This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer File: 7kmddBz3poj_wsl2gT23xR68R0k.cer (raw, json) Hash identifier: McbFt4aIBg7s+i10H3GzpCEJdH8ta0gIMXNdxK5U0tY= Subject key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBD5F37C5420F1B9D04378ABCEE03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.87.104.0/22 IP: 193.9.60.0/22 IP: 194.1.236.0/22 IP: 2001:67c:1688::/48 IP: 2a05:5940::/29 IP: 2a0e:fa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bd:5f:37:c5:42:0f:1b:9d:04:37:8a:bc:ee:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:87:9f:ef:3f:c9:8c:e5:ab:9f:ce:a3:55: b6:15:1b:84:2d:1b:55:fd:00:57:6d:40:57:8d:7f: 93:fb:8a:93:11:91:e1:b8:1b:da:82:17:9d:cc:36: 3a:e6:b0:04:a0:f6:8b:69:5d:08:78:a4:d6:91:a4: d5:7d:b5:c2:67:59:1e:9b:e6:ee:b5:6f:96:3e:32: ea:b7:ce:b7:30:06:f7:84:6e:c8:46:00:ca:fa:f1: 5d:eb:d4:f6:93:6c:3a:a7:2b:ac:cd:08:a0:33:5c: bb:f6:da:fe:de:3b:8b:27:72:bf:55:59:80:3f:86: 98:89:6d:a0:62:6a:a8:52:f0:90:4b:72:75:35:db: 6f:6d:51:4b:98:9a:d0:91:bf:c3:76:5e:b3:a4:e9: 0b:10:5e:62:13:59:b8:35:62:82:7c:b4:b4:57:38: be:d7:c0:5f:b0:c5:30:eb:8f:42:a0:52:17:a9:6a: 89:b8:b1:c4:6c:0b:78:c9:02:f3:59:a6:57:94:8d: ef:e6:99:84:72:11:f3:4b:33:d8:ec:60:fe:7a:b1: 96:36:be:e5:b1:00:a9:a2:a3:c6:c2:ae:d8:ca:88: 07:13:23:ab:d4:b4:91:17:77:6b:63:4f:83:4e:66: 5d:dd:2e:2e:b4:4e:5a:e8:93:27:d3:f8:02:f9:42: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.104.0/22 193.9.60.0/22 194.1.236.0/22 IPv6: 2001:67c:1688::/48 2a05:5940::/29 2a0e:fa80::/29 Signature Algorithm: sha256WithRSAEncryption b0:17:8f:cc:2e:53:f2:b1:43:04:ce:04:6d:db:de:67:bf:9f: d1:47:1e:0c:df:77:a7:16:c7:c1:17:79:cf:a9:a9:6e:25:0d: 16:c1:e4:cf:fd:9b:5b:16:76:75:1d:bc:27:18:c8:d4:62:2d: f4:3a:92:f6:6c:94:16:6f:7b:3f:78:99:9a:f3:a9:88:8d:da: 94:95:4a:ed:31:0e:01:4d:85:23:57:98:78:9f:b9:1c:c6:c5: 17:46:42:12:ff:dc:07:53:75:71:b4:6a:21:60:75:d9:03:ef: d5:1d:3f:34:74:ad:e2:ea:41:00:66:50:d3:c4:5a:3a:3d:7c: 25:4a:56:61:5a:f0:29:a1:04:2f:f1:29:47:e0:b2:54:9c:db: f7:44:b7:88:b3:d5:03:94:c4:fa:78:99:06:06:71:72:75:1d: bd:ae:f2:75:0a:23:bf:82:16:15:f4:d8:51:55:78:22:61:34: 42:69:0e:e7:e8:42:6d:43:cb:a7:eb:9e:1d:f7:2a:33:8a:c1: e7:69:12:6b:f6:d8:46:5e:31:e3:2d:34:15:0a:55:c0:59:e3: 67:eb:70:51:22:70:7d:56:ff:db:c9:ef:44:da:95:ef:c4:0c: ee:55:4a:48:b4:ff:79:55:bd:e7:70:65:63:c6:a4:1f:30:a6: 3a:f7:7c:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57L1fN8VCDxudBDeKvO4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTQ5OWQ3NDFjZjdhNjg4ZmZjMmM5NzY4MTNkYjdjNTFlYmM0NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqruHn+8/yYzlq5/Oo1W2FRuELRtV /QBXbUBXjX+T+4qTEZHhuBvaghedzDY65rAEoPaLaV0IeKTWkaTVfbXCZ1kem+bu tW+WPjLqt863MAb3hG7IRgDK+vFd69T2k2w6pyuszQigM1y79tr+3juLJ3K/VVmA P4aYiW2gYmqoUvCQS3J1NdtvbVFLmJrQkb/Ddl6zpOkLEF5iE1m4NWKCfLS0Vzi+ 18BfsMUw649CoFIXqWqJuLHEbAt4yQLzWaZXlI3v5pmEchHzSzPY7GD+erGWNr7l sQCpoqPGwq7YyogHEyOr1LSRF3drY0+DTmZd3S4utE5a6JMn0/gC+UId/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO5JnXQc96aI/8LJdoE9t8UevEdJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzUxNjQx Mi01ZjVhLTRiMzgtODJiNy1hNjczMmRjZDEzOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvNTE2NDEy LTVmNWEtNGIzOC04MmI3LWE2NzMyZGNkMTM5OC8xLzdrbWRkQnozcG9qX3dzbDJn VDIzeFI2OFIway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF BwEHAQH/BDswOTAYBAIAATASAwQCLVdoAwQCwQk8AwQCwgHsMB0EAgACMBcDBwAg AQZ8FogDBQMqBVlAAwUDKg76gDANBgkqhkiG9w0BAQsFAAOCAQEAsBePzC5T8rFD BM4EbdveZ7+f0UceDN93pxbHwRd5z6mpbiUNFsHkz/2bWxZ2dR28JxjI1GIt9DqS 9myUFm97P3iZmvOpiI3alJVK7TEOAU2FI1eYeJ+5HMbFF0ZCEv/cB1N1cbRqIWB1 2QPv1R0/NHSt4upBAGZQ08RaOj18JUpWYVrwKaEEL/EpR+CyVJzb90S3iLPVA5TE +niZBgZxcnUdva7ydQojv4IWFfTYUVV4ImE0QmkO5+hCbUPLp+ueHfcqM4rB52kS a/bYRl4x4y00FQpVwFnjZ+twUSJwfVb/28nvRNqV78QM7lVKSLT/eVW953BlY8ak HzCmOvd8kw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:01 2026 by rpki-client