This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer File: 7OZJjRdK31yJo2XC0eR33PJPmC4.cer (raw, json) Hash identifier: CqIlsURWf3Wd+lTlvu4ArsEP4LaJMntZ7KFgdOyJDPU= Subject key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A261891F1971E494521C90AEFAA908 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49308 IP: 91.212.189.0/24 IP: 198.202.22.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:61:89:1f:19:71:e4:94:52:1c:90:ae:fa:a9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:2d:a2:d6:e9:0a:4e:ad:45:ea:aa:aa:50: 96:57:04:25:ee:89:55:30:a6:62:7f:08:50:71:6f: 10:37:16:4a:7b:3c:c3:b5:f3:76:d2:e2:6f:d0:a9: 7e:ba:03:4f:12:17:c2:0e:19:04:7f:83:68:d4:86: 9f:39:f9:60:da:76:59:60:66:1b:e6:0b:fc:59:ad: 7c:ca:62:53:73:3a:65:8b:56:2a:9f:de:0f:7e:53: 67:4d:c9:bb:69:66:39:d8:24:1d:ad:9a:c9:bf:81: 1b:47:25:a3:8e:c9:23:9d:d4:69:50:48:66:22:1c: 5a:6b:36:6c:db:fd:5b:36:23:5e:b4:e8:74:c0:94: 99:63:ab:df:aa:7b:3c:76:db:93:44:82:cc:13:46: e2:89:fb:7f:a4:54:61:0a:58:b8:d0:98:5d:f9:6e: da:64:f1:4d:2b:25:dc:96:b0:b8:55:51:9c:24:08: 0e:43:ba:cb:cc:0b:9a:e5:3e:b5:0e:e2:b2:99:2f: c5:39:90:bf:80:32:1e:71:62:82:a2:b1:2b:65:48: c3:b2:f2:95:8b:a6:f6:73:bc:22:bc:ec:e2:8a:45: 94:1b:5d:17:50:43:50:2d:f2:f6:5e:72:5b:c2:a7: 96:0c:82:77:06:54:e1:71:1b:54:7d:07:fc:52:f8: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.189.0/24 198.202.22.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49308 Signature Algorithm: sha256WithRSAEncryption 4e:37:d3:6a:82:b4:e6:86:6b:21:61:99:fc:90:d7:43:e3:d4: 22:34:3b:21:85:28:e7:05:ef:9a:76:67:07:7f:7b:00:02:f3: 77:39:55:bc:97:27:1c:58:b9:a3:9a:8c:49:7c:b7:ed:1f:2a: 9d:08:ee:14:72:8d:09:ac:b3:82:25:45:ea:ab:b3:13:a1:ae: ca:7d:19:09:47:7c:9c:77:81:f7:b3:b0:5d:13:93:a1:b6:05: 80:a8:ac:64:de:3f:39:57:00:f8:5d:ea:de:34:35:79:89:bf: ad:ef:0d:42:ee:3f:a5:f8:f6:75:ad:f7:b1:2f:4f:71:5e:79: 5d:7d:2f:c0:fa:90:a6:24:81:b9:68:c2:9d:da:57:79:56:52: bc:1c:df:6b:fc:77:7a:87:3f:5d:70:e6:79:ad:9e:8b:89:6d: 63:e2:06:68:a3:00:cd:39:89:e2:92:71:7c:4e:47:d5:6f:31: d7:0c:e2:4b:3f:90:af:ab:1d:4e:42:13:85:22:70:97:bc:ed: 7c:03:11:76:81:4d:42:68:9f:09:21:45:78:8f:45:e7:66:5d: 2b:17:a8:e5:1d:61:5c:5b:0c:57:e9:8f:5d:24:ad:dd:8e:91: e0:20:bf:1d:db:77:0a:23:bf:ac:d0:f4:bf:80:25:09:31:11: 27:7e:ab:db -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4omGJHxlx5JRSHJCu+qkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U2NDk4ZDE3NGFkZjVjODlhMzY1YzJkMWU0NzdkY2YyNGY5ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOototbpCk6tReqqqlCWVwQl7olV MKZifwhQcW8QNxZKezzDtfN20uJv0Kl+ugNPEhfCDhkEf4No1IafOflg2nZZYGYb 5gv8Wa18ymJTczpli1Yqn94PflNnTcm7aWY52CQdrZrJv4EbRyWjjskjndRpUEhm IhxaazZs2/1bNiNetOh0wJSZY6vfqns8dtuTRILME0biift/pFRhCli40Jhd+W7a ZPFNKyXclrC4VVGcJAgOQ7rLzAua5T61DuKymS/FOZC/gDIecWKCorErZUjDsvKV i6b2c7wivOziikWUG10XUENQLfL2XnJbwqeWDIJ3BlThcRtUfQf8UvhdLQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOzmSY0XSt9ciaNlwtHkd9zyT5guMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzhhYmI1 OC1mMzBjLTRmM2ItYjk5Mi05YmVjYzEzNmNjNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvOGFiYjU4 LWYzMGMtNGYzYi1iOTkyLTliZWNjMTM2Y2M3MS8xLzdPWkpqUmRLMzF5Sm8yWEMw ZVIzM1BKUG1DNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9S9AwQAxsoWMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDAnDANBgkqhkiG9w0BAQsFAAOCAQEATjfTaoK05oZrIWGZ/JDXQ+PU IjQ7IYUo5wXvmnZnB397AALzdzlVvJcnHFi5o5qMSXy37R8qnQjuFHKNCayzgiVF 6quzE6Guyn0ZCUd8nHeB97OwXROTobYFgKisZN4/OVcA+F3q3jQ1eYm/re8NQu4/ pfj2da33sS9PcV55XX0vwPqQpiSBuWjCndpXeVZSvBzfa/x3eoc/XXDmea2ei4lt Y+IGaKMAzTmJ4pJxfE5H1W8x1wziSz+Qr6sdTkIThSJwl7ztfAMRdoFNQmifCSFF eI9F52ZdKxeo5R1hXFsMV+mPXSSt3Y6R4CC/Hdt3CiO/rND0v4AlCTERJ36r2w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:15 2026 by rpki-client