This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer File: f7UOfTt_0olM-3DklGCLMgzCFcE.cer (raw, json) Hash identifier: qgcp3NVvnKLNm0rz3B90CAa7+hAcTzmQ96MUaIidJHA= Subject key identifier: 7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB7DED15681B17779AACBFAC03EC5BAAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 14:59:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.57.237.0/24 IP: 2a12:a440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:de:d1:56:81:b1:77:79:aa:cb:fa:c0:3e:c5:ba:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 14:59:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:dc:57:20:94:e1:cc:cc:f0:df:d9:51:9e: fc:65:59:f5:2a:84:f9:48:31:02:d8:50:ed:a6:1c: fc:28:79:8d:9b:a5:2e:7f:12:a4:51:d1:ee:6c:b8: 78:f1:51:5e:f8:27:4f:41:17:4d:bb:4c:dc:56:57: c5:f5:e8:5c:13:11:a2:7e:0d:f7:89:17:17:f1:48: fc:a8:2e:52:71:61:13:4c:82:af:a2:9c:56:03:6f: 5d:c1:d0:dc:79:a7:f9:04:26:bf:f7:e7:e1:55:e2: a1:13:30:be:63:9f:69:02:c5:70:07:4e:b8:e7:8f: b4:e9:49:d0:f0:42:bc:dd:4f:18:b9:12:1a:53:83: 50:a1:c6:a6:40:04:d8:59:97:6a:1e:95:fe:7c:04: bd:69:e3:33:88:d1:3d:f8:95:04:43:2d:f7:e3:19: 91:d6:bc:48:a1:14:40:8e:07:c1:87:b1:0d:b9:1d: 8d:f3:f9:ca:c5:bf:97:0b:b1:d8:1b:89:cc:d3:dc: eb:15:b1:d6:5b:c7:46:df:18:5b:5a:30:c6:d3:8c: 3a:8c:1d:36:7a:a7:dc:07:f7:20:e3:91:74:a9:fd: 97:97:be:52:40:14:2a:82:54:18:46:c0:bd:e2:ad: 1f:c9:c2:66:73:81:79:e5:e0:a9:76:3d:56:19:8a: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.237.0/24 IPv6: 2a12:a440::/29 Signature Algorithm: sha256WithRSAEncryption 5c:1b:61:23:6f:ff:8b:93:ab:2e:ec:ee:36:83:5c:22:73:a8: 08:7c:88:30:32:aa:d9:f3:b0:d2:3b:4c:ad:6a:e5:9f:e0:8b: ce:ac:01:fc:65:72:96:11:4f:db:d4:ff:b1:1e:1c:8d:26:7b: f6:80:d7:5f:3d:e1:d3:b2:78:1e:94:ef:76:6c:4c:fc:f3:60: 2a:05:98:cf:1d:87:ee:d3:4c:5b:0d:ff:6d:38:27:ed:77:c9: 8a:6b:db:69:92:21:f3:33:37:2c:6c:a5:df:02:51:5e:38:00: db:ac:5e:00:4d:99:00:cd:31:2c:e8:4d:f5:12:de:13:8e:95: 97:a7:4b:e9:0e:13:52:4c:23:b3:07:e6:c3:93:95:f2:1a:c5: e6:9f:29:7c:09:25:6c:1d:9b:e4:38:c5:5b:4c:d6:74:43:43: 04:7c:40:00:e3:7f:8f:13:5d:bc:90:d5:17:59:94:d0:ad:18: 27:cd:02:86:f2:71:8b:dd:80:14:a4:da:e1:85:91:e7:72:dc: e7:8a:5e:58:96:02:81:09:d8:bb:33:8f:5c:85:87:e0:fd:c2: db:ae:e7:f4:55:07:83:61:03:c0:a6:06:d5:b4:ce:99:95:a2: 7b:06:d5:a5:78:ce:5c:91:cb:ae:c0:d3:93:eb:f8:c0:7d:03: 21:39:35:8a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZu33tFWgbF3earL+sA+xbqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMTQ1OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmI1MGU3ZDNiN2ZkMjg5NGNmYjcwZTQ5NDYwOGIzMjBjYzIxNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xLcVyCU4czM8N/ZUZ78ZVn1KoT5 SDEC2FDtphz8KHmNm6UufxKkUdHubLh48VFe+CdPQRdNu0zcVlfF9ehcExGifg33 iRcX8Uj8qC5ScWETTIKvopxWA29dwdDceaf5BCa/9+fhVeKhEzC+Y59pAsVwB064 54+06UnQ8EK83U8YuRIaU4NQocamQATYWZdqHpX+fAS9aeMziNE9+JUEQy334xmR 1rxIoRRAjgfBh7ENuR2N8/nKxb+XC7HYG4nM09zrFbHWW8dG3xhbWjDG04w6jB02 eqfcB/cg45F0qf2Xl75SQBQqglQYRsC94q0fycJmc4F55eCpdj1WGYp6aQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFH+1Dn07f9KJTPtw5JRgizIMwhXBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2E5MThj Yi0yMDQ0LTRmMWMtOTcwMC05MzYwMWEzNGY2MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvYTkxOGNi LTIwNDQtNGYxYy05NzAwLTkzNjAxYTM0ZjYyZi8xL2Y3VU9mVHRfMG9sTS0zRGts R0NMTWd6Q0ZjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAAjntMA0EAgACMAcDBQMqEqRAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcG2Ejb/+Lk6su7O42g1wic6gIfIgwMqrZ87DSO0ytauWf4IvO rAH8ZXKWEU/b1P+xHhyNJnv2gNdfPeHTsngelO92bEz882AqBZjPHYfu00xbDf9t OCftd8mKa9tpkiHzMzcsbKXfAlFeOADbrF4ATZkAzTEs6E31Et4TjpWXp0vpDhNS TCOzB+bDk5XyGsXmnyl8CSVsHZvkOMVbTNZ0Q0MEfEAA43+PE128kNUXWZTQrRgn zQKG8nGL3YAUpNrhhZHnctznil5YlgKBCdi7M49chYfg/cLbruf0VQeDYQPApgbV tM6ZlaJ7BtWleM5ckcuuwNOT6/jAfQMhOTWK -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:06 2026 by rpki-client