This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer File: 987QIfmRTRLUGNmqI4yTgl6l9gU.cer (raw, json) Hash identifier: fdd/3VHkm3IYGLOUEZTHE3EahwSAYzLiSSnvJf7SLQY= Subject key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8087910C04C090970A549C5038E97B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35684 AS: 206727 IP: 93.188.56.0/22 IP: 185.79.44.0/22 IP: 185.117.160.0/22 IP: 185.178.40.0/22 IP: 194.59.192.0/22 IP: 195.137.191.0/24 IP: 2001:678:b68::/48 IP: 2001:67c:18b0::/48 IP: 2a05:7180::/29 IP: 2a06:8500::/29 IP: 2a06:9300::/29 IP: 2a0a:5280::/29 IP: 2a0c:d980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:87:91:0c:04:c0:90:97:0a:54:9c:50:38:e9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7ced021f9914d12d418d9aa238c93825ea5f605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:78:bf:23:59:7d:24:b4:65:12:64:8f:52: e9:8f:8b:cf:c1:75:44:e7:03:c3:91:d1:63:af:f2: 13:f4:f4:0d:0b:c3:7e:e9:e2:7d:16:0f:4f:f7:24: 93:e6:5a:2f:2b:36:f9:d3:af:dd:26:32:f0:81:73: b3:f7:57:60:68:4b:ee:d2:8c:72:13:5b:7c:40:6a: a8:15:ad:91:8c:4e:91:e5:80:15:27:0d:c1:40:c4: 16:47:14:0a:89:14:10:fc:44:78:50:b6:88:d1:ca: a8:a4:83:3c:77:dc:34:a3:7e:3e:95:7d:a8:57:d4: 91:8a:c8:c8:cd:35:90:78:eb:2e:8b:20:69:66:01: b3:bc:8d:c0:4b:de:4e:8e:f4:45:c3:04:fa:05:d0: d1:5d:12:c1:a5:73:df:51:9d:9d:22:82:ab:a6:65: 41:43:34:c5:7d:e7:64:ce:f1:91:9a:5f:46:de:f3: 32:5e:7f:45:fd:79:0b:4d:7c:fc:38:12:cf:31:c4: d1:00:be:a9:a7:6d:6c:55:bc:25:e5:31:b5:ab:bf: 88:1d:a0:da:59:51:2d:2b:25:b9:bc:0e:1a:af:b9: 04:b3:f7:bd:46:79:91:f5:5d:ce:3e:ba:bf:a4:8f: 2d:c4:eb:59:1c:63:8a:cd:d3:45:c0:da:22:d1:73: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.56.0/22 185.79.44.0/22 185.117.160.0/22 185.178.40.0/22 194.59.192.0/22 195.137.191.0/24 IPv6: 2001:678:b68::/48 2001:67c:18b0::/48 2a05:7180::/29 2a06:8500::/29 2a06:9300::/29 2a0a:5280::/29 2a0c:d980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35684 206727 Signature Algorithm: sha256WithRSAEncryption 8c:f1:dd:8a:0b:96:17:56:40:d3:ca:74:62:31:89:e7:66:9d: d6:4c:43:8f:db:52:87:4b:fe:ed:9c:03:ce:ca:6c:fc:b8:e5: 91:35:3a:18:b5:9c:a6:97:1a:84:d3:1b:a0:79:69:44:13:fd: f8:e7:cb:c2:ba:45:25:63:a7:d9:21:52:90:fc:40:59:c4:45: e6:1d:c9:8d:79:54:a5:05:1e:0c:1e:39:e7:78:15:51:b4:5b: 4c:e8:fa:73:29:2c:76:88:77:28:90:6e:61:57:08:6f:92:dd: e3:04:b7:07:7d:e0:38:3f:63:9e:77:d2:99:7c:f8:3c:fc:bd: 33:0e:a5:d6:0a:5d:57:26:96:e9:03:45:ff:0c:0b:02:a7:1f: 42:bc:cf:1d:9d:1e:fb:18:4c:0a:57:cd:c7:e0:04:dd:80:72: 05:a9:4d:14:30:7b:cb:24:4f:9c:7b:29:15:a5:f3:10:97:8e: 34:c1:df:e5:ea:3e:93:09:0c:e5:cb:aa:17:a9:ce:af:53:51: de:3c:87:00:d3:38:07:8a:a2:27:b8:46:ec:3f:2d:39:fd:33: a7:78:6f:b2:40:24:52:11:08:eb:24:07:db:5a:b2:09:3d:fe: e7:c7:3a:07:b6:df:35:b1:72:10:12:b4:25:c0:8e:2b:05:cc: 6a:a7:ee:8b -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAZt8gIeRDATAkJcKVJxQOOl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NlZDAyMWY5OTE0ZDEyZDQxOGQ5YWEyMzhjOTM4MjVlYTVmNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp154vyNZfSS0ZRJkj1Lpj4vPwXVE 5wPDkdFjr/IT9PQNC8N+6eJ9Fg9P9yST5lovKzb506/dJjLwgXOz91dgaEvu0oxy E1t8QGqoFa2RjE6R5YAVJw3BQMQWRxQKiRQQ/ER4ULaI0cqopIM8d9w0o34+lX2o V9SRisjIzTWQeOsuiyBpZgGzvI3AS95OjvRFwwT6BdDRXRLBpXPfUZ2dIoKrpmVB QzTFfedkzvGRml9G3vMyXn9F/XkLTXz8OBLPMcTRAL6pp21sVbwl5TG1q7+IHaDa WVEtKyW5vA4ar7kEs/e9RnmR9V3OPrq/pI8txOtZHGOKzdNFwNoi0XO+UQIDAQAB o4IDADCCAvwwHQYDVR0OBBYEFPfO0CH5kU0S1BjZqiOMk4JepfYFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzc3ODVj My03OTQzLTRiN2ItOTE5NC1jMzg2NjFmYmYyMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNzc4NWMz LTc5NDMtNGI3Yi05MTk0LWMzODY2MWZiZjIyYS8xLzk4N1FJZm1SVFJMVUdObXFJ NHlUZ2w2bDlnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTAqBAIAATAkAwQCXbw4AwQCuU8sAwQCuXWgAwQCubIoAwQCwjvA AwQAw4m/MDsEAgACMDUDBwAgAQZ4C2gDBwAgAQZ8GLADBQMqBXGAAwUDKgaFAAMF AyoGkwADBQMqClKAAwUDKgzZgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAi2QC AwMnhzANBgkqhkiG9w0BAQsFAAOCAQEAjPHdiguWF1ZA08p0YjGJ52ad1kxDj9tS h0v+7ZwDzsps/LjlkTU6GLWcppcahNMboHlpRBP9+OfLwrpFJWOn2SFSkPxAWcRF 5h3JjXlUpQUeDB4553gVUbRbTOj6cyksdoh3KJBuYVcIb5Ld4wS3B33gOD9jnnfS mXz4PPy9Mw6l1gpdVyaW6QNF/wwLAqcfQrzPHZ0e+xhMClfNx+AE3YByBalNFDB7 yyRPnHspFaXzEJeONMHf5eo+kwkM5cuqF6nOr1NR3jyHANM4B4qiJ7hG7D8tOf0z p3hvskAkUhEI6yQH21qyCT3+58c6B7bfNbFyEBK0JcCOKwXMaqfuiw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:57 2026 by rpki-client