This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer (raw, json) Hash identifier: uN8HNO8GSIJLnJPXlPh99fTbXCDzyKjAXQ+zMfp2898= Subject key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80AD49688601CE6189D96B0A9F5A97 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57113 IP: 146.66.8.0/21 IP: 185.214.56.0/22 IP: 2a12:3780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:ad:49:68:86:01:ce:61:89:d9:6b:0a:9f:5a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:b7:db:fa:79:9c:43:a8:4b:6b:69:66:38: 52:8b:ed:e2:88:c3:47:8f:57:43:e6:a8:7c:cd:ca: 25:71:d0:a8:6c:03:f5:ae:b5:73:18:2b:0d:ba:70: 29:1e:34:7b:58:99:8e:73:de:b7:60:f7:02:c2:c3: f2:57:68:a6:59:e1:0f:b9:0a:f4:59:c5:bf:65:cb: 25:f6:8c:af:de:ca:5d:7e:11:2b:b2:85:54:7f:3e: c9:97:4a:bf:de:a0:64:36:94:f1:6b:11:42:35:3b: b0:0b:a3:a8:0a:a0:04:3d:d6:8d:9c:74:7c:95:47: 0d:7d:b0:2d:b9:ec:ae:29:23:bc:ff:a5:46:27:22: e8:92:ba:1c:63:cc:1e:bb:e0:e6:e0:f0:9a:78:97: ec:5e:4e:e4:da:15:60:67:3a:d8:29:72:a7:42:ee: 67:02:f4:19:ad:c1:bc:dd:f3:c5:29:fc:fe:88:b7: e9:54:5e:8e:bf:3d:5b:cd:74:5c:eb:02:fe:dd:61: 95:c8:d7:05:2d:7f:f7:d5:14:e8:9c:6f:7d:ba:2e: c7:ed:b9:9b:e5:38:38:c4:da:d4:2d:34:9a:74:2a: 7e:35:e6:b2:35:31:3c:c3:40:e0:66:27:51:4f:5f: 6c:3a:f3:49:aa:b9:40:8f:a5:e3:4b:a9:c9:ee:49: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.8.0/21 185.214.56.0/22 IPv6: 2a12:3780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57113 Signature Algorithm: sha256WithRSAEncryption 08:26:bf:ef:83:dd:65:fe:44:95:91:46:72:00:8d:0c:15:99: cf:87:9c:94:af:e3:01:10:1e:59:b4:0e:78:6b:74:c6:a9:36: 82:44:53:b4:f3:5f:7f:3e:a3:44:30:e8:59:67:b6:d2:5f:7c: 10:29:0b:cd:f7:ff:18:22:b8:02:68:ab:a4:04:32:4f:de:3d: 9e:f9:42:93:44:0d:ef:2f:f1:9f:a6:dd:3a:9b:1f:7f:a8:4e: 37:7d:7f:d9:f2:55:9f:5e:f6:10:53:ed:64:5f:a2:92:f5:15: 8f:a6:6c:1d:df:ea:c0:38:a3:5e:52:e8:11:63:a6:b2:5a:00: e4:33:07:6c:e4:d7:e1:e1:fb:18:b9:b7:33:64:d1:32:21:38: c9:a9:33:89:71:74:4d:02:73:11:fe:61:4b:d6:dd:1b:e5:04: 87:bd:11:0e:46:3c:84:a6:9c:44:fe:32:bc:27:68:cb:47:2d: 19:90:24:2f:4d:5b:8b:9c:a1:5c:a0:f6:8f:77:af:f7:05:c8: 73:99:d7:c9:85:1d:df:3b:45:16:5d:e0:b6:3e:0e:33:ac:e2: 8f:c4:00:0b:b1:51:b7:9d:7b:7f:bd:b7:e6:3a:79:5e:6f:4f: a9:39:f6:45:86:c4:e7:e7:0f:02:83:04:43:14:12:2a:6a:c1: 09:d8:44:69 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gK1JaIYBzmGJ2WsKn1qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2IxMWI1NDUwOGEwNjI4OWIwZWQwNmIxNzE4OGFkNjNmNGZjZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KC32/p5nEOoS2tpZjhSi+3iiMNH j1dD5qh8zcolcdCobAP1rrVzGCsNunApHjR7WJmOc963YPcCwsPyV2imWeEPuQr0 WcW/Zcsl9oyv3spdfhErsoVUfz7Jl0q/3qBkNpTxaxFCNTuwC6OoCqAEPdaNnHR8 lUcNfbAtueyuKSO8/6VGJyLokrocY8weu+Dm4PCaeJfsXk7k2hVgZzrYKXKnQu5n AvQZrcG83fPFKfz+iLfpVF6Ovz1bzXRc6wL+3WGVyNcFLX/31RTonG99ui7H7bmb 5Tg4xNrULTSadCp+NeayNTE8w0DgZidRT19sOvNJqrlAj6XjS6nJ7kkrZQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOyxG1RQigYomw7QaxcYitY/T8/qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzE0ZDA5 OS04ZTQ1LTQ0NzktODQ3ZS03NDEyNmI1YzNhYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMTRkMDk5 LThlNDUtNDQ3OS04NDdlLTc0MTI2YjVjM2FiNi8xLzdMRWJWRkNLQmlpYkR0QnJG eGlLMWo5UHotby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDkkIIAwQCudY4MA0EAgACMAcDBQMqEjeAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDfGTANBgkqhkiG9w0BAQsFAAOCAQEACCa/ 74PdZf5ElZFGcgCNDBWZz4eclK/jARAeWbQOeGt0xqk2gkRTtPNffz6jRDDoWWe2 0l98ECkLzff/GCK4AmirpAQyT949nvlCk0QN7y/xn6bdOpsff6hON31/2fJVn172 EFPtZF+ikvUVj6ZsHd/qwDijXlLoEWOmsloA5DMHbOTX4eH7GLm3M2TRMiE4yakz iXF0TQJzEf5hS9bdG+UEh70RDkY8hKacRP4yvCdoy0ctGZAkL01bi5yhXKD2j3ev 9wXIc5nXyYUd3ztFFl3gtj4OM6zij8QAC7FRt517f7235jp5Xm9PqTn2RYbE5+cP AoMEQxQSKmrBCdhEaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:48 2026 by rpki-client