 2a02:dc8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:16:63:51:e3:f1:82:df:91:e3:5d:2e:7b:e2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:ef:fd:c4:20:bd:0f:21:92:74:78:e6:52: 43:87:85:69:3d:68:d3:62:40:ac:07:b9:32:eb:63: 10:a1:ff:b1:60:bf:58:ee:fb:47:2e:f6:67:aa:08: e8:56:2e:0c:e9:78:8a:36:fa:4a:08:5f:d9:08:36: 15:e5:98:ac:e0:e4:f1:01:df:ff:5c:16:48:74:72: 43:9b:a5:c1:94:9b:5f:43:96:9b:7c:10:0f:1c:16: 97:ad:20:ec:3c:8f:16:16:a3:23:fd:c5:2d:09:14: f5:18:e9:3b:2e:e4:c6:dc:bd:e5:ee:f7:5f:d8:c0: cf:db:89:e9:71:05:b3:f4:83:07:e5:93:8b:97:97: 1c:8f:76:5b:21:ef:21:ae:bf:6c:28:7a:2c:70:48: e1:02:63:cd:0c:31:46:a8:8a:38:2b:16:f9:ed:e4: cf:b2:79:16:57:5d:b9:f4:99:0d:a6:2e:03:06:bb: c5:a7:a0:ba:22:ce:3f:77:40:0e:a5:91:de:ae:e5: ac:d1:bb:a2:d2:4a:09:97:3d:5e:e3:ec:79:0d:e5: ea:30:27:a3:e0:fd:88:84:46:23:c8:02:10:be:f1: 03:ba:12:5f:f7:c8:4c:df:80:66:dd:99:bf:19:d7: c0:e3:56:bd:b7:90:36:65:b8:a4:3e:59:fc:f9:a3: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.208.0/21 91.194.188.0/23 91.207.14.0/23 178.21.152.0/21 185.31.24.0/22 193.23.48.0/24 193.203.222.0/23 194.0.251.0/24 IPv6: 2a02:dc8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31621 42656 210641 Signature Algorithm: sha256WithRSAEncryption b1:dc:19:bb:c1:d6:53:a2:f3:32:38:60:7d:3c:3d:1f:18:2a: 23:62:43:1f:65:ce:9a:16:b2:47:22:b0:b5:78:21:1c:a5:06: ab:b2:a1:29:00:33:c4:f6:73:04:61:f0:10:f5:a0:07:90:a0: fa:ae:56:3e:a3:1b:82:05:92:68:5b:b6:f5:db:80:2b:56:39: 08:cc:35:12:ca:6d:bd:fb:a8:5b:7b:08:d1:47:18:0e:69:92: e2:1d:55:91:99:b2:3c:10:0e:17:8a:72:9b:8a:35:be:97:e0: e9:8c:c2:ab:02:58:51:ab:b3:b3:1e:99:49:3f:c5:28:fe:f8: e1:dc:95:24:15:8e:3e:77:9a:4b:a6:6d:97:88:73:ce:5e:f5: 0e:d8:19:c7:79:eb:f5:1d:71:7d:64:36:89:f4:dc:6c:6b:36: 35:b7:fe:c5:b4:ac:e2:58:59:2f:e8:42:5c:3a:bb:2d:06:75: 42:12:e2:33:03:d5:c6:a3:2b:60:2b:30:8a:6b:d2:14:eb:1c: c2:ef:2c:46:8e:4c:7d:b9:f3:00:37:fb:b8:84:8d:45:3e:b2: 49:07:c9:94:d5:55:cd:e3:ab:f2:7c:5e:56:4a:e4:87:84:66: 3c:74:df:f2:18:2f:2f:e8:6c:8e:78:54:21:a2:9f:6e:0b:a2: c8:25:62:07 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt8ExZjUePxgt+R410ue+KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzliMDkzMTExOGYwOGJmNGEzNGIzZTA1MmZkOGY4YTVjMWVjYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Xv/cQgvQ8hknR45lJDh4VpPWjT YkCsB7ky62MQof+xYL9Y7vtHLvZnqgjoVi4M6XiKNvpKCF/ZCDYV5Zis4OTxAd// XBZIdHJDm6XBlJtfQ5abfBAPHBaXrSDsPI8WFqMj/cUtCRT1GOk7LuTG3L3l7vdf 2MDP24npcQWz9IMH5ZOLl5ccj3ZbIe8hrr9sKHoscEjhAmPNDDFGqIo4Kxb57eTP snkWV1259JkNpi4DBrvFp6C6Is4/d0AOpZHeruWs0bui0koJlz1e4+x5DeXqMCej 4P2IhEYjyAIQvvEDuhJf98hM34Bm3Zm/GdfA41a9t5A2ZbikPln8+aOUuwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFOybCTERjwi/SjSz4FL9j4pcHsqwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzA3NzZh Mi01ZTg5LTRlMmMtOTM3MC01YjMwNGVlYzAwMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMDc3NmEy LTVlODktNGUyYy05MzcwLTViMzA0ZWVjMDAyNS8xLzdKc0pNUkdQQ0w5S05MUGdV djJQaWx3ZXlyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDBYbQAwQBW8K8AwQBW88OAwQDshWYAwQCuR8Y AwQAwRcwAwQBwcveAwQAwgD7MA0EAgACMAcDBQMqAg3IMCMGCCsGAQUFBwEIAQH/ BBQwEqAQMA4CAnuFAgMApqACAwM20TANBgkqhkiG9w0BAQsFAAOCAQEAsdwZu8HW U6LzMjhgfTw9HxgqI2JDH2XOmhayRyKwtXghHKUGq7KhKQAzxPZzBGHwEPWgB5Cg +q5WPqMbggWSaFu29duAK1Y5CMw1EsptvfuoW3sI0UcYDmmS4h1VkZmyPBAOF4py m4o1vpfg6YzCqwJYUauzsx6ZST/FKP744dyVJBWOPneaS6Ztl4hzzl71DtgZx3nr 9R1xfWQ2ifTcbGs2Nbf+xbSs4lhZL+hCXDq7LQZ1QhLiMwPVxqMrYCswimvSFOsc wu8sRo5MfbnzADf7uISNRT6ySQfJlNVVzeOr8nxeVkrkh4RmPHTf8hgvL+hsjnhU IaKfbguiyCViBw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:20 2026 by rpki-client