This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer File: 7MihqtAgWUOkVyOJu3QzThyihIU.cer (raw, json) Hash identifier: pJoJtkPFx9Qsx4qHKgZS/5SxNoZQBaSW3MiyMLqWiL8= Subject key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6694CF240FA199818B69D5C323AB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29442 IP: 2a02:cac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:4c:f2:40:fa:19:98:18:b6:9d:5c:32:3a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecc8a1aad0205943a4572389bb74334e1ca28485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:d3:38:50:27:a9:27:55:ff:8c:e5:18:bc: 51:f9:c5:28:62:a7:69:2c:f4:42:e4:b5:31:c6:8d: 8e:a9:d2:6a:4c:12:2d:29:3e:6e:9e:0a:49:72:86: b3:fb:64:7c:be:01:99:64:44:68:ad:7f:c0:d6:1b: 19:8f:3e:06:22:0a:c2:aa:99:89:15:8d:b8:0b:71: 27:23:ee:7f:55:11:f5:89:c7:66:f3:c5:1a:66:d6: 72:0e:8d:c4:0a:83:97:c9:9c:73:35:ca:c2:b1:27: 96:97:29:d9:e3:d6:76:40:a4:1e:32:04:a0:53:8b: 15:c5:5b:54:81:eb:22:ad:c2:a3:b3:5a:3d:e2:a3: 04:40:9b:07:f5:a5:6f:f6:4c:21:cb:4e:b2:24:43: 7c:31:13:37:6d:6b:cf:19:f4:48:60:e5:08:58:bc: 67:20:1d:b5:42:66:3c:e8:f3:52:62:28:ea:3f:6a: 74:c1:81:80:27:87:43:75:6e:f3:90:ff:ae:b3:3a: 3d:31:80:ba:8f:57:79:2a:cf:f6:30:43:61:2a:08: e2:38:df:24:5e:fb:c9:6d:7c:71:f4:ed:69:7b:1e: 03:e4:17:bf:2b:b1:9d:aa:fa:9a:0f:a3:dd:07:de: 6b:5a:9e:dc:23:dc:9e:77:2c:3f:58:1a:e1:d6:68: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:cac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29442 Signature Algorithm: sha256WithRSAEncryption 27:39:b1:51:65:e3:99:c8:5d:cf:ba:76:e3:bd:10:02:dd:8f: 65:f3:9b:ea:4c:4e:b4:66:04:4e:02:88:89:f9:f2:0e:e9:05: c3:03:de:fd:ff:ae:44:1d:43:b4:5d:fc:9b:0d:50:62:bd:ee: 34:df:c9:ac:d9:f7:d3:01:82:73:55:b4:12:e7:15:f1:af:b1: 8e:fe:66:97:7c:8a:35:83:85:52:e0:45:d5:8b:cb:b9:1c:e1: a9:0e:0e:37:62:30:a6:24:2f:c7:fb:80:c4:19:4b:70:3c:c0: f9:97:de:2f:a1:e1:57:95:29:e8:15:07:12:d1:c0:98:09:6d: ee:a7:f0:70:35:53:e7:76:62:17:8b:73:d9:3a:b5:03:9c:42: db:0b:72:31:ec:ef:0f:8f:1c:fc:63:f7:85:57:3f:5a:76:96: 47:bb:d2:46:31:df:ac:bd:58:f5:1c:b3:05:79:0f:ea:c5:0c: 2a:d5:b6:a4:7e:9b:7c:22:25:1b:de:26:d9:54:e0:47:bb:5e: dc:a2:ad:22:51:41:41:ca:46:44:c6:8b:9b:13:38:23:fd:d6: e8:26:48:bc:10:a7:07:67:9a:61:54:7e:4d:a9:05:e4:9c:03: 5e:da:2b:d2:d9:0d:6e:d7:e4:5a:44:8f:6f:1b:76:8c:0e:4e: 8b:7a:69:71 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xmlM8kD6GZgYtp1cMjq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2M4YTFhYWQwMjA1OTQzYTQ1NzIzODliYjc0MzM0ZTFjYTI4NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6rTOFAnqSdV/4zlGLxR+cUoYqdp LPRC5LUxxo2OqdJqTBItKT5ungpJcoaz+2R8vgGZZERorX/A1hsZjz4GIgrCqpmJ FY24C3EnI+5/VRH1icdm88UaZtZyDo3ECoOXyZxzNcrCsSeWlynZ49Z2QKQeMgSg U4sVxVtUgesircKjs1o94qMEQJsH9aVv9kwhy06yJEN8MRM3bWvPGfRIYOUIWLxn IB21QmY86PNSYijqP2p0wYGAJ4dDdW7zkP+uszo9MYC6j1d5Ks/2MENhKgjiON8k XvvJbXxx9O1pex4D5Be/K7GdqvqaD6PdB95rWp7cI9yedyw/WBrh1mhi5wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOzIoarQIFlDpFcjibt0M04cooSFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2IzMjk4 Yi05YzVhLTRlMzgtODEzMS00YTY4ZjIzNWMzODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvYjMyOThi LTljNWEtNGUzOC04MTMxLTRhNjhmMjM1YzM4OC8xLzdNaWhxdEFnV1VPa1Z5T0p1 M1F6VGh5aWhJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgLKwDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJzAjANBgkqhkiG9w0BAQsFAAOCAQEAJzmxUWXjmchdz7p2470QAt2PZfOb6kxO tGYETgKIifnyDukFwwPe/f+uRB1DtF38mw1QYr3uNN/JrNn30wGCc1W0EucV8a+x jv5ml3yKNYOFUuBF1YvLuRzhqQ4ON2IwpiQvx/uAxBlLcDzA+ZfeL6HhV5Up6BUH EtHAmAlt7qfwcDVT53ZiF4tz2Tq1A5xC2wtyMezvD48c/GP3hVc/WnaWR7vSRjHf rL1Y9RyzBXkP6sUMKtW2pH6bfCIlG94m2VTgR7te3KKtIlFBQcpGRMaLmxM4I/3W 6CZIvBCnB2eaYVR+TakF5JwDXtor0tkNbtfkWkSPbxt2jA5Oi3ppcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:53 2026 by rpki-client