This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer File: 7lOyfPFdNQRZRzp5DbXbdv60CkM.cer (raw, json) Hash identifier: 761q5ckT466xSUyOljISppJ88xBmRNyEz8mn5HUJoJk= Subject key identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0F1A77D5DAE4DE7E924148EAEF6C1692 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:31:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203138 IP: 2001:678:116c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:1a:77:d5:da:e4:de:7e:92:41:48:ea:ef:6c:16:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 30 13:31:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee53b27cf15d350459473a790db5db76feb40a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:c5:94:b6:50:ef:8c:47:41:a6:bd:98:ea: c7:a8:aa:b4:69:6e:f0:02:76:05:b5:b1:1f:68:2a: 59:50:0b:a2:5e:6f:ca:59:61:3d:32:38:58:0a:cb: 22:84:ee:c1:05:74:ad:b0:b5:6e:9b:22:e9:08:55: bb:f9:08:69:6f:88:e6:92:35:2e:fe:75:57:85:b2: eb:ac:68:7f:91:04:74:5a:fc:18:dc:21:44:33:14: 0e:06:63:1b:45:b0:64:14:ef:b4:6c:22:8d:0a:11: 57:83:02:9e:76:8d:d5:35:9d:8d:c1:e5:c6:8f:3e: ea:81:ca:ec:5f:c5:d7:d0:3c:08:17:16:05:05:58: c5:f5:6f:d3:ff:83:cb:37:20:8c:80:da:23:6d:68: e0:05:41:42:f1:c3:f5:0a:f7:94:b7:b3:c5:ac:8f: 5d:30:4a:57:d2:ac:63:be:7c:c5:53:da:c3:04:6c: 62:44:fa:d4:03:9a:42:75:4a:66:10:98:df:06:68: 31:18:d5:48:ff:74:07:8c:fc:d3:1c:69:9b:a9:f5: 96:34:e7:86:e1:91:b5:d2:14:6d:5d:83:e1:88:ef: 3a:2e:9f:f5:ce:22:13:da:ac:b1:d0:63:04:d2:50: 18:f8:aa:c9:c1:8b:68:35:7b:3d:36:94:12:84:36: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:116c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203138 Signature Algorithm: sha256WithRSAEncryption 35:8e:9f:2d:49:00:e4:82:ad:21:23:bd:c8:65:0b:7c:56:9a: ac:48:b8:75:ae:45:2d:e6:bc:01:39:20:f7:1a:33:92:7b:32: 3f:9a:b4:8e:ff:b2:d0:3a:5b:99:be:2f:61:4c:01:56:2a:0c: 2e:5d:70:b8:bf:ad:a7:31:2c:36:18:b2:f0:58:e8:e7:31:fd: cb:2e:8a:2f:93:01:d3:71:ce:a2:17:46:ca:50:71:43:23:f5: 66:ab:21:ae:8a:e0:41:c4:95:20:43:13:14:09:58:60:03:7b: 04:ce:07:d2:82:e0:6c:7b:92:4d:07:af:a2:00:71:b8:74:b5: ee:c9:dc:e3:e7:d2:5e:aa:eb:51:7b:76:c0:cf:ad:19:c8:ee: 02:41:d4:c2:db:be:23:44:82:b0:43:59:b9:0d:f8:60:58:27: 77:0c:c0:ba:6e:ce:56:38:d5:5b:48:0c:84:9b:f1:67:4f:8b: 3a:fb:df:96:98:0a:74:a5:a2:59:6a:4b:67:49:df:76:4f:ed: 6f:d9:53:1f:1e:2b:14:6c:e0:0f:c7:d3:10:96:28:1a:8a:0f: 21:e6:fc:5d:df:f0:2c:33:2d:89:59:3e:ed:f2:db:22:9c:4b: d4:03:1b:86:e8:38:aa:fc:52:d9:40:33:20:a2:b1:c0:84:e1: 97:9d:92:ef -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZwPGnfV2uTefpJBSOrvbBaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTMwMTMzMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTUzYjI3Y2YxNWQzNTA0NTk0NzNhNzkwZGI1ZGI3NmZlYjQwYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVnFlLZQ74xHQaa9mOrHqKq0aW7w AnYFtbEfaCpZUAuiXm/KWWE9MjhYCssihO7BBXStsLVumyLpCFW7+Qhpb4jmkjUu /nVXhbLrrGh/kQR0WvwY3CFEMxQOBmMbRbBkFO+0bCKNChFXgwKedo3VNZ2NweXG jz7qgcrsX8XX0DwIFxYFBVjF9W/T/4PLNyCMgNojbWjgBUFC8cP1CveUt7PFrI9d MEpX0qxjvnzFU9rDBGxiRPrUA5pCdUpmEJjfBmgxGNVI/3QHjPzTHGmbqfWWNOeG 4ZG10hRtXYPhiO86Lp/1ziIT2qyx0GME0lAY+KrJwYtoNXs9NpQShDYJjQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFO5TsnzxXTUEWUc6eQ2123b+tApDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzE1ZDg5 ZC1iOWQxLTQwMzQtYjg4Yy00NDI1NmY3ZjJjZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMTVkODlk LWI5ZDEtNDAzNC1iODhjLTQ0MjU2ZjdmMmNlNi8xLzdsT3lmUEZkTlFSWlJ6cDVE YlhiZHY2MENrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMZgjANBgkqhkiG9w0BAQsFAAOCAQEANY6fLUkA5IKtISO9yGULfFaarEi4 da5FLea8ATkg9xozknsyP5q0jv+y0Dpbmb4vYUwBVioMLl1wuL+tpzEsNhiy8Fjo 5zH9yy6KL5MB03HOohdGylBxQyP1ZqshrorgQcSVIEMTFAlYYAN7BM4H0oLgbHuS TQevogBxuHS17snc4+fSXqrrUXt2wM+tGcjuAkHUwtu+I0SCsENZuQ34YFgndwzA um7OVjjVW0gMhJvxZ0+LOvvflpgKdKWiWWpLZ0nfdk/tb9lTHx4rFGzgD8fTEJYo GooPIeb8Xd/wLDMtiVk+7fLbIpxL1AMbhug4qvxS2UAzIKKxwIThl52S7w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:41 2026 by rpki-client