This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer File: 7jd-2foR7BmVVVl2LeBHpabrFKg.cer (raw, json) Hash identifier: 1ubK9+51EEXzZiTG5Q1//94HHHqrNnw2dspBFUd8aMc= Subject key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835375039269589E11114C282E11BBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12750 IP: 212.80.96.0/19 IP: 2a01:7480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:37:50:39:26:95:89:e1:11:14:c2:82:e1:1b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:65:35:f8:bc:c3:69:78:08:8a:73:28:45: 0a:2e:ac:3a:79:e5:cf:96:6c:8e:9d:ec:11:fd:8d: 9f:e0:c4:9b:93:c5:3a:82:1c:70:91:53:c7:ec:17: 52:25:74:5c:17:82:a2:e6:91:4f:bd:b2:fb:65:b7: c5:f3:1c:a5:53:d0:ba:63:46:9b:f0:92:03:45:8e: 01:5a:57:2b:b9:61:19:e6:df:ff:ef:03:09:87:2f: 07:50:53:cd:d9:59:82:5a:7d:c9:7a:5a:a4:ff:12: de:cc:a8:31:9a:83:f7:58:35:52:a6:b6:24:46:5e: e3:29:d1:68:7b:0f:8b:56:e3:49:90:82:75:ff:24: 65:f4:1e:a8:d5:2e:14:0d:06:c1:28:4a:c7:9a:81: 5e:d1:f1:8d:13:e7:88:38:84:81:11:4e:23:89:a2: 47:b5:c9:76:67:2a:cb:6a:25:75:77:66:36:fd:ed: 85:9f:21:23:ef:9f:47:b5:fd:c3:db:1f:4d:7c:c9: 9c:1f:84:28:fe:f7:3e:50:1f:b7:d9:e4:c8:6c:21: f3:a3:10:c1:fd:79:7a:56:cc:3f:19:d1:68:9c:7e: 1b:66:ca:c5:82:3a:ff:09:6d:d4:67:53:37:86:5a: 84:45:ff:75:c2:a8:aa:71:0e:19:2b:1e:bf:ed:91: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.80.96.0/19 IPv6: 2a01:7480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12750 Signature Algorithm: sha256WithRSAEncryption 87:29:50:fb:0b:d9:72:76:a3:f7:88:59:6f:13:cc:1d:2f:dc: 66:4c:91:32:f8:ef:fc:f2:4f:5f:22:9d:94:19:d6:26:1a:5c: cf:bf:3f:62:48:4e:7d:fa:53:2e:6a:89:62:20:74:cc:db:4e: 22:c4:89:fe:27:5f:ed:44:88:54:1e:c5:25:3b:72:a3:64:d7: 72:e3:33:32:b5:76:e6:8d:59:ad:9c:a7:b4:06:9c:54:53:65: cc:4c:d4:e0:58:4f:6b:a8:e1:ff:c2:b3:0a:2d:ff:79:fa:0d: b1:de:c9:ff:db:ab:62:89:f3:82:da:94:ed:c1:b4:d9:1a:72: cb:b4:72:20:ac:55:42:ee:d2:95:c5:d1:ea:56:f9:50:e8:b9: af:20:ab:92:2c:db:1f:d5:5d:3a:b9:ad:41:4a:8c:a7:32:65: e8:c9:c2:94:0c:4a:de:fa:70:38:7c:35:80:ba:65:4f:4f:5a: 7e:75:36:d6:de:0a:f9:a6:91:fb:a9:1d:e3:d8:67:ef:c9:10: 56:10:d8:9a:93:b4:a9:7b:7e:54:21:9f:98:67:9c:1f:e4:53: 68:ac:1e:0f:c0:8c:dc:41:bb:e5:ef:75:72:01:18:8c:6e:9f: 4c:8c:f6:1d:d5:0c:0a:e7:9a:7e:7d:af:70:83:5f:b8:26:58: 74:24:50:d3 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt4NTdQOSaVieERFMKC4Ru8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM3N2VkOWZhMTFlYzE5OTU1NTU5NzYyZGUwNDdhNWE2ZWIxNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroFlNfi8w2l4CIpzKEUKLqw6eeXP lmyOnewR/Y2f4MSbk8U6ghxwkVPH7BdSJXRcF4Ki5pFPvbL7ZbfF8xylU9C6Y0ab 8JIDRY4BWlcruWEZ5t//7wMJhy8HUFPN2VmCWn3Jelqk/xLezKgxmoP3WDVSprYk Rl7jKdFoew+LVuNJkIJ1/yRl9B6o1S4UDQbBKErHmoFe0fGNE+eIOISBEU4jiaJH tcl2ZyrLaiV1d2Y2/e2FnyEj759Htf3D2x9NfMmcH4Qo/vc+UB+32eTIbCHzoxDB /Xl6Vsw/GdFonH4bZsrFgjr/CW3UZ1M3hlqERf91wqiqcQ4ZKx6/7ZFfawIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFO43ftn6EewZlVVZdi3gR6Wm6xSoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzAyNjg5 Ni1kNzM0LTRiOWEtOWMzMy05ZTcxY2JkNDIxN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMDI2ODk2 LWQ3MzQtNGI5YS05YzMzLTllNzFjYmQ0MjE3Yi8xLzdqZC0yZm9SN0JtVlZWbDJM ZUJIcGFickZLZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1FBgMA0EAgACMAcDBQAqAXSAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjHOMA0GCSqGSIb3DQEBCwUAA4IBAQCHKVD7C9lydqP3 iFlvE8wdL9xmTJEy+O/88k9fIp2UGdYmGlzPvz9iSE59+lMuaoliIHTM204ixIn+ J1/tRIhUHsUlO3KjZNdy4zMytXbmjVmtnKe0BpxUU2XMTNTgWE9rqOH/wrMKLf95 +g2x3sn/26tiifOC2pTtwbTZGnLLtHIgrFVC7tKVxdHqVvlQ6LmvIKuSLNsf1V06 ua1BSoynMmXoycKUDEre+nA4fDWAumVPT1p+dTbW3gr5ppH7qR3j2GfvyRBWENia k7Spe35UIZ+YZ5wf5FNorB4PwIzcQbvl73VyARiMbp9MjPYd1QwK55p+fa9wg1+4 Jlh0JFDT -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:37 2026 by rpki-client