This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer File: e7M4LBagpWFZkNS85jTcUWgvLqo.cer (raw, json) Hash identifier: 3BfqZbptBXpvwerBa7rqrwErfEGmNKB7O57QIwAPVOE= Subject key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C9F6E005217D86F5D87833465FFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.236.35.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c9:f6:e0:05:21:7d:86:f5:d8:78:33:46:5f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:3b:bd:76:4f:d8:15:f1:a5:54:e4:73:ad: 8c:e6:c6:f8:14:ac:cb:06:33:31:1c:8c:1a:0b:4a: ca:cb:4c:98:95:d7:ec:10:dc:a0:ed:28:63:41:46: fe:61:96:75:1b:9c:8a:f3:31:34:9d:b9:fe:e9:ee: 75:d6:7c:37:d4:1f:cc:0b:dc:ae:4d:86:47:0d:44: 61:3e:36:05:84:9b:44:2a:99:44:27:ee:22:8c:5f: 5a:a8:e3:b2:e2:08:05:12:41:bd:2d:96:32:e5:0b: 82:fe:55:df:fb:bf:74:2f:b5:72:97:31:a4:c0:60: 45:3a:79:40:39:7b:f4:7f:3a:2e:51:20:1b:b0:bc: 43:97:c0:cd:ea:44:22:4c:40:ac:d0:1a:7a:21:f8: db:ec:9f:4f:11:f3:bb:6a:3c:0c:18:22:ef:cf:31: 8c:32:77:5b:72:01:a3:20:2f:72:0b:3a:98:44:93: af:e7:3a:6a:fd:81:ed:1f:6d:af:12:b4:3a:82:36: 02:8e:01:8c:23:ef:63:40:de:e2:3b:e0:05:fd:48: d6:21:3e:4b:15:78:fb:40:df:ba:27:55:c1:e7:9b: ef:43:0c:75:19:92:d3:67:c9:67:4d:08:b9:68:b9: 90:54:1e:ee:a6:5e:e4:3a:54:e9:c5:73:65:bb:47: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.35.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b2:31:fb:a6:55:8b:ee:4f:f0:1e:6d:c7:fa:87:0b:de:7c: 73:76:67:90:c9:a8:87:94:6e:6c:b5:1b:5d:37:6b:81:0c:28: b9:8a:18:9b:39:70:e9:a7:d2:b5:90:8f:51:e3:06:1c:e1:91: 6a:4d:51:4e:9a:e9:20:48:2c:95:d9:0e:ec:73:28:4a:f4:1e: c4:9d:47:0d:92:4e:be:ed:c1:aa:97:e9:eb:7f:2b:43:f9:b2: 91:69:f6:d1:87:e7:08:5b:b5:14:1b:b7:91:63:b2:8f:d2:93: a9:25:66:70:2c:00:6b:6c:73:cf:36:68:80:64:65:cb:29:f9: 0a:f5:2f:99:7b:3e:67:9e:dc:2b:d4:a6:e7:5a:f3:f7:16:59: 59:be:fa:29:a7:44:92:39:9e:fb:07:7b:28:d9:05:8a:a5:58: 00:1c:66:25:6a:41:5a:d4:ec:b8:19:c2:b8:b0:71:53:80:07: f4:0a:13:6c:7c:69:d4:a9:0a:a6:93:53:99:5c:66:0e:6c:cc: b0:b1:91:f8:37:e2:09:29:8c:ac:ec:63:e4:97:91:5d:9c:02: 0b:b2:71:b0:99:75:aa:9a:cd:eb:5f:fd:1d:02:01:bd:10:19: 6c:f8:9e:67:e8:df:60:5b:49:66:18:4c:97:bd:28:84:30:78: 1c:be:b5:d6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pMn24AUhfYb12HgzRl//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmIzMzgyYzE2YTBhNTYxNTk5MGQ0YmNlNjM0ZGM1MTY4MmYyZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFg7vXZP2BXxpVTkc62M5sb4FKzL BjMxHIwaC0rKy0yYldfsENyg7ShjQUb+YZZ1G5yK8zE0nbn+6e511nw31B/MC9yu TYZHDURhPjYFhJtEKplEJ+4ijF9aqOOy4ggFEkG9LZYy5QuC/lXf+790L7VylzGk wGBFOnlAOXv0fzouUSAbsLxDl8DN6kQiTECs0Bp6Ifjb7J9PEfO7ajwMGCLvzzGM MndbcgGjIC9yCzqYRJOv5zpq/YHtH22vErQ6gjYCjgGMI+9jQN7iO+AF/UjWIT5L FXj7QN+6J1XB55vvQwx1GZLTZ8lnTQi5aLmQVB7upl7kOlTpxXNlu0clswIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHuzOCwWoKVhWZDUvOY03FFoLy6qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2Lzk0MGE3 NC1hMmYyLTRiZDYtOGU1YS05NTU0YTVhYzM2YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvOTQwYTc0 LWEyZjItNGJkNi04ZTVhLTk1NTRhNWFjMzZiYi8xL2U3TTRMQmFncFdGWmtOUzg1 alRjVVdndkxxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAV+wjMA0GCSqGSIb3DQEBCwUAA4IBAQBJsjH7 plWL7k/wHm3H+ocL3nxzdmeQyaiHlG5stRtdN2uBDCi5ihibOXDpp9K1kI9R4wYc 4ZFqTVFOmukgSCyV2Q7scyhK9B7EnUcNkk6+7cGql+nrfytD+bKRafbRh+cIW7UU G7eRY7KP0pOpJWZwLABrbHPPNmiAZGXLKfkK9S+Zez5nntwr1KbnWvP3FllZvvop p0SSOZ77B3so2QWKpVgAHGYlakFa1Oy4GcK4sHFTgAf0ChNsfGnUqQqmk1OZXGYO bMywsZH4N+IJKYys7GPkl5FdnAILsnGwmXWqms3rX/0dAgG9EBls+J5n6N9gW0lm GEyXvSiEMHgcvrXW -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:57 2026 by rpki-client