This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer File: 7bkm-MYDqrectGqIO_YyVko_qr8.cer (raw, json) Hash identifier: xu4jDiRowLTRzN07nnccrSuRuEN92uEyb+E8CxWzarE= Subject key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A780B48E81FB67CC4FCB12ED2781 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42695 AS: 52011 IP: 31.12.84.0/22 IP: 31.132.56.0/22 IP: 37.153.138.0/23 IP: 37.153.172.0/23 IP: 45.114.120.0/22 IP: 46.254.8.0/21 IP: 77.81.6.0/23 IP: 77.81.188.0/23 IP: 86.107.48.0/23 IP: 86.107.242.0/23 IP: 89.36.90.0/23 IP: 89.40.216.0/23 IP: 89.42.140.0/23 IP: 89.45.226.0/23 IP: 89.46.80.0/21 IP: 91.106.192.0/21 IP: 91.123.192.0/20 IP: 103.57.72.0/22 IP: 103.81.140.0/22 IP: 116.206.168.0/22 IP: 141.255.184.0/21 IP: 185.2.152.0/22 IP: 185.16.84.0/22 IP: 185.52.156.0/22 IP: 185.62.204.0/22 IP: 185.103.48.0/22 IP: 188.95.224.0/21 IP: 188.212.108.0/23 IP: 188.240.18.0/23 IP: 188.240.92.0/22 IP: 188.240.222.0/23 IP: 188.241.198.0/23 IP: 2a00:16d8::/32 IP: 2a03:b000::/32 IP: 2a03:d7c0::/29 IP: 2a04:f180::/29 IP: 2a06:2980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Feb 2026 15:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a7:80:b4:8e:81:fb:67:cc:4f:cb:12:ed:27:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb926f8c603aab79cb46a883bf632564a3faabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:09:43:95:cb:f3:0d:97:bf:bf:4e:fb:a1: 21:d4:5e:b4:f3:af:b9:be:97:c4:d9:3b:ff:24:60: ab:bc:be:d0:d4:95:fc:73:f5:05:2e:c1:18:ca:1d: 0e:6d:41:2e:e9:40:55:78:3d:f5:8f:5f:bf:28:4c: db:98:6b:e2:cd:eb:7b:0c:8c:30:eb:e9:f7:fd:2f: 15:f5:5a:50:ec:83:ae:e6:2c:b4:df:43:90:0c:b1: 06:78:0a:ae:75:07:25:41:57:ce:11:90:9b:e6:ef: 82:dc:83:19:d5:8e:42:c5:a5:11:0e:88:68:56:50: 46:fe:e4:ce:d6:fd:d2:7f:0a:3c:e5:73:53:3b:c8: 1a:da:ea:39:54:8d:5a:9d:e2:23:3e:a8:1c:99:e7: 46:47:d4:58:77:93:a3:93:b9:d7:4a:aa:25:00:15: 1f:a5:7c:80:21:dc:e5:5e:0c:83:75:f2:f5:f5:e0: b2:75:d1:e1:22:44:e1:15:98:18:12:7f:06:78:ae: fb:21:c2:0e:a1:6f:0d:a8:85:22:53:fb:11:50:41: 3f:79:27:55:64:22:81:65:ca:76:e8:1e:30:4e:12: b4:5d:ec:3b:18:8d:6c:86:a4:d8:12:81:98:91:77: 17:f1:57:76:c5:f5:66:37:7b:bc:e7:02:80:8f:62: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.12.84.0/22 31.132.56.0/22 37.153.138.0/23 37.153.172.0/23 45.114.120.0/22 46.254.8.0/21 77.81.6.0/23 77.81.188.0/23 86.107.48.0/23 86.107.242.0/23 89.36.90.0/23 89.40.216.0/23 89.42.140.0/23 89.45.226.0/23 89.46.80.0/21 91.106.192.0/21 91.123.192.0/20 103.57.72.0/22 103.81.140.0/22 116.206.168.0/22 141.255.184.0/21 185.2.152.0/22 185.16.84.0/22 185.52.156.0/22 185.62.204.0/22 185.103.48.0/22 188.95.224.0/21 188.212.108.0/23 188.240.18.0/23 188.240.92.0/22 188.240.222.0/23 188.241.198.0/23 IPv6: 2a00:16d8::/32 2a03:b000::/32 2a03:d7c0::/29 2a04:f180::/29 2a06:2980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42695 52011 Signature Algorithm: sha256WithRSAEncryption 03:0c:a5:10:bf:f7:31:58:c1:d9:75:df:8c:c3:dc:dc:2b:ba: 7d:21:bf:fd:9c:df:02:fb:a3:c7:ff:f7:e9:30:7e:f0:b5:10: 8c:da:df:fb:ec:a7:e9:0a:a7:87:68:98:bb:f9:0e:64:26:86: 37:2e:bb:75:e0:e8:e5:a8:47:80:4a:5e:2e:16:34:0d:0c:f4: ad:f2:a0:48:69:76:9d:e2:95:c7:b2:a1:db:56:ca:43:e6:d5: 5c:f3:e0:c8:f0:6d:e9:74:b8:9b:5f:18:28:9b:e2:1f:b2:ce: 7b:71:93:1f:53:59:af:27:ed:d4:b0:49:3a:04:02:15:49:64: a0:64:df:e4:cc:06:f5:ef:6d:57:71:fa:c2:23:78:50:dd:73: fb:91:7a:69:51:11:ce:d6:2a:23:17:82:a7:ae:ee:72:66:1e: d7:96:6f:4c:6c:11:fa:38:dd:6f:e7:ef:bb:10:89:de:a0:74: 57:36:17:e0:93:59:26:41:ba:26:dc:3d:ed:e3:88:85:15:8e: 28:b8:36:7a:9e:d3:cd:f2:d2:e2:3a:76:67:82:13:93:bd:e7: e1:11:ef:c4:a7:17:1d:63:cd:5f:bb:3c:4d:66:16:66:7a:de: 5c:67:ce:65:82:30:9e:2e:1d:3c:fd:e3:0f:dc:5e:50:87:78: df:58:6b:ed -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgISAZt4NKeAtI6B+2fMT8sS7SeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGI5MjZmOGM2MDNhYWI3OWNiNDZhODgzYmY2MzI1NjRhM2ZhYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQJQ5XL8w2Xv79O+6Eh1F6086+5 vpfE2Tv/JGCrvL7Q1JX8c/UFLsEYyh0ObUEu6UBVeD31j1+/KEzbmGvizet7DIww 6+n3/S8V9VpQ7IOu5iy030OQDLEGeAqudQclQVfOEZCb5u+C3IMZ1Y5CxaURDoho VlBG/uTO1v3Sfwo85XNTO8ga2uo5VI1aneIjPqgcmedGR9RYd5Ojk7nXSqolABUf pXyAIdzlXgyDdfL19eCyddHhIkThFZgYEn8GeK77IcIOoW8NqIUiU/sRUEE/eSdV ZCKBZcp26B4wThK0Xew7GI1shqTYEoGYkXcX8Vd2xfVmN3u85wKAj2LDXwIDAQAB o4IDkDCCA4wwHQYDVR0OBBYEFO25JvjGA6q3nLRqiDv2MlZKP6q/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzU2Yzkz NC1jZjE0LTRhNGYtYWU3Yy0zYmQxOTc4YmYyZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNTZjOTM0 LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8xLzdia20tTVlEcXJlY3RHcUlP X1l5VmtvX3FyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBCAYIKwYB BQUHAQcBAf8EgfgwgfUwgccEAgABMIHAAwQCHwxUAwQCH4Q4AwQBJZmKAwQBJZms AwQCLXJ4AwQDLv4IAwQBTVEGAwQBTVG8AwQBVmswAwQBVmvyAwQBWSRaAwQBWSjY AwQBWSqMAwQBWS3iAwQDWS5QAwQDW2rAAwQEW3vAAwQCZzlIAwQCZ1GMAwQCdM6o AwQDjf+4AwQCuQKYAwQCuRBUAwQCuTScAwQCuT7MAwQCuWcwAwQDvF/gAwQBvNRs AwQBvPASAwQCvPBcAwQBvPDeAwQBvPHGMCkEAgACMCMDBQAqABbYAwUAKgOwAAMF AyoD18ADBQMqBPGAAwUDKgYpgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMApscC AwDLKzANBgkqhkiG9w0BAQsFAAOCAQEAAwylEL/3MVjB2XXfjMPc3Cu6fSG//Zzf Avujx//36TB+8LUQjNrf++yn6Qqnh2iYu/kOZCaGNy67deDo5ahHgEpeLhY0DQz0 rfKgSGl2neKVx7Kh21bKQ+bVXPPgyPBt6XS4m18YKJviH7LOe3GTH1NZryft1LBJ OgQCFUlkoGTf5MwG9e9tV3H6wiN4UN1z+5F6aVERztYqIxeCp67ucmYe15ZvTGwR +jjdb+fvuxCJ3qB0VzYX4JNZJkG6Jtw97eOIhRWOKLg2ep7TzfLS4jp2Z4ITk73n 4RHvxKcXHWPNX7s8TWYWZnreXGfOZYIwni4dPP3jD9xeUId431hr7Q== -----END CERTIFICATE-----Generated at Wed Feb 11 19:25:19 2026 by rpki-client