This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer File: F7i-tVXa-oLD1qozaQmuWt41qD0.cer (raw, json) Hash identifier: Z/eXlUpcZDZ/UCXNXXTbXRVHT/AYzZcmwTYYcSfJcF8= Subject key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA742C0DC53D97EB0F5E1A09E267C9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199250 AS: 204864 AS: 205604 IP: 91.200.68.0/22 IP: 185.21.36.0/22 IP: 185.212.64.0/22 IP: 2a00:53a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:42:c0:dc:53:d9:7e:b0:f5:e1:a0:9e:26:7c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:24:72:e6:4a:1d:40:05:14:d6:83:1d:d7: 7b:fb:b6:d0:9e:d1:90:13:1a:b7:ca:36:48:bb:ec: 30:1d:ce:83:ca:ff:9b:d6:7a:9f:62:98:cd:f7:3a: 20:d1:78:07:84:55:44:ad:ef:1f:c6:12:db:8e:4e: ab:0c:a9:2e:be:99:e3:10:28:fc:51:ed:e4:4e:88: 26:47:a1:e9:e8:02:73:5c:24:f2:ce:3f:6e:7d:d1: 44:5a:38:47:0c:d0:a6:c7:3d:5e:07:9c:49:37:2c: 78:3e:ac:03:4f:f7:14:aa:5a:4d:31:be:56:a1:e5: 48:48:5f:a2:c3:3c:1a:50:9c:eb:84:08:50:c3:46: fa:e7:77:64:d0:93:62:eb:56:93:17:1b:56:4a:3d: 85:68:b0:62:7e:a8:b9:3e:85:d0:df:90:5b:85:55: bc:ba:54:a4:c4:16:17:e5:9b:53:68:9c:51:d3:e3: 40:5b:80:35:d7:10:50:8a:91:2e:e4:2b:8d:cb:6d: b5:2e:78:12:fb:b8:2e:3d:71:6a:0a:e8:86:66:62: 43:7b:79:49:60:cd:82:c2:25:53:2c:15:f6:2e:3b: bc:e3:e6:7d:91:40:ff:d7:6f:9f:0e:e4:fd:3a:d8: ac:2d:21:c8:4c:64:3c:9e:50:2b:0b:04:86:c3:a5: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.68.0/22 185.21.36.0/22 185.212.64.0/22 IPv6: 2a00:53a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199250 204864 205604 Signature Algorithm: sha256WithRSAEncryption 43:94:6f:1c:d6:67:15:a0:0c:46:76:75:de:0a:e3:fe:98:13: da:20:82:0a:1c:6e:16:b4:82:77:a7:a4:6a:20:a6:19:65:90: 01:46:ea:5f:81:b4:b8:2b:fd:66:21:a0:a7:8f:4e:bb:fb:e2: ee:94:b0:89:59:23:25:d6:e2:1d:6c:b0:70:94:b6:bb:c8:ab: 2e:25:9f:3a:05:34:54:61:77:50:94:c1:4b:02:2c:52:c9:48: e2:83:eb:64:33:6e:e8:4e:76:74:41:52:c2:af:12:c1:6b:d2: a5:fa:c1:9e:b9:c5:dc:c6:01:62:ab:b2:3b:a2:4b:c7:8c:35: fb:bb:fc:4c:9a:06:b2:a2:83:59:61:23:33:a9:b9:08:a6:69: f9:06:7d:67:f4:c1:1a:dc:06:b7:f8:a5:50:e9:4a:23:89:d9: 2b:1e:78:b1:16:e7:9b:b3:b3:49:44:2d:1b:fa:fc:30:19:c0: a2:7d:29:e5:64:98:89:88:ec:83:53:5d:d7:b1:96:f3:e3:ea: 5e:75:0b:a4:e8:50:c5:31:e6:f5:a0:a8:06:25:88:5d:7d:27: 09:a5:78:38:e3:84:f8:2b:16:63:e2:98:9c:2f:c9:79:6e:aa: 73:e1:ba:d9:1b:03:9f:92:a6:64:4f:b9:81:7c:07:2c:4a:7b: 4d:d7:3a:fa -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt+p0LA3FPZfrD14aCeJnydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2I4YmViNTU1ZGFmYTgyYzNkNmFhMzM2OTA5YWU1YWRlMzVhODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF0kcuZKHUAFFNaDHdd7+7bQntGQ Exq3yjZIu+wwHc6Dyv+b1nqfYpjN9zog0XgHhFVEre8fxhLbjk6rDKkuvpnjECj8 Ue3kTogmR6Hp6AJzXCTyzj9ufdFEWjhHDNCmxz1eB5xJNyx4PqwDT/cUqlpNMb5W oeVISF+iwzwaUJzrhAhQw0b653dk0JNi61aTFxtWSj2FaLBifqi5PoXQ35BbhVW8 ulSkxBYX5ZtTaJxR0+NAW4A11xBQipEu5CuNy221LngS+7guPXFqCuiGZmJDe3lJ YM2CwiVTLBX2Lju84+Z9kUD/12+fDuT9OtisLSHITGQ8nlArCwSGw6VsvwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFBe4vrVV2vqCw9aqM2kJrlreNag9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzUxNTE5 Yy0xZTkzLTQ0YTktYWM3MC03ZTI0MjY3NGRlZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNTE1MTlj LTFlOTMtNDRhOS1hYzcwLTdlMjQyNjc0ZGVmYy8xL0Y3aS10VlhhLW9MRDFxb3ph UW11V3Q0MXFEMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW8hEAwQCuRUkAwQCudRAMA0EAgACMAcDBQAq AFOgMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMKUgIDAyBAAgMDIyQwDQYJKoZI hvcNAQELBQADggEBAEOUbxzWZxWgDEZ2dd4K4/6YE9ogggocbha0gnenpGogphll kAFG6l+BtLgr/WYhoKePTrv74u6UsIlZIyXW4h1ssHCUtrvIqy4lnzoFNFRhd1CU wUsCLFLJSOKD62QzbuhOdnRBUsKvEsFr0qX6wZ65xdzGAWKrsjuiS8eMNfu7/Eya BrKig1lhIzOpuQimafkGfWf0wRrcBrf4pVDpSiOJ2SseeLEW55uzs0lELRv6/DAZ wKJ9KeVkmImI7INTXdexlvPj6l51C6ToUMUx5vWgqAYliF19JwmleDjjhPgrFmPi mJwvyXluqnPhutkbA5+SpmRPuYF8ByxKe03XOvo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:37 2026 by rpki-client