This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer (raw, json) Hash identifier: K29/jhwufh91P57tcAQp4K8guK8Z6rnYB5dpHmNTO6I= Subject key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5E57FDA872CA04BB9058E99FBA24 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35490 IP: 91.236.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5e:57:fd:a8:72:ca:04:bb:90:58:e9:9f:ba:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eebf5b51999637c80bf93c8a903d16c3aec25341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:54:11:68:a0:68:c4:4d:78:15:99:ac:47: 58:55:61:25:10:75:b9:c2:b1:b3:95:01:93:cb:ba: 1f:a6:58:de:c2:f4:fe:50:47:93:1d:ac:87:40:79: 79:f4:43:dc:48:b8:f5:5c:c7:5f:f8:30:fc:97:89: 80:30:48:26:fe:ec:33:75:3a:68:bb:98:d9:b4:61: c2:dd:e2:44:c1:53:95:c1:b0:84:4a:55:08:be:ff: a1:8c:48:81:12:a5:f1:ac:71:56:47:10:48:31:ec: 08:d5:44:ee:22:f7:2b:88:43:e4:c2:57:6e:0e:40: fa:fc:f2:c4:64:61:45:40:35:da:ef:81:91:60:87: f4:6f:89:49:2c:15:1e:a8:8a:bd:62:42:d0:9d:ad: 8b:9f:77:88:a4:a8:59:b3:09:37:d4:b3:b7:f0:e5: af:07:9f:f5:ed:a8:2e:8b:47:8b:82:a3:e4:a0:bb: 14:86:20:11:73:eb:b7:ce:c5:67:b3:18:d4:c1:bd: 17:32:76:58:5d:46:19:49:97:5a:72:1d:95:27:5f: cf:dd:a4:d3:ea:4c:16:d2:3c:89:13:be:ea:de:42: b7:8e:7f:05:d8:f4:a8:f6:b7:07:6b:f5:68:34:2f: cb:24:13:62:1c:fa:07:d2:fa:04:1a:94:3d:d1:fd: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35490 Signature Algorithm: sha256WithRSAEncryption a6:79:45:ad:33:54:2c:97:da:86:3b:03:61:02:cf:d7:a4:b5: 9b:ee:41:ee:bb:e5:34:67:13:44:b4:2a:8e:f4:af:79:39:27: 0d:5d:ed:48:6e:c5:ba:cb:3f:df:50:2f:6d:3e:97:19:fe:d7: dc:60:0e:36:54:e8:d3:1b:9a:f4:c9:45:65:2b:a5:ba:0d:63: e5:37:0c:e2:1a:45:f4:8f:6f:ca:14:d6:b8:6a:9a:a5:9a:a6: 27:c9:78:15:5f:8b:71:d9:7f:4d:b2:e0:62:ce:f0:43:b3:aa: 44:5a:0c:55:b8:a9:d4:54:40:9e:7b:4c:da:6b:40:d2:2f:2a: 82:9d:ab:07:2f:09:a7:c6:75:b5:b6:44:1c:0a:45:c5:ab:d0: 6b:51:46:0c:54:11:e5:e6:66:84:d0:86:7d:fc:f8:f4:0b:6f: db:13:35:6a:0d:a2:c1:7d:e6:f5:83:bb:06:19:c6:b9:f7:03: 5c:e2:b8:c5:1d:59:a7:b7:27:95:eb:75:ef:fa:fc:07:20:2c: bd:9c:8c:c8:57:69:e7:b3:29:75:5b:4c:20:4d:5e:cf:c1:c4: 5f:ba:83:79:1b:b5:69:79:44:58:03:f0:88:5c:fa:7d:20:45: c5:85:7d:90:16:00:71:02:1e:e2:ab:4b:89:14:73:03:fd:ea: 14:87:d7:4a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57V5X/ahyygS7kFjpn7okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWJmNWI1MTk5OTYzN2M4MGJmOTNjOGE5MDNkMTZjM2FlYzI1MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUlUEWigaMRNeBWZrEdYVWElEHW5 wrGzlQGTy7ofpljewvT+UEeTHayHQHl59EPcSLj1XMdf+DD8l4mAMEgm/uwzdTpo u5jZtGHC3eJEwVOVwbCESlUIvv+hjEiBEqXxrHFWRxBIMewI1UTuIvcriEPkwldu DkD6/PLEZGFFQDXa74GRYIf0b4lJLBUeqIq9YkLQna2Ln3eIpKhZswk31LO38OWv B5/17agui0eLgqPkoLsUhiARc+u3zsVnsxjUwb0XMnZYXUYZSZdach2VJ1/P3aTT 6kwW0jyJE77q3kK3jn8F2PSo9rcHa/VoNC/LJBNiHPoH0voEGpQ90f0fjQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO6/W1GZljfIC/k8ipA9FsOuwlNBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2Lzc1Nzdm ZC0zYjQ1LTQwNGEtYmZlMC01NDI0ZGM2M2UyYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvNzU3N2Zk LTNiNDUtNDA0YS1iZmUwLTU0MjRkYzYzZTJhYy8xLzdyOWJVWm1XTjhnTC1UeUtr RDBXdzY3Q1UwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+zfMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCKojANBgkqhkiG9w0BAQsFAAOCAQEApnlFrTNULJfahjsDYQLP16S1m+5B7rvl NGcTRLQqjvSveTknDV3tSG7Fuss/31AvbT6XGf7X3GAONlTo0xua9MlFZSulug1j 5TcM4hpF9I9vyhTWuGqapZqmJ8l4FV+Lcdl/TbLgYs7wQ7OqRFoMVbip1FRAnntM 2mtA0i8qgp2rBy8Jp8Z1tbZEHApFxavQa1FGDFQR5eZmhNCGffz49Atv2xM1ag2i wX3m9YO7BhnGufcDXOK4xR1Zp7cnlet17/r8ByAsvZyMyFdp57MpdVtMIE1ez8HE X7qDeRu1aXlEWAPwiFz6fSBFxYV9kBYAcQIe4qtLiRRzA/3qFIfXSg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:57 2026 by rpki-client