This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer (raw, json) Hash identifier: z8JuDhZx2Cz6u6nLIdTIHh1SGvU49E1oVadksSuEze0= Subject key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECD115FDD24F4450B172EB02509D38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199695 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d1:15:fd:d2:4f:44:50:b1:72:eb:02:50:9d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:85:86:f9:72:42:f6:9d:3d:a7:8b:54:06: 32:b9:e5:7c:63:33:c8:51:0d:03:66:89:9a:9a:aa: cc:59:b1:90:21:0f:19:3e:d7:e3:b2:20:e3:5f:df: ca:33:0b:9b:bc:d7:84:93:cd:51:e9:fe:84:64:74: ec:ad:c1:b3:2c:f3:18:27:97:28:82:6f:76:20:73: c5:d6:22:64:44:18:29:c6:ce:19:ad:cd:51:e7:65: 25:90:8e:9e:68:49:cf:b9:1d:b2:e0:47:a4:78:ea: d5:2d:e4:6f:5f:66:e6:79:cf:b6:1c:16:0a:40:17: d8:1b:df:a3:cc:be:99:26:42:30:f0:6e:d7:bf:13: 69:01:28:52:4c:bf:a3:71:47:43:de:8e:ae:32:8d: 57:95:98:59:11:9f:6e:14:cf:49:56:40:72:b3:57: bd:3f:22:52:d4:5a:44:2e:e4:af:0b:30:42:9f:c9: 2c:41:f8:2f:85:8f:75:35:5b:ca:de:45:a9:30:1f: 0f:c0:4d:d8:70:5f:4d:1e:1c:c9:e7:8a:b3:34:d3: 72:25:48:a0:d5:e5:0d:24:42:98:fc:b9:cd:23:24: d3:86:26:5c:44:66:03:ea:51:3c:d5:ff:45:70:0f: 22:e0:d1:26:b9:d1:15:12:c3:ef:77:d1:a6:9f:e3: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199695 Signature Algorithm: sha256WithRSAEncryption 54:d4:ce:ee:e3:f2:47:99:b8:bf:40:d7:b4:8a:37:da:78:0e: 70:e8:da:24:76:45:65:33:5f:c6:14:f6:a3:17:2c:a6:ca:9a: c2:53:46:24:52:9f:a7:72:c9:4d:2e:48:2f:49:bb:7a:64:d9: b7:eb:78:79:7c:12:f3:9c:41:63:15:95:ff:c0:a8:42:fc:f6: 9b:2f:b7:8c:86:e6:01:cd:ab:ca:d7:27:ff:00:d1:36:11:16: aa:81:46:02:e8:17:37:e2:3d:83:ac:52:8f:4d:05:02:62:ed: 70:33:54:23:f2:60:37:a8:cc:05:57:1c:c0:02:07:0d:27:c9: c8:82:66:62:75:05:35:ff:c4:dc:02:15:9c:47:d0:2c:c5:dc: 4d:97:d4:94:5e:58:51:fb:22:b5:ee:4b:4b:22:bd:ce:49:02: b2:01:eb:a2:33:11:10:98:7d:bd:b1:73:fe:6c:df:be:a5:f8: 5a:a0:7f:fe:27:64:c3:b6:f0:4e:5b:b5:73:fa:dd:ab:95:2d: 9f:b7:31:3e:8f:03:6a:93:1a:4a:f3:b3:52:e3:f3:ca:40:97: 44:ec:29:4a:47:d6:65:b5:7f:82:85:59:63:71:b0:35:09:6a: e5:e6:36:0b:11:fc:82:0c:dd:b0:76:ca:49:4d:e1:e2:f4:31: 15:b8:01:7c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87NEV/dJPRFCxcusCUJ04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTJjNmQ2Mjg0ZjExNjVkMDllYmVkYjQ0ZGU2MTc1ZmUwMzNiNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSSFhvlyQvadPaeLVAYyueV8YzPI UQ0DZomamqrMWbGQIQ8ZPtfjsiDjX9/KMwubvNeEk81R6f6EZHTsrcGzLPMYJ5co gm92IHPF1iJkRBgpxs4Zrc1R52UlkI6eaEnPuR2y4EekeOrVLeRvX2bmec+2HBYK QBfYG9+jzL6ZJkIw8G7XvxNpAShSTL+jcUdD3o6uMo1XlZhZEZ9uFM9JVkBys1e9 PyJS1FpELuSvCzBCn8ksQfgvhY91NVvK3kWpMB8PwE3YcF9NHhzJ54qzNNNyJUig 1eUNJEKY/LnNIyTThiZcRGYD6lE81f9FcA8i4NEmudEVEsPvd9Gmn+MoTQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFO4sbWKE8RZdCevttE3mF1/gM7d0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzZjYThl Yy02OTE2LTQzODQtOWNmNS1jNGY1M2UxN2RkYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNmNhOGVj LTY5MTYtNDM4NC05Y2Y1LWM0ZjUzZTE3ZGRiMC8xLzdpeHRZb1R4RmwwSjYtMjBU ZVlYWC1BenQzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMDzANBgkqhkiG9w0BAQsFAAOCAQEAVNTO7uPyR5m4 v0DXtIo32ngOcOjaJHZFZTNfxhT2oxcspsqawlNGJFKfp3LJTS5IL0m7emTZt+t4 eXwS85xBYxWV/8CoQvz2my+3jIbmAc2rytcn/wDRNhEWqoFGAugXN+I9g6xSj00F AmLtcDNUI/JgN6jMBVccwAIHDSfJyIJmYnUFNf/E3AIVnEfQLMXcTZfUlF5YUfsi te5LSyK9zkkCsgHrojMREJh9vbFz/mzfvqX4WqB//idkw7bwTlu1c/rdq5Utn7cx Po8DapMaSvOzUuPzykCXROwpSkfWZbV/goVZY3GwNQlq5eY2CxH8ggzdsHbKSU3h 4vQxFbgBfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:18 2026 by rpki-client