This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer (raw, json) Hash identifier: xUosBaz9LM1MivfkQDuWsSN9ThwSiEUqh0yOm7TSF1M= Subject key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783502A1832AC78686EF13192FA6C844 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50689 IP: 195.191.222.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:02:a1:83:2a:c7:86:86:ef:13:19:2f:a6:c8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed89298644ed486ded509d946a6d6d839589ce11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:48:5d:05:b5:dc:36:60:9f:98:67:00:b5: f1:e0:70:fb:4c:5c:82:c3:4f:7b:7f:7f:12:62:7c: c6:71:97:ee:02:ed:61:16:21:49:d6:e5:dd:6c:44: e1:24:45:32:55:9e:8d:dd:b1:d1:e0:73:86:82:97: 20:c4:9f:62:02:c0:cf:60:02:bd:90:eb:c3:15:58: a7:f1:23:2e:59:e4:5e:4b:fe:f0:49:85:70:4c:77: 62:0f:04:28:90:e1:ed:d2:b3:28:fd:60:f0:de:94: 58:ad:0e:de:68:02:b1:5a:bb:29:6d:69:1b:e5:32: 07:b7:2c:6e:a1:ea:1e:56:fd:d4:fa:36:fe:52:6d: 7b:99:9a:c6:b7:2a:a7:fa:a9:b1:16:c9:5b:b8:73: ef:ea:a6:f0:ac:2f:23:e4:c8:fc:45:1e:1a:84:9a: b8:e2:f1:06:fa:84:af:a7:cc:5f:f6:a9:43:4f:40: cd:9a:58:d7:22:43:c7:34:cf:54:81:88:96:24:81: 5b:2f:d4:2d:25:c2:a1:3f:36:eb:54:5c:2e:bf:34: b8:70:bb:cf:f7:3f:0a:27:cb:00:b4:e2:4b:14:f8: 75:1e:35:7f:a3:9d:d1:cc:c7:96:05:a5:a3:4f:b7: bc:c1:62:63:c1:e0:cd:6e:dc:e4:37:5f:6a:4d:1f: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.222.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50689 Signature Algorithm: sha256WithRSAEncryption 39:3b:cb:1f:f9:d3:21:8b:de:8f:53:f8:38:ea:2b:81:78:53: 07:64:cf:e6:b5:b4:82:ab:e6:40:96:f2:7d:3f:76:9c:ea:0c: 89:52:5a:30:5f:46:ff:1e:3a:81:7e:0f:80:aa:a4:6d:3d:97: e1:2e:a9:c7:42:d5:e4:b6:ee:b2:f9:c3:7e:7d:6b:2c:f0:b9: 5f:40:ae:32:f1:3f:c4:67:0a:d2:5a:94:df:86:f0:3e:fa:79: ea:0c:39:a3:7d:36:c4:72:61:9b:95:96:02:a5:fe:35:f4:cb: e9:34:d0:6e:bd:59:2c:8d:ff:bf:39:b1:98:37:ad:09:c0:78: 6b:0c:1b:3b:87:b6:22:b0:40:4f:c0:fb:a8:6c:49:79:5e:25: bd:58:0a:13:66:2c:91:9a:4c:80:1a:57:a2:27:68:21:17:fb: 2c:94:e5:36:11:41:5c:a1:69:aa:b0:50:f0:80:4d:61:39:bc: c8:4a:fc:c0:b5:87:b3:4c:12:e6:ef:cb:e8:33:bc:7c:82:42: 96:0c:dd:ef:01:de:e2:73:44:41:37:3d:9e:a1:d1:2a:fb:56: e5:c7:09:32:41:f9:e9:3f:64:62:70:c3:f2:ac:f1:be:cf:f1: ac:a4:9e:c6:f0:ad:d9:fc:91:f0:74:11:7b:78:cc:0f:b9:a5: 85:da:8a:a7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NQKhgyrHhobvExkvpshEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg5Mjk4NjQ0ZWQ0ODZkZWQ1MDlkOTQ2YTZkNmQ4Mzk1ODljZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNlIXQW13DZgn5hnALXx4HD7TFyC w097f38SYnzGcZfuAu1hFiFJ1uXdbEThJEUyVZ6N3bHR4HOGgpcgxJ9iAsDPYAK9 kOvDFVin8SMuWeReS/7wSYVwTHdiDwQokOHt0rMo/WDw3pRYrQ7eaAKxWrspbWkb 5TIHtyxuoeoeVv3U+jb+Um17mZrGtyqn+qmxFslbuHPv6qbwrC8j5Mj8RR4ahJq4 4vEG+oSvp8xf9qlDT0DNmljXIkPHNM9UgYiWJIFbL9QtJcKhPzbrVFwuvzS4cLvP 9z8KJ8sAtOJLFPh1HjV/o53RzMeWBaWjT7e8wWJjweDNbtzkN19qTR/e7QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO2JKYZE7Uht7VCdlGptbYOVic4RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzE0MTg4 Ny01NTA3LTQ1YTUtOGIwYS01N2ExZjBiMzJmMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMTQxODg3 LTU1MDctNDVhNS04YjBhLTU3YTFmMGIzMmYwMS8xLzdZa3Boa1R0U0czdFVKMlVh bTF0ZzVXSnpoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw7/eMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGATANBgkqhkiG9w0BAQsFAAOCAQEAOTvLH/nTIYvej1P4OOorgXhTB2TP5rW0 gqvmQJbyfT92nOoMiVJaMF9G/x46gX4PgKqkbT2X4S6px0LV5LbusvnDfn1rLPC5 X0CuMvE/xGcK0lqU34bwPvp56gw5o302xHJhm5WWAqX+NfTL6TTQbr1ZLI3/vzmx mDetCcB4awwbO4e2IrBAT8D7qGxJeV4lvVgKE2YskZpMgBpXoidoIRf7LJTlNhFB XKFpqrBQ8IBNYTm8yEr8wLWHs0wS5u/L6DO8fIJClgzd7wHe4nNEQTc9nqHRKvtW 5ccJMkH56T9kYnDD8qzxvs/xrKSexvCt2fyR8HQRe3jMD7mlhdqKpw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:01 2026 by rpki-client