This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer File: _7ml8yjMMGUnzExHS9xLE6dGoag.cer (raw, json) Hash identifier: I9HNNIt7MxQf8ZTwRcnWfgRcHnJIbO3RXWD6n++KRcI= Subject key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1E702E7A29CB33CCB2EE7D79BAC931DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 12:59:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203636 IP: 2a04:cac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:70:2e:7a:29:cb:33:cc:b2:ee:7d:79:ba:c9:31:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 12:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:b2:31:fa:a6:85:1f:a9:fc:f8:37:df:74: 11:19:e5:19:b6:e3:d2:b7:30:6c:34:16:1a:90:1b: 36:fd:d5:62:53:be:bd:00:83:69:8a:0e:a6:77:6e: 02:8f:a4:f7:74:34:0b:8a:db:12:00:79:66:8c:8c: 1f:e2:6c:19:6d:71:d3:f8:62:78:99:d0:fa:15:c9: 67:7d:0d:f4:d1:25:03:30:a5:8f:68:ae:2f:8c:0a: 29:d9:ae:75:47:d1:56:e3:02:df:40:13:57:3c:8e: 1d:11:bb:27:ef:e7:3e:76:b4:7c:eb:77:93:19:94: 97:83:de:45:73:fa:b6:54:45:84:33:3b:b3:9a:74: 35:d7:79:80:39:ad:58:97:ac:c5:76:02:f5:24:2b: 92:82:14:70:da:96:fa:29:3b:ce:19:e8:c6:82:f2: 7f:a2:8e:4f:4e:38:50:7f:56:52:d9:01:c8:f5:5f: 73:6c:42:17:36:0d:ad:90:fa:b1:33:ac:0f:86:0f: 75:e0:1d:29:68:47:60:61:93:14:67:6e:61:ad:0e: 0d:3c:a5:16:97:36:56:91:b2:f8:88:93:4e:27:d9: 60:b6:b0:01:5a:de:73:9f:ab:d6:67:b0:23:8c:ee: de:02:ce:4a:25:ee:15:3d:4b:3e:14:e5:60:b1:bc: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:cac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203636 Signature Algorithm: sha256WithRSAEncryption 38:4d:a3:a0:8b:ed:db:8a:de:dc:63:ce:a6:7c:49:74:fb:bb: c6:a7:15:f3:cb:20:12:3a:3e:45:c2:d7:d0:7a:73:76:bb:a3: 04:21:ca:7b:d3:db:72:4d:77:58:d4:9d:e9:c8:bc:29:2c:41: 8b:42:26:37:3f:2d:a6:09:cc:83:4a:e6:cc:3b:22:01:c1:28: 1b:0b:07:36:f8:69:7d:b3:c4:5a:9f:51:32:15:aa:f7:67:9f: d3:18:19:80:44:2f:72:55:ab:cb:3b:5d:df:fe:8d:11:3d:3d: 48:1f:7e:42:eb:ee:ae:8d:fe:62:75:75:b3:87:de:b5:3d:9b: 7f:17:bc:2c:ef:11:1d:90:f5:65:45:3f:cb:37:46:d0:d1:36: 3f:e7:89:bc:d9:c9:91:fc:34:87:68:c7:f6:72:24:77:dc:a8: 7c:76:b3:3a:8f:d3:d6:bf:14:5f:76:f9:19:16:ac:6e:eb:0a: 69:6f:a9:03:2d:39:78:34:0b:34:ef:68:3a:0f:f1:09:09:42: 36:36:94:fe:25:03:cf:fe:a6:42:5b:94:8b:ca:c5:75:5d:a5: 61:f0:8c:f2:02:89:d9:53:40:5e:dc:31:fc:d9:48:15:10:b0: e8:47:fc:62:52:5d:86:52:05:ad:3e:f8:4a:2d:1c:67:34:b3: ad:96:52:4b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZwecC56KcszzLLufXm6yTHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTI1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmI5YTVmMzI4Y2MzMDY1MjdjYzRjNDc0YmRjNGIxM2E3NDZhMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QuyMfqmhR+p/Pg333QRGeUZtuPS tzBsNBYakBs2/dViU769AINpig6md24Cj6T3dDQLitsSAHlmjIwf4mwZbXHT+GJ4 mdD6FclnfQ300SUDMKWPaK4vjAop2a51R9FW4wLfQBNXPI4dEbsn7+c+drR863eT GZSXg95Fc/q2VEWEMzuzmnQ113mAOa1Yl6zFdgL1JCuSghRw2pb6KTvOGejGgvJ/ oo5PTjhQf1ZS2QHI9V9zbEIXNg2tkPqxM6wPhg914B0paEdgYZMUZ25hrQ4NPKUW lzZWkbL4iJNOJ9lgtrABWt5zn6vWZ7AjjO7eAs5KJe4VPUs+FOVgsbwifwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFP+5pfMozDBlJ8xMR0vcSxOnRqGoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzJmZmVm Zi02YjBiLTQwYzgtODdlYy0xZjE2NDI1MDcxOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMmZmZWZm LTZiMGItNDBjOC04N2VjLTFmMTY0MjUwNzE5My8xL183bWw4eWpNTUdVbnpFeEhT OXhMRTZkR29hZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgTKwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDG3QwDQYJKoZIhvcNAQELBQADggEBADhNo6CL7duK3txjzqZ8SXT7u8anFfPL IBI6PkXC19B6c3a7owQhynvT23JNd1jUnenIvCksQYtCJjc/LaYJzINK5sw7IgHB KBsLBzb4aX2zxFqfUTIVqvdnn9MYGYBEL3JVq8s7Xd/+jRE9PUgffkLr7q6N/mJ1 dbOH3rU9m38XvCzvER2Q9WVFP8s3RtDRNj/nibzZyZH8NIdox/ZyJHfcqHx2szqP 09a/FF92+RkWrG7rCmlvqQMtOXg0CzTvaDoP8QkJQjY2lP4lA8/+pkJblIvKxXVd pWHwjPICidlTQF7cMfzZSBUQsOhH/GJSXYZSBa0++EotHGc0s62WUks= -----END CERTIFICATE-----Generated at Thu Feb 5 03:15:25 2026 by rpki-client