This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.cer (raw, json) Hash identifier: Ke423U4g8wsZISrgWikRS71mgqHptnZGxA9k4h0Ev8A= Subject key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83ECDEEDD1D78AE4D7A17B45168343 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58107 IP: 91.209.9.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ec:de:ed:d1:d7:8a:e4:d7:a1:7b:45:16:83:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:4a:8b:e8:83:2a:91:42:7c:14:e4:35:06: a6:77:e8:25:66:11:88:c3:b6:fd:74:0d:3f:11:a7: 13:b5:e3:e1:f6:f1:e4:0e:5f:ed:cf:06:94:51:fc: f3:f3:66:00:85:9f:cf:b5:ae:34:d0:83:66:0c:47: 3c:d9:21:24:3a:de:ac:36:0d:99:01:fd:d4:93:10: ce:16:ba:2a:db:88:29:9e:47:51:6c:43:2d:93:c3: 5c:fe:81:a0:8e:a1:b2:5d:f4:33:a2:6a:ad:27:e3: c0:cb:b7:44:f9:2e:e5:02:94:21:c0:4b:a0:57:b8: fb:c4:13:de:b1:4c:5e:f4:44:f1:98:ac:29:0e:0b: 4d:f0:cb:8d:68:70:03:d7:50:a2:7b:bf:8c:6f:90: 73:87:27:52:47:b9:2b:fc:7d:74:58:5e:2b:69:54: 12:52:74:0d:32:ec:df:40:3f:6e:72:c7:31:1b:60: 00:b0:4e:50:e7:35:3b:3d:da:67:a6:81:5c:62:99: 59:6a:8e:4b:0d:07:28:94:10:a7:04:24:87:ca:2c: 12:4e:e9:fa:bd:ca:32:1b:3c:df:f9:f0:3a:7a:a4: 97:ee:be:3a:77:04:80:52:dd:20:ca:4e:d1:a7:8c: 6e:18:8d:87:7f:19:a9:c1:c7:1d:39:34:e9:ff:51: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.9.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58107 Signature Algorithm: sha256WithRSAEncryption a9:d1:06:0b:73:e3:ba:ea:b9:d1:67:51:cd:22:33:8c:08:1d: 44:d7:60:0b:3a:8b:a4:1e:f8:55:d6:d8:a1:0d:ab:40:57:ac: e1:a5:47:63:b4:69:0a:8f:8e:5b:0d:2f:53:00:d5:2e:d6:58: a0:e9:e2:fa:09:9a:a3:7f:e2:8f:29:76:c8:c4:0c:d6:20:ab: 2d:18:7f:63:87:55:be:6e:8e:a5:31:8e:d2:70:0b:ad:7c:1c: 6a:5a:18:db:94:17:72:01:11:ed:77:84:82:9c:84:50:1e:51: bb:16:7f:07:2d:72:0d:95:26:af:ed:95:5e:81:71:3d:d6:e3: c5:c4:96:46:21:99:c1:57:82:03:22:88:c2:77:d8:f6:f2:43: d7:8b:12:e6:66:79:4b:d9:35:ce:64:31:e5:62:3c:f3:4f:70: 23:64:61:6e:cc:49:6f:07:f2:d4:b5:9f:84:b1:d9:d5:48:e1: 43:02:54:50:33:9c:a7:78:8b:e5:a6:4e:6c:4a:e4:ba:e6:cd: 1a:19:6b:c9:b4:9b:21:e2:0d:6b:f7:69:37:e2:c4:57:fc:5b: c2:a6:f1:2b:92:d8:22:09:50:7b:6b:59:ed:ea:10:91:79:47: a2:a4:4f:b9:56:4e:55:12:37:df:73:8a:66:aa:92:38:99:fa: 48:5e:62:b9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/g+ze7dHXiuTXoXtFFoNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjEzZTlhYTI0OWM1OTUwMmMwY2Y4Yjc4NGQ0MzNmYTc1MDIwNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IJKi+iDKpFCfBTkNQamd+glZhGI w7b9dA0/EacTtePh9vHkDl/tzwaUUfzz82YAhZ/Pta400INmDEc82SEkOt6sNg2Z Af3UkxDOFroq24gpnkdRbEMtk8Nc/oGgjqGyXfQzomqtJ+PAy7dE+S7lApQhwEug V7j7xBPesUxe9ETxmKwpDgtN8MuNaHAD11Cie7+Mb5BzhydSR7kr/H10WF4raVQS UnQNMuzfQD9ucscxG2AAsE5Q5zU7PdpnpoFcYplZao5LDQcolBCnBCSHyiwSTun6 vcoyGzzf+fA6eqSX7r46dwSAUt0gyk7Rp4xuGI2HfxmpwccdOTTp/1FNcQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO8T6aoknFlQLAz4t4TUM/p1AgTLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlL2IzYzUy Mi1mNjhiLTRiOTgtYTU4NC01MjFiMjU4N2RkMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvYjNjNTIy LWY2OGItNGI5OC1hNTg0LTUyMWIyNTg3ZGQwYy8xLzd4UHBxaVNjV1ZBc0RQaTNo TlF6LW5VQ0JNcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9EJMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDi+zANBgkqhkiG9w0BAQsFAAOCAQEAqdEGC3Pjuuq50WdRzSIzjAgdRNdgCzqL pB74VdbYoQ2rQFes4aVHY7RpCo+OWw0vUwDVLtZYoOni+gmao3/ijyl2yMQM1iCr LRh/Y4dVvm6OpTGO0nALrXwcaloY25QXcgER7XeEgpyEUB5RuxZ/By1yDZUmr+2V XoFxPdbjxcSWRiGZwVeCAyKIwnfY9vJD14sS5mZ5S9k1zmQx5WI8809wI2RhbsxJ bwfy1LWfhLHZ1UjhQwJUUDOcp3iL5aZObErkuubNGhlrybSbIeINa/dpN+LEV/xb wqbxK5LYIglQe2tZ7eoQkXlHoqRPuVZOVRI333OKZqqSOJn6SF5iuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:51 2026 by rpki-client