This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K7K9EHZusZ3HHUzTtA7dLdvhMgo.cer File: K7K9EHZusZ3HHUzTtA7dLdvhMgo.cer (raw, json) Hash identifier: 0lolFsR99tjsjpNEuEIVN5hJkIx/XUn+MV2hbyWF5Ws= Subject key identifier: 2B:B2:BD:10:76:6E:B1:9D:C7:1D:4C:D3:B4:0E:DD:2D:DB:E1:32:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA9B3AB2CD9758D41D1413B9131F7DFB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/2/2BB2BD10766EB19DC71D4CD3B40EDD2DDBE1320A.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/2/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Sat 10 Jan 2026 20:58:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207885 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:b3:ab:2c:d9:75:8d:41:d1:41:3b:91:31:f7:df:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 10 20:58:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bb2bd10766eb19dc71d4cd3b40edd2ddbe1320a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:1f:70:59:32:4e:e0:bc:91:38:03:0c:ed: 3c:51:37:c0:ff:11:f2:ba:30:0b:a8:64:76:63:02: ce:61:ac:d0:b7:73:8b:db:ef:eb:08:4b:b2:12:81: b3:c6:9e:6a:cd:b3:a4:88:d3:38:71:db:a2:99:d1: 76:f0:ab:bf:1e:79:b9:d7:93:93:36:81:9d:5d:9a: 0a:bd:32:94:b3:d7:a6:f9:29:c1:8d:40:cf:fb:aa: c1:80:95:41:00:e1:76:e4:ca:cf:47:7c:41:40:7e: 81:0a:22:67:39:07:e1:33:24:42:16:b7:8b:06:93: 1b:e2:84:2c:0f:fb:60:42:44:32:f6:c8:de:09:12: e0:fa:6f:8f:80:7d:d1:43:05:18:7a:e4:c3:a2:20: 32:0b:ce:3d:51:b0:74:de:5c:7d:dd:c2:cb:d7:05: 80:07:b4:2b:8b:60:fe:de:7c:fa:cb:35:b7:15:05: 37:09:b9:43:a3:4d:81:d2:f6:4a:28:c5:20:b9:9d: 96:fd:d5:cf:ee:55:b2:cd:10:d1:cd:b9:19:95:53: 38:44:e0:d5:22:b4:46:df:33:91:c1:1b:43:b2:37: 60:d0:81:31:5a:28:a4:cf:50:de:e9:73:c2:18:f0: 02:00:dc:b0:58:80:52:c6:91:74:7e:fc:1c:ce:ec: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B2:BD:10:76:6E:B1:9D:C7:1D:4C:D3:B4:0E:DD:2D:DB:E1:32:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/2/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/2/2BB2BD10766EB19DC71D4CD3B40EDD2DDBE1320A.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207885 Signature Algorithm: sha256WithRSAEncryption 7b:a5:3d:3e:65:e1:7c:58:d8:0b:aa:d9:9c:e0:9f:18:12:7b: ba:cd:4a:52:00:7e:11:f1:ab:3b:42:4a:94:a9:c4:d4:96:48: 9f:34:71:a9:b6:04:68:16:f1:d0:52:00:fa:34:1a:1d:c3:36: d1:ff:06:9d:cc:b7:47:ee:51:1d:ff:37:40:db:d7:aa:83:a9: eb:a0:73:06:b5:78:18:5a:5d:a5:03:d4:e8:af:6c:89:19:f5: 1e:25:cc:f4:01:6a:b9:11:22:7d:e8:5a:46:1a:61:02:76:d5: 26:8f:20:e7:05:62:24:b2:c1:89:82:e8:33:14:71:9d:5a:61: 68:27:79:02:d1:9b:e1:f2:51:2f:05:72:cc:c8:e8:65:bc:ca: 0e:1d:47:6e:63:0b:40:52:5f:4e:63:6c:34:be:4d:37:65:46: bd:36:cc:e5:39:ce:67:cd:c4:34:08:b4:31:10:30:6b:3e:8d: 26:a6:7d:8d:12:29:16:45:44:20:5c:91:8a:3c:fc:a5:b0:c3: ff:c6:dc:86:39:b4:db:2c:6a:94:35:48:15:b3:8f:47:23:bb: 54:37:72:91:a8:7a:33:0c:16:40:f1:ff:5e:11:84:57:ee:31: 42:b0:17:34:28:de:1f:45:e6:4c:a6:46:ce:3e:9f:a7:c2:f5: 7d:29:ff:f7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZups6ss2XWNQdFBO5Ex99+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEwMjA1ODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmIyYmQxMDc2NmViMTlkYzcxZDRjZDNiNDBlZGQyZGRiZTEzMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKsfcFkyTuC8kTgDDO08UTfA/xHy ujALqGR2YwLOYazQt3OL2+/rCEuyEoGzxp5qzbOkiNM4cduimdF28Ku/Hnm515OT NoGdXZoKvTKUs9em+SnBjUDP+6rBgJVBAOF25MrPR3xBQH6BCiJnOQfhMyRCFreL BpMb4oQsD/tgQkQy9sjeCRLg+m+PgH3RQwUYeuTDoiAyC849UbB03lx93cLL1wWA B7Qri2D+3nz6yzW3FQU3CblDo02B0vZKKMUguZ2W/dXP7lWyzRDRzbkZlVM4RODV IrRG3zORwRtDsjdg0IExWiikz1De6XPCGPACANywWIBSxpF0fvwczuzBzwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFCuyvRB2brGdxx1M07QO3S3b4TIKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVkOGY1 N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzIvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81ZDhmNTdj YjgzYTE0NGVkYWM0YjU1YjFhODhiMzRkNi8yLzJCQjJCRDEwNzY2RUIxOURDNzFE NENEM0I0MEVERDJEREJFMTMyMEEubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLA0wDQYJKoZIhvcN AQELBQADggEBAHulPT5l4XxY2Auq2ZzgnxgSe7rNSlIAfhHxqztCSpSpxNSWSJ80 cam2BGgW8dBSAPo0Gh3DNtH/Bp3Mt0fuUR3/N0Db16qDqeugcwa1eBhaXaUD1Oiv bIkZ9R4lzPQBarkRIn3oWkYaYQJ21SaPIOcFYiSywYmC6DMUcZ1aYWgneQLRm+Hy US8FcszI6GW8yg4dR25jC0BSX05jbDS+TTdlRr02zOU5zmfNxDQItDEQMGs+jSam fY0SKRZFRCBckYo8/KWww//G3IY5tNssapQ1SBWzj0cju1Q3cpGoejMMFkDx/14R hFfuMUKwFzQo3h9F5kymRs4+n6fC9X0p//c= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:29 2026 by rpki-client