This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.cer (raw, json) Hash identifier: 831hEESFEbwmdAnntazZrCRUEk6zKIp+TY0/BMeAnDU= Subject key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129CDB276CE2DB8058E2C350CA54B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213417 IP: 37.58.28.0/24 IP: 45.10.56.0/24 IP: 2a14:ff00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9c:db:27:6c:e2:db:80:58:e2:c3:50:ca:54:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:fb:90:74:d3:8d:20:e9:91:d3:99:51:c5: b2:63:4c:72:30:9e:aa:25:68:b7:d7:18:ae:9e:15: b0:90:e3:3e:0e:ed:6f:61:ef:5e:2f:f2:6d:45:c3: b7:44:95:ed:05:c9:1b:70:f2:44:d0:d8:99:0e:d4: db:a5:2a:fc:dd:4e:bf:f0:09:de:b7:af:05:22:fd: 57:d3:e5:ed:c6:31:18:f1:e8:df:9c:0f:33:2f:bb: 4a:e5:f5:de:e8:35:02:87:b1:dc:dd:6d:33:da:7b: 20:6d:3b:bc:18:f3:5c:82:36:49:35:d8:76:d2:f6: 1d:6d:98:7f:a8:18:39:a7:71:2f:9e:8b:ef:be:67: cc:f1:da:07:33:48:fd:dd:99:fb:e7:46:25:72:a0: 16:54:80:5c:88:f2:95:8b:34:42:ee:c7:a8:87:f9: 4c:65:aa:1b:22:ec:ca:92:d3:ff:b7:b4:6f:82:93: 05:29:ca:a2:ed:fa:a0:82:c1:be:3a:27:0e:86:f0: 0f:a4:c1:40:f5:92:91:f3:0e:b8:48:2a:e7:12:94: bd:f0:59:80:fe:b2:ea:c6:43:b5:1e:d0:33:71:49: d8:67:35:c3:0d:5a:cf:ed:97:bf:4b:8c:ae:d3:6f: e3:f4:06:b8:52:44:a1:11:fe:02:9e:47:3a:5e:63: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.58.28.0/24 45.10.56.0/24 IPv6: 2a14:ff00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213417 Signature Algorithm: sha256WithRSAEncryption b1:5f:71:7b:e5:6c:3c:98:18:e8:80:8f:1c:07:aa:8f:e7:e7: 60:51:89:42:71:e8:a4:11:9a:df:03:75:d7:68:a6:ae:d6:9b: 73:e7:6e:52:85:89:6c:6f:98:80:13:82:68:9e:97:03:74:be: ee:bd:e5:1d:b6:e9:f3:74:dc:b5:01:9f:96:f3:9b:d8:04:1c: 4d:66:de:c7:0a:f2:0d:2d:d8:12:57:cc:47:8d:64:d7:38:47: 70:77:f0:44:0b:45:f1:b9:52:b4:3a:bc:9e:c4:29:9a:cb:5e: 4e:ce:7c:54:42:11:9d:d9:aa:87:48:72:9d:05:51:8c:ac:03: cb:92:64:8c:ad:af:0f:41:e0:00:8b:19:d8:b7:30:8b:e2:e5: c1:ef:11:17:fa:9e:eb:66:f5:64:11:fa:21:bd:17:82:ca:ff: 32:3f:7d:67:61:34:ad:b8:02:72:e1:f0:1e:c9:1d:d7:e1:7c: af:b9:e0:a6:23:b8:c8:df:d3:c1:ea:4f:34:79:9e:b2:1f:6a: 72:71:71:54:2f:84:ae:c8:ae:4c:bf:f6:1b:30:2e:81:1d:de: 48:56:e5:1c:a3:d1:c9:13:11:68:ee:96:48:44:f7:6a:5d:73: c5:2f:49:f2:a9:2f:8c:2b:72:38:bb:71:b3:cc:5d:5d:4e:33: 4b:66:6e:25 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EpzbJ2zi24BY4sNQylSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTljY2QzOGE1ZDY0OTY4ODBiYzA5NDcwNmU2OGZhMDRmYTJjZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhb7kHTTjSDpkdOZUcWyY0xyMJ6q JWi31xiunhWwkOM+Du1vYe9eL/JtRcO3RJXtBckbcPJE0NiZDtTbpSr83U6/8Ane t68FIv1X0+XtxjEY8ejfnA8zL7tK5fXe6DUCh7Hc3W0z2nsgbTu8GPNcgjZJNdh2 0vYdbZh/qBg5p3EvnovvvmfM8doHM0j93Zn750YlcqAWVIBciPKVizRC7seoh/lM ZaobIuzKktP/t7RvgpMFKcqi7fqggsG+OicOhvAPpMFA9ZKR8w64SCrnEpS98FmA /rLqxkO1HtAzcUnYZzXDDVrP7Ze/S4yu02/j9Aa4UkShEf4Cnkc6XmMLkwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFO6czTil1klogLwJRwbmj6BPos2WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzE1Zjk1 Yy1iMGI2LTQ1MjItOGVhMC01NWJlYWZhNGJiMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMTVmOTVj LWIwYjYtNDUyMi04ZWEwLTU1YmVhZmE0YmIyOS8xLzdwek5PS1hXU1dpQXZBbEhC dWFQb0UtaXpaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJTocAwQALQo4MA0EAgACMAcDBQMqFP8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBqTANBgkqhkiG9w0BAQsFAAOCAQEAsV9x e+VsPJgY6ICPHAeqj+fnYFGJQnHopBGa3wN112imrtabc+duUoWJbG+YgBOCaJ6X A3S+7r3lHbbp83TctQGflvOb2AQcTWbexwryDS3YElfMR41k1zhHcHfwRAtF8blS tDq8nsQpmsteTs58VEIRndmqh0hynQVRjKwDy5JkjK2vD0HgAIsZ2Lcwi+Llwe8R F/qe62b1ZBH6Ib0Xgsr/Mj99Z2E0rbgCcuHwHskd1+F8r7ngpiO4yN/TwepPNHme sh9qcnFxVC+ErsiuTL/2GzAugR3eSFblHKPRyRMRaO6WSET3al1zxS9J8qkvjCty OLtxs8xdXU4zS2ZuJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:49 2026 by rpki-client