This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7-ak2z5rSjsWNt5imD9cd9sN_M.cer File: h7-ak2z5rSjsWNt5imD9cd9sN_M.cer (raw, json) Hash identifier: YW44PnVB6L+5tlXAkI++vG9KDqe1WhkW52siF0+EIKM= Subject key identifier: 87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC96D2E1B4876E4249B00591E4F63D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51217 IP: 2001:67c:2dcc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:6d:2e:1b:48:76:e4:24:9b:00:59:1e:4f:63:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87bf9a936cf9ad28ec58db798a60fd71df6c37f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:f6:bf:bd:4a:e2:26:c9:16:9d:ec:36:29: c1:c9:56:9b:19:09:42:e2:ec:49:6a:9a:11:2e:e3: c4:76:f0:3f:fe:e4:57:18:19:35:13:37:d5:7d:7f: 19:48:51:af:2a:a7:d0:3f:14:9f:7f:14:3a:0d:ee: 81:18:33:e1:50:58:4a:bd:7b:5d:7d:36:1e:d1:ed: c3:70:4b:86:9e:73:dd:5c:a9:6b:d5:3c:5c:1c:31: 56:6e:cb:ac:a0:c0:ef:cc:bb:e0:b4:13:d5:3a:bb: 81:a3:03:76:2b:6e:f3:b2:83:92:a4:e5:3c:1e:43: 48:46:d5:87:5b:30:e0:f2:bf:ac:7a:11:20:13:a5: cd:70:77:d0:6f:36:d2:47:76:3c:bf:32:3d:9d:2c: 26:3d:d9:ae:c7:ff:e5:aa:bb:5b:3d:b3:32:a7:ec: 52:35:68:19:d2:6f:72:09:ca:2d:28:74:f5:63:3f: c2:b9:cd:ca:d4:4b:66:25:72:61:bd:9e:06:4f:82: 2b:ce:f7:d6:2a:32:5d:7d:63:f3:0b:21:bc:b0:16: ba:a6:a6:ed:30:8f:bf:c7:83:4f:6b:28:2f:9f:13: 91:06:c7:bc:1d:07:e7:ac:68:09:85:f8:82:2c:2f: fc:32:a4:17:40:b6:54:1e:22:2e:e4:d6:28:67:4d: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dcc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51217 Signature Algorithm: sha256WithRSAEncryption 2d:1b:1f:a8:a7:bb:ff:b8:58:e1:59:b1:27:7f:d0:cf:e3:1d: 22:29:68:4e:29:c4:9d:f6:69:7d:5f:d4:c5:fd:90:22:8f:13: f3:54:f9:da:40:aa:f6:f8:1a:43:fc:79:9b:19:67:04:cf:bc: f9:68:42:c6:8c:48:5b:70:bf:f2:b8:1d:5b:d0:94:81:9f:ad: 3b:8c:c1:2e:96:59:c9:f3:7d:4c:eb:50:d0:ae:5f:ff:b0:73: b8:8c:3b:c8:73:1f:c3:ee:6e:51:58:b2:dc:a6:79:6f:af:92: 61:40:74:49:9f:c7:35:83:bf:50:23:67:92:75:10:46:30:8e: 4b:3f:bc:4b:53:07:66:f6:a2:35:41:19:7c:29:27:26:25:8a: ee:d2:ee:0a:c2:8d:4b:e4:8d:a9:90:cf:6e:38:46:4b:f4:a9: 6c:64:ee:3d:26:33:25:85:92:4b:20:2d:52:ce:6a:cc:c3:39: 87:62:9d:11:8b:50:4a:95:f0:1e:bf:d4:c9:16:89:bf:d1:0a: 79:ea:c5:bf:cc:43:43:99:fa:b8:43:1b:dd:fd:cc:58:c9:af: 17:27:4f:9c:21:40:c8:69:9b:f9:32:18:4b:7c:ff:bb:20:39: 19:98:b9:07:0b:ce:e1:1a:7b:58:7c:26:f9:34:94:cc:11:01: a2:a5:2d:23 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9yW0uG0h25CSbAFkeT2PZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2JmOWE5MzZjZjlhZDI4ZWM1OGRiNzk4YTYwZmQ3MWRmNmMzN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5z2v71K4ibJFp3sNinByVabGQlC 4uxJapoRLuPEdvA//uRXGBk1EzfVfX8ZSFGvKqfQPxSffxQ6De6BGDPhUFhKvXtd fTYe0e3DcEuGnnPdXKlr1TxcHDFWbsusoMDvzLvgtBPVOruBowN2K27zsoOSpOU8 HkNIRtWHWzDg8r+sehEgE6XNcHfQbzbSR3Y8vzI9nSwmPdmux//lqrtbPbMyp+xS NWgZ0m9yCcotKHT1Yz/Cuc3K1EtmJXJhvZ4GT4IrzvfWKjJdfWPzCyG8sBa6pqbt MI+/x4NPaygvnxORBse8HQfnrGgJhfiCLC/8MqQXQLZUHiIu5NYoZ01wNQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFIe/mpNs+a0o7FjbeYpg/XHfbDfzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzU2YzZj Yi1hMzZlLTRlMWMtYTQzMi00Zjk3NzcyYjAxODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNTZjNmNi LWEzNmUtNGUxYy1hNDMyLTRmOTc3NzJiMDE4MC8xL2g3LWFrMno1clNqc1dOdDVp bUQ5Y2Q5c05fTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3MMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDIETANBgkqhkiG9w0BAQsFAAOCAQEALRsfqKe7/7hY4VmxJ3/Qz+MdIilo TinEnfZpfV/Uxf2QIo8T81T52kCq9vgaQ/x5mxlnBM+8+WhCxoxIW3C/8rgdW9CU gZ+tO4zBLpZZyfN9TOtQ0K5f/7BzuIw7yHMfw+5uUViy3KZ5b6+SYUB0SZ/HNYO/ UCNnknUQRjCOSz+8S1MHZvaiNUEZfCknJiWK7tLuCsKNS+SNqZDPbjhGS/SpbGTu PSYzJYWSSyAtUs5qzMM5h2KdEYtQSpXwHr/UyRaJv9EKeerFv8xDQ5n6uEMb3f3M WMmvFydPnCFAyGmb+TIYS3z/uyA5GZi5BwvO4Rp7WHwm+TSUzBEBoqUtIw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:21 2026 by rpki-client