This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer (raw, json) Hash identifier: sBfQvAh79hr2G2OH2bxSBS/3d5Lk6t8j81o4j6xCFLw= Subject key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E10A2BD7A66C49626801E220E9C092E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 09:36:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210707 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:10:a2:bd:7a:66:c4:96:26:80:1e:22:0e:9c:09:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 09:36:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee28d94d484033f77e6f9381a02da3e242167dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:99:87:2d:69:21:57:21:a1:f9:16:50:1a: 61:a5:73:e2:0c:3e:31:f5:35:86:0b:c8:ea:18:13: 9a:07:56:92:df:d8:44:ac:96:8c:52:92:af:ac:c8: 36:c0:77:c6:29:20:59:23:5f:93:e6:d4:cc:91:71: 67:18:da:ba:14:ae:aa:83:82:67:d4:f1:47:06:02: 64:a5:89:a7:50:9a:12:ea:99:59:8d:69:d4:e0:28: b3:b7:a1:91:d1:22:1a:b4:6c:82:d9:34:4c:4b:a3: ca:2f:70:86:8f:66:00:e4:14:6f:6e:33:2b:66:46: b0:e2:15:ae:08:8a:d9:81:18:5e:b3:81:d4:27:e4: c5:86:67:41:06:9b:35:da:90:3b:9d:d7:90:1f:33: de:99:d8:54:a4:cd:7a:ca:8b:89:8c:93:b9:5a:4b: 1d:15:4e:ff:e6:86:e2:56:fc:05:83:95:a5:4d:29: 7f:5b:05:8c:5b:78:39:ea:83:b5:8a:ce:1d:b3:7e: d2:3b:3f:6f:25:af:10:d8:e7:cb:0c:6d:77:8b:cf: f0:3b:13:0d:a0:3a:37:31:74:18:66:68:f1:de:a4: 1b:94:ec:08:42:91:9e:a7:56:59:60:7c:e5:6e:ad: 7b:a9:b2:74:b4:12:0d:c4:6b:57:19:dc:9d:2e:59: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210707 Signature Algorithm: sha256WithRSAEncryption 4a:eb:15:de:e3:ec:27:1a:73:cc:d1:5e:bb:71:74:c4:71:ae: 7f:f8:0d:c9:19:37:e4:6b:26:7d:60:be:5e:28:4c:e6:61:ed: a8:04:4b:0c:93:86:c6:b2:1b:51:a4:c5:ec:c3:0a:13:4b:cd: ec:5f:d9:0c:99:f4:6b:66:80:3d:65:88:25:8c:e1:95:8f:90: d3:06:8b:b2:33:4b:55:7d:d0:df:b2:85:68:54:cd:4f:bc:26: aa:48:56:d0:ef:c7:54:c3:ad:c1:58:fb:2c:5a:a8:35:7c:e0: 87:ca:78:75:54:16:74:09:c3:ce:4d:06:e5:95:71:67:05:16: a0:a8:77:21:93:75:18:46:9c:87:b6:a2:32:7b:81:06:3b:bd: 6b:b1:99:a5:7a:a0:f9:f6:dc:27:5a:ab:d3:33:c8:40:5c:72: 3f:f0:8c:f9:0a:23:2b:a3:79:4a:84:2b:42:59:57:38:08:22: 15:10:eb:cf:47:37:e2:ed:f0:05:35:22:01:f8:c7:83:46:9f: ed:3e:1d:37:60:ba:a3:5a:56:29:7c:bc:1e:a0:79:92:2d:6c: f9:37:ac:4c:be:b4:f9:ba:87:87:a4:76:3e:1f:3d:cd:b2:ab: 62:01:f3:e9:5b:52:6e:18:d2:9b:41:d7:7b:43:d7:c1:64:08: 4e:d8:2f:ca -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+EKK9embEliaAHiIOnAkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDkzNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTI4ZDk0ZDQ4NDAzM2Y3N2U2ZjkzODFhMDJkYTNlMjQyMTY3ZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyKZhy1pIVchofkWUBphpXPiDD4x 9TWGC8jqGBOaB1aS39hErJaMUpKvrMg2wHfGKSBZI1+T5tTMkXFnGNq6FK6qg4Jn 1PFHBgJkpYmnUJoS6plZjWnU4Cizt6GR0SIatGyC2TRMS6PKL3CGj2YA5BRvbjMr Zkaw4hWuCIrZgRhes4HUJ+TFhmdBBps12pA7ndeQHzPemdhUpM16youJjJO5Wksd FU7/5obiVvwFg5WlTSl/WwWMW3g56oO1is4ds37SOz9vJa8Q2OfLDG13i8/wOxMN oDo3MXQYZmjx3qQblOwIQpGep1ZZYHzlbq17qbJ0tBINxGtXGdydLllCwwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFO4o2U1IQDP3fm+TgaAto+JCFn2uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2VhZGJm OC04ZTQ0LTQyNzEtYTcyYi0wYzc1NmZkMjQ4YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZWFkYmY4 LThlNDQtNDI3MS1hNzJiLTBjNzU2ZmQyNDhjOC8xLzdpalpUVWhBTV9kLWI1T0Jv QzJqNGtJV2ZhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3EzANBgkqhkiG9w0BAQsFAAOCAQEASusV3uPsJxpz zNFeu3F0xHGuf/gNyRk35GsmfWC+XihM5mHtqARLDJOGxrIbUaTF7MMKE0vN7F/Z DJn0a2aAPWWIJYzhlY+Q0waLsjNLVX3Q37KFaFTNT7wmqkhW0O/HVMOtwVj7LFqo NXzgh8p4dVQWdAnDzk0G5ZVxZwUWoKh3IZN1GEach7aiMnuBBju9a7GZpXqg+fbc J1qr0zPIQFxyP/CM+QojK6N5SoQrQllXOAgiFRDrz0c34u3wBTUiAfjHg0af7T4d N2C6o1pWKXy8HqB5ki1s+TesTL60+bqHh6R2Ph89zbKrYgHz6VtSbhjSm0HXe0PX wWQITtgvyg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:50 2026 by rpki-client