This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer (raw, json) Hash identifier: VN0rvustsfyZrO8dj904pxZplqtxc12Q+Oli04drlOA= Subject key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F819CFC01CEBD64DBDE9348E8188A47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16110 AS: 61027 AS: 199192 IP: 46.174.208.0/23 IP: 46.174.211.0 -- 46.174.215.255 IP: 185.1.42.0/24 IP: 2001:7f8:9b::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:9c:fc:01:ce:bd:64:db:de:93:48:e8:18:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:9e:0a:6c:39:0d:6e:fc:af:ec:27:eb:3a: ee:24:3f:d2:59:d3:39:b2:9b:ea:da:ff:a0:23:79: 7d:cd:bb:8c:ce:dc:9b:bd:c7:e3:fa:5c:4a:0b:a2: f8:f7:5d:b2:78:7b:1b:b1:64:58:e2:29:d5:ee:c1: 64:7f:cb:26:83:b5:01:31:30:2e:83:41:ff:89:07: fa:99:38:f9:bf:76:fe:98:19:8e:04:e4:fb:21:90: 22:1f:4c:4c:c6:1e:c6:c1:26:3d:e9:3b:24:23:38: 2a:b8:02:aa:cd:54:20:cd:95:a6:fe:e5:ae:87:4d: de:eb:1c:4f:26:e6:15:23:cd:15:be:59:ac:90:60: 16:b6:74:3e:dd:a4:4e:d4:3d:d8:dd:9f:72:32:a7: 0d:d3:90:46:95:fc:d0:31:64:21:5f:83:5b:ec:d0: c2:b3:36:67:b6:74:77:c8:65:77:88:4a:c1:31:90: 65:90:d1:1d:89:6c:bf:cd:9f:5b:e4:bb:78:db:59: a5:8a:51:c2:d5:72:bc:c9:d0:a5:81:23:7f:de:a3: 5e:86:98:6a:e0:f9:2b:93:a6:89:58:00:76:ca:5f: 3a:f4:6a:0d:53:9a:91:e5:b7:aa:6a:21:a6:72:13: 77:25:5b:35:9a:64:ad:da:09:4c:da:ff:b1:a7:e2: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.208.0/23 46.174.211.0-46.174.215.255 185.1.42.0/24 IPv6: 2001:7f8:9b::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16110 61027 199192 Signature Algorithm: sha256WithRSAEncryption a9:d1:c9:64:1e:bf:67:41:82:95:97:fb:ac:5e:3c:11:5a:11: 78:73:3c:92:39:e6:c4:46:f7:cd:f7:b4:47:d2:58:a3:64:ac: 6e:6f:0a:d0:bb:41:96:d0:69:40:82:0d:cd:79:ac:b9:76:d1: 58:c4:d5:2f:56:0d:33:4a:3b:73:e6:fe:da:e8:19:9d:51:d7: 3e:04:50:70:09:57:90:28:58:2a:01:8c:4e:88:c3:ac:ca:98: 23:99:52:b5:f8:22:9e:02:ed:05:ce:42:41:55:07:77:a7:d4: ee:d0:ae:48:d1:b8:cc:b9:94:b9:64:bc:87:72:41:1b:46:b3: 25:4d:41:db:10:13:0e:7d:d2:2e:72:b0:8b:c2:55:db:40:7a: ad:e6:a3:e9:91:a6:f9:c7:9c:af:09:20:03:35:38:74:c1:15: cf:9d:25:22:de:cc:d7:96:a7:c5:d6:b6:b0:3f:af:eb:62:7a: 0a:07:99:b6:af:25:d5:c5:6c:3e:2c:3f:37:43:98:c7:b6:cf: 9a:76:2a:23:96:f0:1c:42:dc:a3:d4:8d:46:e7:b1:69:fa:c1: 34:93:21:48:5b:e6:4e:92:0c:ca:23:af:75:bc:57:a3:87:ef: e2:20:d0:73:d7:0a:10:94:48:a1:40:a3:cb:61:be:1d:bd:09: 7a:12:92:79 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt/gZz8Ac69ZNvek0joGIpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDc3MmMyZmEyM2JlNmZhOGUyOGFlYTRhNzE1ZDVhYzMxZjBjYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dieCmw5DW78r+wn6zruJD/SWdM5 spvq2v+gI3l9zbuMztybvcfj+lxKC6L4912yeHsbsWRY4inV7sFkf8smg7UBMTAu g0H/iQf6mTj5v3b+mBmOBOT7IZAiH0xMxh7GwSY96TskIzgquAKqzVQgzZWm/uWu h03e6xxPJuYVI80VvlmskGAWtnQ+3aRO1D3Y3Z9yMqcN05BGlfzQMWQhX4Nb7NDC szZntnR3yGV3iErBMZBlkNEdiWy/zZ9b5Lt421mlilHC1XK8ydClgSN/3qNehphq 4Pkrk6aJWAB2yl869GoNU5qR5beqaiGmchN3JVs1mmSt2glM2v+xp+KvMQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFO13LC+iO+b6jiiupKcV1awx8MyfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzc5MDY0 OC1kZDkwLTQ0ZWItOWE4Zi04ZmEwOTg3NDExM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNzkwNjQ4 LWRkOTAtNDRlYi05YThmLThmYTA5ODc0MTEzZS8xLzdYY3NMNkk3NXZxT0tLNmtw eFhWckRId3pKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUF BwEHAQH/BDUwMzAgBAIAATAaAwQBLq7QMAwDBAAurtMDBAMurtADBAC5ASowDwQC AAIwCQMHACABB/gAmzAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgI+7gIDAO5jAgMD ChgwDQYJKoZIhvcNAQELBQADggEBAKnRyWQev2dBgpWX+6xePBFaEXhzPJI55sRG 9833tEfSWKNkrG5vCtC7QZbQaUCCDc15rLl20VjE1S9WDTNKO3Pm/troGZ1R1z4E UHAJV5AoWCoBjE6Iw6zKmCOZUrX4Ip4C7QXOQkFVB3en1O7QrkjRuMy5lLlkvIdy QRtGsyVNQdsQEw590i5ysIvCVdtAeq3mo+mRpvnHnK8JIAM1OHTBFc+dJSLezNeW p8XWtrA/r+tiegoHmbavJdXFbD4sPzdDmMe2z5p2KiOW8BxC3KPUjUbnsWn6wTST IUhb5k6SDMojr3W8V6OH7+Ig0HPXChCUSKFAo8thvh29CXoSknk= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:50 2026 by rpki-client