This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer File: j7YTPVwhCdim-bvKpJbb6uNHl1w.cer (raw, json) Hash identifier: /g8jPC3ybIaEiMiYZysa3Vg918rL7Yi08aXnDlKx+50= Subject key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8004CE6DFBEA70FF914FAD8D7D0DD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 160.97.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:04:ce:6d:fb:ea:70:ff:91:4f:ad:8d:7d:0d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:47:e0:4d:c7:e5:7a:24:9e:b3:88:70:f8:40: 35:97:39:a6:b2:24:54:7f:06:ed:98:64:e2:b6:84: f3:c8:9b:c2:5e:0e:a8:4a:e4:48:15:14:d1:69:0c: 84:84:94:37:2c:90:3d:27:39:c9:27:53:46:01:4c: db:ad:29:79:b4:34:3a:52:3a:ee:1e:b3:47:d4:a8: c0:3b:a2:cb:75:79:52:ad:05:52:a8:24:b2:45:b3: 31:42:77:01:d8:eb:a2:46:d3:e4:cf:1f:ff:66:41: 54:e5:d9:ec:c6:c0:0b:f5:fb:c2:d5:c6:5a:23:85: 1a:03:db:10:30:33:02:89:b5:ab:3c:2b:1f:f8:2b: c9:89:c7:f1:c7:b6:ea:cc:71:c7:fb:f1:df:e6:cf: fe:94:85:4d:e5:bb:61:2f:6b:ac:da:d8:af:66:05: cf:ba:27:31:e9:a4:f9:a3:7a:8b:b4:b7:63:44:18: ad:15:c4:18:d9:6f:34:df:2d:e0:87:39:ca:1b:0e: 08:ba:94:23:f2:23:d9:dd:3e:39:4f:a8:3e:f2:c9: 6a:02:d6:79:5a:24:13:b7:a6:4a:ff:9b:2c:bc:1b: 03:19:a2:2a:e1:b3:58:07:93:61:d4:84:58:be:90: d0:49:69:37:36:1d:78:f8:9b:7a:c4:76:30:b6:2e: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:f2:da:04:a9:ce:b1:f8:79:2b:3b:02:1f:f7:aa:64:9f:2a: 70:14:80:20:67:9c:e9:f9:6b:17:ee:93:64:e8:5d:b4:73:dc: de:68:56:5c:b1:a8:30:f2:4a:79:a1:23:e8:8b:a6:48:6c:2c: 29:87:f8:d1:90:d7:36:2f:9b:ee:c0:90:ca:d1:bb:b5:5d:3b: 3d:37:88:b1:5f:42:e1:11:d6:f9:3b:64:7b:95:58:da:76:d6: 51:67:78:29:8e:ee:9d:e3:fb:21:b4:ee:d2:09:95:04:c3:45: 9b:d5:f7:c2:c6:d0:90:5e:52:9e:fd:38:b6:e3:36:ea:dc:d5: f4:67:2a:64:ea:8b:fa:67:bf:62:94:c2:f9:fe:17:3f:c3:59: fb:8a:5d:ea:48:6c:03:e4:6f:03:bd:3d:89:96:55:ee:b8:ec: f4:73:3a:68:a9:61:02:f6:88:bf:d3:1d:5d:c6:e8:42:6c:07: 90:a6:d5:a9:26:94:63:38:d2:bf:63:26:df:e4:93:e3:40:32: 93:ec:d2:f9:64:9c:05:7e:74:cb:27:b6:9f:35:21:5c:52:e6: 6c:5b:e3:4d:84:b3:cd:40:bf:b2:81:60:cf:36:82:7c:5e:b0: 3e:6c:a5:f9:c0:f2:b8:1d:23:ea:15:bf:df:b2:06:ea:69:d5: 64:b3:48:10 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt8gATObfvqcP+RT62NfQ3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmI2MTMzZDVjMjEwOWQ4YTZmOWJiY2FhNDk2ZGJlYWUzNDc5NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EfgTcfleiSes4hw+EA1lzmmsiRU fwbtmGTitoTzyJvCXg6oSuRIFRTRaQyEhJQ3LJA9JznJJ1NGAUzbrSl5tDQ6Ujru HrNH1KjAO6LLdXlSrQVSqCSyRbMxQncB2OuiRtPkzx//ZkFU5dnsxsAL9fvC1cZa I4UaA9sQMDMCibWrPCsf+CvJicfxx7bqzHHH+/Hf5s/+lIVN5bthL2us2tivZgXP uicx6aT5o3qLtLdjRBitFcQY2W803y3ghznKGw4IupQj8iPZ3T45T6g+8slqAtZ5 WiQTt6ZK/5ssvBsDGaIq4bNYB5Nh1IRYvpDQSWk3Nh14+Jt6xHYwti4DfwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2FkZTQx MC00ZThjLTQxMmUtOTc1NC00NTFhOWFlNGNlNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvYWRlNDEw LTRlOGMtNDEyZS05NzU0LTQ1MWE5YWU0Y2U1MS8xL2o3WVRQVndoQ2RpbS1idktw SmJiNnVOSGwxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoGEwDQYJKoZIhvcNAQELBQADggEBAIDy2gSp zrH4eSs7Ah/3qmSfKnAUgCBnnOn5axfuk2ToXbRz3N5oVlyxqDDySnmhI+iLpkhs LCmH+NGQ1zYvm+7AkMrRu7VdOz03iLFfQuER1vk7ZHuVWNp21lFneCmO7p3j+yG0 7tIJlQTDRZvV98LG0JBeUp79OLbjNurc1fRnKmTqi/pnv2KUwvn+Fz/DWfuKXepI bAPkbwO9PYmWVe647PRzOmipYQL2iL/THV3G6EJsB5Cm1akmlGM40r9jJt/kk+NA MpPs0vlknAV+dMsntp81IVxS5mxb402Es81Av7KBYM82gnxesD5spfnA8rgdI+oV v9+yBupp1WSzSBA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:47 2026 by rpki-client