This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer File: c7lkn2pvtixtzQzowN8WVcEjZDQ.cer (raw, json) Hash identifier: myusB3qxyllLbo9xQZ8indoqJlbNGATgjfYCskSYNj0= Subject key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A7F9DAE6548503C77BFC7387D8BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216120 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a7:f9:da:e6:54:85:03:c7:7b:fc:73:87:d8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:cf:af:08:77:7e:c0:b5:89:aa:75:b3:3d: 11:ee:f3:ed:9b:51:4f:b5:44:82:b7:07:c2:72:ef: 13:ef:f5:70:89:62:92:29:db:8a:6f:9e:ad:fb:18: 12:51:dc:0b:0d:c2:95:eb:8b:32:bb:98:47:bb:b1: 38:e5:1c:16:1f:8b:d4:87:07:2a:0a:21:4d:2c:99: dc:21:e5:23:04:69:69:89:99:8b:cc:c1:aa:f2:d7: 54:6c:22:37:6b:07:e2:c4:54:39:4d:79:7e:26:34: fe:a2:7d:a4:8f:6b:ab:74:97:51:23:95:17:4f:04: 74:4b:14:54:17:8a:7f:bd:cf:cd:54:1b:2b:75:b8: 30:76:17:bd:37:bb:60:5f:e2:9b:35:34:22:97:ce: 47:c5:09:09:ae:ec:1d:03:e6:f7:6c:7f:9e:10:5f: bb:84:1f:bc:77:fa:61:18:34:a6:65:54:eb:6a:c7: 00:fa:91:23:8e:da:0d:46:87:5b:67:51:58:ef:e3: c7:5f:6b:48:ce:5e:15:58:f6:1f:ce:78:63:a0:81: 62:71:3b:93:74:25:be:d8:ae:ae:5f:aa:79:ce:e9: 5c:d5:aa:6e:28:19:9d:21:8e:c3:f0:4d:8e:fd:1f: 0a:d9:19:50:55:b2:5c:4e:48:62:a8:57:12:0b:3d: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216120 Signature Algorithm: sha256WithRSAEncryption 20:e6:cc:c5:32:5e:df:67:10:f9:c1:04:ea:e4:a9:b2:0c:ec: a6:00:f7:36:29:5f:18:1d:01:bf:1f:0e:1e:ed:7e:7b:3b:36: ea:23:93:1b:c3:67:38:3e:44:d5:50:af:e4:31:54:f5:cb:49: ce:e5:50:d5:a8:a7:51:e6:98:bc:86:61:28:11:95:a3:b9:0c: 66:60:da:1c:17:91:e4:9c:fc:22:e8:f4:62:ce:44:a8:42:80: 22:2b:98:95:64:e0:49:72:67:fc:65:60:f4:60:a6:ec:38:a7: f5:30:e1:64:09:8a:e1:f1:f8:55:ae:62:e6:d2:11:2c:a3:80: 2e:07:a0:d0:7b:d4:6a:98:a7:fd:a5:92:be:af:ec:c2:c5:f3: 5d:56:75:f3:30:e9:38:66:76:69:a4:60:18:27:2e:12:ed:31: 65:3d:11:34:8e:07:bd:96:ad:ba:ff:dc:95:23:ff:e3:16:27: 09:40:7b:9c:a7:70:f3:b1:ea:67:ef:bd:87:56:4b:9e:67:44: c1:a4:7b:7f:b4:a6:09:47:29:f9:91:64:a5:d3:96:8d:b1:ce: 39:c1:e9:96:07:3e:31:f2:56:65:59:a7:8b:18:55:0e:4a:08: 72:79:70:d9:bb:42:f5:13:85:dc:90:c5:34:a3:63:33:b0:7e: 0e:93:eb:1a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/Faf52uZUhQPHe/xzh9i+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2I5NjQ5ZjZhNmZiNjJjNmRjZDBjZThjMGRmMTY1NWMxMjM2NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0jPrwh3fsC1iap1sz0R7vPtm1FP tUSCtwfCcu8T7/VwiWKSKduKb56t+xgSUdwLDcKV64syu5hHu7E45RwWH4vUhwcq CiFNLJncIeUjBGlpiZmLzMGq8tdUbCI3awfixFQ5TXl+JjT+on2kj2urdJdRI5UX TwR0SxRUF4p/vc/NVBsrdbgwdhe9N7tgX+KbNTQil85HxQkJruwdA+b3bH+eEF+7 hB+8d/phGDSmZVTrascA+pEjjtoNRodbZ1FY7+PHX2tIzl4VWPYfznhjoIFicTuT dCW+2K6uX6p5zulc1apuKBmdIY7D8E2O/R8K2RlQVbJcTkhiqFcSCz1qFQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzhhZjg5 Yy0zYWU0LTQ3NDItYjBhYi03ZTEzOGRmNjEwNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOGFmODlj LTNhZTQtNDc0Mi1iMGFiLTdlMTM4ZGY2MTA1Ny8xL2M3bGtuMnB2dGl4dHpRem93 TjhXVmNFalpEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMODANBgkqhkiG9w0BAQsFAAOCAQEAIObMxTJe32cQ +cEE6uSpsgzspgD3NilfGB0Bvx8OHu1+ezs26iOTG8NnOD5E1VCv5DFU9ctJzuVQ 1ainUeaYvIZhKBGVo7kMZmDaHBeR5Jz8Iuj0Ys5EqEKAIiuYlWTgSXJn/GVg9GCm 7Din9TDhZAmK4fH4Va5i5tIRLKOALgeg0HvUapin/aWSvq/swsXzXVZ18zDpOGZ2 aaRgGCcuEu0xZT0RNI4HvZatuv/clSP/4xYnCUB7nKdw87HqZ++9h1ZLnmdEwaR7 f7SmCUcp+ZFkpdOWjbHOOcHplgc+MfJWZVmnixhVDkoIcnlw2btC9ROF3JDFNKNj M7B+DpPrGg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:36 2026 by rpki-client