This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer File: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer (raw, json) Hash identifier: gw9y0KnWxw/isbfgPJdsLRO1eAVz2Tkov+aD0onx4kQ= Subject key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8EFAA68A3B592AB9484FE9F8977D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39449 IP: 77.95.160.0/21 IP: 88.151.80.0/21 IP: 178.20.80.0/21 IP: 185.52.92.0/22 IP: 2a02:538::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ef:aa:68:a3:b5:92:ab:94:84:fe:9f:89:77:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:42:38:e8:6d:25:04:02:51:60:b1:06:90: de:80:c7:54:cd:75:62:15:f4:ab:e4:d7:5d:4c:8b: b1:f0:51:ed:15:bd:40:bf:47:1f:bd:c0:db:9a:c5: c3:55:e2:2b:6a:a7:95:df:35:12:83:03:40:35:db: 52:6b:49:eb:87:bc:fb:82:8a:a8:bd:cd:1c:69:8b: 04:ac:13:61:c5:15:4a:03:e1:1f:31:ba:fa:7e:99: 96:39:49:00:be:74:44:8e:1e:29:65:b5:9c:f4:d0: 95:5b:50:be:9d:65:a9:de:21:f5:ba:34:a9:91:84: 55:c4:2a:57:ed:eb:ea:0a:76:51:9e:39:73:ba:66: 73:bf:2f:e3:42:b8:c1:b7:02:6e:46:3e:f0:77:53: 9a:a0:3c:72:f4:f1:9b:0c:38:8f:3b:ed:dc:73:fe: 2d:c3:12:cf:04:da:69:33:8d:19:b0:17:02:f7:f7: a9:2d:5f:6d:9a:62:26:7f:83:15:74:3f:73:1b:8d: f4:97:8b:2b:9e:78:88:3f:ad:a8:f7:b9:0d:c6:c4: 38:28:35:9d:8c:1b:3d:9e:1a:10:74:24:be:1e:8d: 4d:3c:bc:6e:4e:10:55:7d:00:b2:06:a0:18:1e:85: ea:94:bc:b9:18:15:57:9b:bd:02:97:a6:2e:93:a8: 25:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.160.0/21 88.151.80.0/21 178.20.80.0/21 185.52.92.0/22 IPv6: 2a02:538::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39449 Signature Algorithm: sha256WithRSAEncryption 99:cc:06:e6:d3:6d:d5:11:93:a3:9d:15:fa:61:73:a1:d3:cf: c9:a2:b2:41:f1:dd:70:f1:5d:72:1e:e5:23:43:6f:1d:1c:0d: 99:5d:f4:a2:b2:57:b4:c8:e5:15:83:42:44:43:11:58:79:ba: 2e:12:9b:5e:dd:71:a4:30:4c:c6:13:a8:3c:c1:08:d3:62:32: 63:d2:21:b4:d0:0b:56:54:d3:16:08:44:ec:9b:6a:1e:7c:2f: 77:c9:a6:11:6d:e7:58:38:74:54:b9:b4:c6:5b:88:13:fa:82: fd:29:66:57:0f:32:67:0e:2c:3b:0f:ee:60:18:19:8e:e9:08: 42:6c:f9:f7:69:61:c4:00:52:2f:69:03:59:03:da:47:08:ab: f1:88:11:e2:86:4d:88:30:53:30:e8:ea:dd:55:91:c1:7b:39: a4:9b:be:20:b5:ec:44:12:ea:de:9c:03:d3:0a:ef:c5:0a:e9: ca:39:d3:6e:37:05:50:6d:6f:e7:2f:f3:75:57:f7:1a:d2:b2: a2:86:35:3c:7c:17:31:52:f9:f0:17:af:aa:10:98:50:c8:5f: 41:81:98:2c:c1:66:f5:a4:39:3c:70:ef:ed:f2:e9:1d:48:44: 82:e1:be:3e:d6:d4:48:a7:5a:a5:89:f3:8c:03:c2:b1:59:ec: fd:ac:39:d5 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt6yO+qaKO1kquUhP6fiXfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWQ3NTVjNTEyNzVhYjIzNDJkOGY2ZmNhNWI1NjYwNmFiOWMzYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldRCOOhtJQQCUWCxBpDegMdUzXVi FfSr5NddTIux8FHtFb1Av0cfvcDbmsXDVeIraqeV3zUSgwNANdtSa0nrh7z7goqo vc0caYsErBNhxRVKA+EfMbr6fpmWOUkAvnREjh4pZbWc9NCVW1C+nWWp3iH1ujSp kYRVxCpX7evqCnZRnjlzumZzvy/jQrjBtwJuRj7wd1OaoDxy9PGbDDiPO+3cc/4t wxLPBNppM40ZsBcC9/epLV9tmmImf4MVdD9zG430l4srnniIP62o97kNxsQ4KDWd jBs9nhoQdCS+Ho1NPLxuThBVfQCyBqAYHoXqlLy5GBVXm70Cl6Yuk6glyQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFO7XVcUSdasjQtj2/KW1ZgarnDtPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzlhNjgz NC1lNzY4LTQwOWItYjhjZS1lYzliNjliNDZjYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvOWE2ODM0 LWU3NjgtNDA5Yi1iOGNlLWVjOWI2OWI0NmNjMC8xLzd0ZFZ4UkoxcXlOQzJQYjhw YlZtQnF1Y08wOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDTV+gAwQDWJdQAwQDshRQAwQCuTRcMA0EAgAC MAcDBQAqAgU4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaGTANBgkqhkiG9w0B AQsFAAOCAQEAmcwG5tNt1RGTo50V+mFzodPPyaKyQfHdcPFdch7lI0NvHRwNmV30 orJXtMjlFYNCREMRWHm6LhKbXt1xpDBMxhOoPMEI02IyY9IhtNALVlTTFghE7Jtq Hnwvd8mmEW3nWDh0VLm0xluIE/qC/SlmVw8yZw4sOw/uYBgZjukIQmz592lhxABS L2kDWQPaRwir8YgR4oZNiDBTMOjq3VWRwXs5pJu+ILXsRBLq3pwD0wrvxQrpyjnT bjcFUG1v5y/zdVf3GtKyooY1PHwXMVL58BevqhCYUMhfQYGYLMFm9aQ5PHDv7fLp HUhEguG+PtbUSKdapYnzjAPCsVns/aw51Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:49 2026 by rpki-client