This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.cer (raw, json) Hash identifier: N9MU7/R7ZD0+LQXx7fNSEEPNw2OdY9wETqx8cBLLyHk= Subject key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4AE08D60D87B200BEE84113F892C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47876 IP: 91.208.150.0/24 IP: 91.209.155.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ae:08:d6:0d:87:b2:00:be:e8:41:13:f8:92:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb5852780142e413f9f15b24d59913311a10ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:30:94:2a:67:ea:3e:64:0d:c4:1f:98:27: 3f:22:68:33:63:bd:00:1e:7a:4d:7c:1f:8f:dd:c4: 3e:75:59:79:9b:6d:cf:37:cc:c3:e3:ba:44:c6:0d: f0:27:6c:78:16:23:c3:f5:8a:e6:1f:5d:9b:83:a9: 88:c3:4d:35:00:60:d7:b8:80:fe:f3:1b:9b:b0:53: 17:24:64:e2:17:e0:37:f4:3a:ff:83:6b:15:3b:ec: d6:04:de:5b:48:b4:83:c4:a8:95:24:b2:bc:10:1a: ab:26:08:b4:b3:a7:0f:69:56:6e:cc:2d:79:68:cc: 66:b7:8a:ea:a3:f7:33:7d:c0:15:ab:13:df:8c:08: 48:8c:47:94:e0:16:2e:b8:d1:d3:c2:8b:d9:63:bc: 77:94:ab:3d:98:20:0f:c4:09:db:08:b3:44:ff:8b: cb:85:64:fa:7e:71:77:40:66:6f:04:46:82:b9:53: 9c:f0:93:41:27:ea:20:4b:58:ad:0f:58:73:81:d6: cb:1d:ef:d3:b2:17:4f:90:b1:4f:b5:af:96:6f:fd: eb:d7:e4:f2:50:9b:f2:9e:6a:05:37:1f:d2:2b:ee: 6a:3d:3c:01:df:40:7b:ee:24:da:44:45:e7:6c:19: 4e:51:41:9c:ea:5e:59:f9:a4:1d:72:48:23:94:41: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.150.0/24 91.209.155.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47876 Signature Algorithm: sha256WithRSAEncryption af:ea:e5:80:d4:89:51:b9:9f:65:ba:ef:27:4f:aa:b9:5f:4e: d2:9c:43:cb:8a:9a:89:5e:65:7d:1e:1c:b7:f3:c4:e8:db:3c: 11:1f:25:27:27:88:b7:e3:c6:b7:1c:18:ed:cf:b7:38:ee:a7: f2:7a:15:5c:07:f9:77:27:30:91:d1:c2:39:27:ae:42:8a:b9: 5b:21:fd:1a:72:e3:f6:90:6a:98:74:2b:6f:d4:ec:41:dc:4b: ed:cf:53:ae:71:44:d8:b2:b8:12:95:a8:7e:cc:a4:44:03:f4: 1c:c5:88:15:75:5f:75:cb:bd:01:0e:ae:e8:c7:55:20:e2:0b: 9f:fa:ed:e0:4f:e4:af:4d:3d:72:bb:9b:36:62:19:33:8b:d3: 9c:d4:74:d3:18:ab:a1:b7:62:43:9e:1c:1b:47:d5:44:6f:ce: 7d:31:09:0c:7f:4c:ff:ca:37:98:88:ff:ef:ed:5a:58:6c:e7: 1d:a0:04:78:1f:48:46:3f:c6:ba:44:ce:ba:4c:8e:0c:62:68: b3:2f:54:59:14:41:c6:49:8e:8f:c3:8c:65:44:35:99:eb:56: 9a:3b:cf:90:c1:14:d2:2d:95:2b:81:db:3f:3c:0e:9a:28:9c: 2d:f6:9f:37:12:ab:8f:50:96:74:0b:c2:44:45:80:2c:6a:ca: 52:6f:0d:e3 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+pK4I1g2HsgC+6EET+JLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmI1ODUyNzgwMTQyZTQxM2Y5ZjE1YjI0ZDU5OTEzMzExYTEwZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNkwlCpn6j5kDcQfmCc/ImgzY70A HnpNfB+P3cQ+dVl5m23PN8zD47pExg3wJ2x4FiPD9YrmH12bg6mIw001AGDXuID+ 8xubsFMXJGTiF+A39Dr/g2sVO+zWBN5bSLSDxKiVJLK8EBqrJgi0s6cPaVZuzC15 aMxmt4rqo/czfcAVqxPfjAhIjEeU4BYuuNHTwovZY7x3lKs9mCAPxAnbCLNE/4vL hWT6fnF3QGZvBEaCuVOc8JNBJ+ogS1itD1hzgdbLHe/TshdPkLFPta+Wb/3r1+Ty UJvynmoFNx/SK+5qPTwB30B77iTaREXnbBlOUUGc6l5Z+aQdckgjlEHXHQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFP+1hSeAFC5BP58Vsk1ZkTMRoQ7CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzY0YjZi NC03Y2UyLTRjOGItODU4NS1lZDA5MmRiYzcyYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNjRiNmI0 LTdjZTItNGM4Yi04NTg1LWVkMDkyZGJjNzJiMy8xL183V0ZKNEFVTGtFX254V3lU Vm1STXhHaERzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9CWAwQAW9GbMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC7BDANBgkqhkiG9w0BAQsFAAOCAQEAr+rlgNSJUbmfZbrvJ0+quV9O 0pxDy4qaiV5lfR4ct/PE6Ns8ER8lJyeIt+PGtxwY7c+3OO6n8noVXAf5dycwkdHC OSeuQoq5WyH9GnLj9pBqmHQrb9TsQdxL7c9TrnFE2LK4EpWofsykRAP0HMWIFXVf dcu9AQ6u6MdVIOILn/rt4E/kr009crubNmIZM4vTnNR00xirobdiQ54cG0fVRG/O fTEJDH9M/8o3mIj/7+1aWGznHaAEeB9IRj/GukTOukyODGJosy9UWRRBxkmOj8OM ZUQ1metWmjvPkMEU0i2VK4HbPzwOmiicLfafNxKrj1CWdAvCREWALGrKUm8N4w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:03 2026 by rpki-client