This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.cer (raw, json) Hash identifier: O7WhZ0y0upAZDkzI2AwcXroECBJPQwuNcISnhpW9LwQ= Subject key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED0311FEA9EA237E9B337791FB26ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.73.120.0/22 IP: 2a05:41c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:03:11:fe:a9:ea:23:7e:9b:33:77:91:fb:26:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:63:7e:86:95:85:30:58:86:13:56:0c:a7: 1b:3c:42:1a:bd:aa:72:11:5a:58:2b:c8:f1:9e:83: 4e:f0:09:03:e5:64:5e:fe:2c:eb:6c:54:a3:5c:a4: 14:7e:ea:7c:f5:9b:84:ab:bb:2a:b8:98:f0:2c:8a: ff:a7:48:10:ce:22:14:e1:5e:3d:e1:70:e0:58:b5: 5a:0a:35:3f:b9:64:32:d3:a8:c3:47:6e:ac:3c:84: 70:38:22:46:58:2e:d1:e1:7d:10:0e:60:40:f5:e6: 1f:37:f1:ea:15:9e:18:ad:e1:04:37:fd:19:ca:1f: 99:04:ed:3f:fe:13:68:76:97:df:40:c5:be:58:8b: 4e:2c:7f:2e:0a:0c:68:7c:be:25:c4:98:9b:83:0d: 3b:c1:7a:ee:8b:fe:b8:7f:09:7b:c1:3b:20:5f:da: b8:8b:f2:15:e1:b1:22:de:25:b0:6d:0d:cc:6b:c7: 9b:8e:6c:e0:99:0f:19:9c:a1:30:0f:db:c1:ae:6c: 80:27:52:c1:3a:b6:4e:87:84:f1:a1:3e:2f:c7:47: cb:89:d2:d3:6a:ad:fb:4f:f3:19:b5:67:ba:fc:b5: 27:a3:83:45:db:1f:2b:f5:c9:87:93:bf:e2:f9:6e: 4a:63:1a:55:77:0d:23:7f:25:85:2f:fb:fa:67:77: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.120.0/22 IPv6: 2a05:41c0::/29 Signature Algorithm: sha256WithRSAEncryption 01:16:8d:c7:84:9e:a0:d4:e2:11:92:ec:56:3f:02:e7:10:57: cb:d3:6a:a0:ac:48:15:c8:11:e8:42:f7:98:72:ac:8e:f6:28: 79:fe:c2:5d:41:ee:45:cb:a9:d5:a7:43:42:17:24:be:c5:40: 4e:d2:df:8d:86:66:68:af:3c:bc:e6:c1:52:22:a1:0e:bc:bf: cb:de:b7:57:8f:7c:35:57:51:d4:f7:e7:19:78:f8:f5:f4:2e: 2b:0f:19:9b:92:ce:fd:2e:68:91:63:e8:5e:6e:62:04:3a:16: d5:e7:ba:5d:21:a4:66:5c:a0:76:d3:c7:84:64:c5:55:cf:f1: 7d:1f:e6:ad:91:77:0f:8b:52:f8:97:61:ef:3a:29:32:69:c5: f6:c0:7e:a4:3e:d4:91:7f:3a:45:44:ae:4c:1f:0c:32:c9:de: 3c:5c:d2:2a:b7:f3:fc:8c:9c:eb:3e:ca:f2:f4:1c:47:11:2d: 9c:52:54:28:0d:ee:58:9f:c4:b6:e5:83:05:57:55:5f:d0:eb: 3e:b8:e4:46:5d:c7:fb:6b:08:d1:62:5b:60:4d:27:54:24:8d: 2a:7c:c1:e6:9e:9c:97:e5:88:b5:0f:6c:f5:06:15:21:db:78: 47:7f:6f:86:c9:61:a3:43:83:c5:2f:0e:40:e6:b1:f0:65:fd: 64:97:e4:4f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57QMR/qnqI36bM3eR+ybtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg1MDQ4M2NjZTEzMzdiMWM2YzJmZGRlYTljNWRiYjRhN2UxOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HhjfoaVhTBYhhNWDKcbPEIavapy EVpYK8jxnoNO8AkD5WRe/izrbFSjXKQUfup89ZuEq7squJjwLIr/p0gQziIU4V49 4XDgWLVaCjU/uWQy06jDR26sPIRwOCJGWC7R4X0QDmBA9eYfN/HqFZ4YreEEN/0Z yh+ZBO0//hNodpffQMW+WItOLH8uCgxofL4lxJibgw07wXrui/64fwl7wTsgX9q4 i/IV4bEi3iWwbQ3Ma8ebjmzgmQ8ZnKEwD9vBrmyAJ1LBOrZOh4TxoT4vx0fLidLT aq37T/MZtWe6/LUno4NF2x8r9cmHk7/i+W5KYxpVdw0jfyWFL/v6Z3eOFwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFO2FBIPM4TN7HGwv3eqcXbtKfhkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzU3ZmZj NS01ODRmLTRiZmEtYWI4NS1iOTE1M2IzMzIwYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNTdmZmM1 LTU4NGYtNGJmYS1hYjg1LWI5MTUzYjMzMjBjMS8xLzdZVUVnOHpoTTNzY2JDX2Q2 cHhkdTBwLUdSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUl4MA0EAgACMAcDBQMqBUHAMA0GCSqGSIb3 DQEBCwUAA4IBAQABFo3HhJ6g1OIRkuxWPwLnEFfL02qgrEgVyBHoQveYcqyO9ih5 /sJdQe5Fy6nVp0NCFyS+xUBO0t+NhmZorzy85sFSIqEOvL/L3rdXj3w1V1HU9+cZ ePj19C4rDxmbks79LmiRY+hebmIEOhbV57pdIaRmXKB208eEZMVVz/F9H+atkXcP i1L4l2HvOikyacX2wH6kPtSRfzpFRK5MHwwyyd48XNIqt/P8jJzrPsry9BxHES2c UlQoDe5Yn8S25YMFV1Vf0Os+uORGXcf7awjRYltgTSdUJI0qfMHmnpyX5Yi1D2z1 BhUh23hHf2+GyWGjQ4PFLw5A5rHwZf1kl+RP -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:50 2026 by rpki-client