This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer File: m7i3BEmXt6r1K1TnV_mYknlW7Dg.cer (raw, json) Hash identifier: RmOJO662X2bZrw4aa0hbR1IhiQSN3vQ+THSo8EDQZ+8= Subject key identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C104F65793E3CB68D543E7F165C8D44F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 30 Jan 2026 19:09:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204844 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:4f:65:79:3e:3c:b6:8d:54:3e:7f:16:5c:8d:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 30 19:09:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb8b7044997b7aaf52b54e757f998927956ec38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:12:4b:f8:95:e9:77:ca:bc:19:58:80:b0: bb:4a:d8:c9:23:d0:44:50:78:c2:96:0b:0b:8a:45: 6a:ed:d2:39:9b:cf:d9:2b:9a:b8:a5:f8:18:86:b0: f7:8f:fe:7a:ba:68:d9:34:59:21:46:75:8d:5e:33: d5:5c:64:7a:0a:bd:a2:50:0f:9f:2f:4d:5b:b4:98: 51:29:58:5f:f8:f8:5e:89:6e:3d:05:42:ed:4c:eb: e8:30:bc:e3:6e:ce:c7:a7:5c:90:d2:68:19:7b:c8: a9:a1:62:83:11:8f:2e:1e:b7:99:ae:f9:77:34:65: 33:e9:a6:5d:ce:0d:58:4c:25:d6:5c:e9:fe:72:fa: 21:90:86:36:6c:9c:a6:f6:c7:de:6a:94:3a:d5:85: df:3a:00:18:61:dd:ed:d0:fd:a8:6a:77:c0:ac:40: 0d:26:80:7d:a8:24:5c:e4:7b:f5:46:5b:00:bf:99: 6f:f1:88:51:3c:c4:f1:83:6e:af:97:06:2e:b1:57: 25:61:98:98:67:09:31:74:60:3d:6d:9e:a3:fc:c1: 26:6d:94:60:f0:11:76:3d:62:82:9e:0f:09:87:ee: 7f:62:13:25:c3:38:ec:6c:6f:9d:bf:3a:14:de:89: 21:4b:e6:f4:fe:f0:5a:78:cc:77:5c:fb:69:60:54: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:B7:04:49:97:B7:AA:F5:2B:54:E7:57:F9:98:92:79:56:EC:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/0/9BB8B7044997B7AAF52B54E757F998927956EC38.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204844 Signature Algorithm: sha256WithRSAEncryption 8a:34:fe:64:ac:8d:14:2d:44:a6:29:44:65:4d:68:07:18:89: 80:a8:d5:6c:b3:c3:a0:d3:c5:7e:7e:50:a7:74:21:aa:00:1b: 2b:c6:91:d0:27:45:8d:ba:34:65:12:f2:73:04:7a:39:93:a7: 71:49:5e:3a:d3:8d:49:b2:5f:3a:94:ea:7c:7e:45:f6:78:65: b9:95:69:65:2c:27:f1:25:db:8b:d6:30:e1:e6:3c:cb:e5:71: 70:57:20:5a:a4:ff:41:e7:9c:71:9b:6b:f7:75:72:6d:e8:c1: 0a:ab:a8:2b:19:b1:d4:69:c1:87:f4:02:6a:34:2e:b3:b8:b9: 9d:d0:fe:20:35:9f:b2:20:d0:5b:45:cc:31:75:51:44:39:bc: 0f:09:10:bc:bc:60:46:6b:68:0b:70:84:a5:27:94:ee:cc:cc: c8:28:b9:51:25:cb:ab:48:ea:09:ed:e5:02:a6:29:39:02:79: e4:8d:6d:56:9e:ad:d5:96:64:8c:7f:56:1e:c2:cc:b5:d2:34: 02:3e:e7:88:cd:da:c0:23:53:67:f4:be:bd:7d:84:e3:82:2d: 73:55:7b:65:9e:aa:23:28:ee:76:e4:f8:08:e0:7e:b9:e1:e8: 2b:0c:aa:6a:1d:98:18:ed:5e:65:a3:c6:36:c6:7e:54:0a:26: 37:4d:01:16 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZwQT2V5Pjy2jVQ+fxZcjUTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTMwMTkwOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI4YjcwNDQ5OTdiN2FhZjUyYjU0ZTc1N2Y5OTg5Mjc5NTZlYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso8SS/iV6XfKvBlYgLC7StjJI9BE UHjClgsLikVq7dI5m8/ZK5q4pfgYhrD3j/56umjZNFkhRnWNXjPVXGR6Cr2iUA+f L01btJhRKVhf+PheiW49BULtTOvoMLzjbs7Hp1yQ0mgZe8ipoWKDEY8uHreZrvl3 NGUz6aZdzg1YTCXWXOn+cvohkIY2bJym9sfeapQ61YXfOgAYYd3t0P2oanfArEAN JoB9qCRc5Hv1RlsAv5lv8YhRPMTxg26vlwYusVclYZiYZwkxdGA9bZ6j/MEmbZRg 8BF2PWKCng8Jh+5/YhMlwzjsbG+dvzoU3okhS+b0/vBaeMx3XPtpYFRrVwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFJu4twRJl7eq9StU51f5mJJ5Vuw4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxYmVk ZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzFi ZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5MDVkLzAvOUJCOEI3MDQ0OTk3 QjdBQUY1MkI1NEU3NTdGOTk4OTI3OTU2RUMzOC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDICww DQYJKoZIhvcNAQELBQADggEBAIo0/mSsjRQtRKYpRGVNaAcYiYCo1Wyzw6DTxX5+ UKd0IaoAGyvGkdAnRY26NGUS8nMEejmTp3FJXjrTjUmyXzqU6nx+RfZ4ZbmVaWUs J/El24vWMOHmPMvlcXBXIFqk/0HnnHGba/d1cm3owQqrqCsZsdRpwYf0Amo0LrO4 uZ3Q/iA1n7Ig0FtFzDF1UUQ5vA8JELy8YEZraAtwhKUnlO7MzMgouVEly6tI6gnt 5QKmKTkCeeSNbVaerdWWZIx/Vh7CzLXSNAI+54jN2sAjU2f0vr19hOOCLXNVe2We qiMo7nbk+Ajgfrnh6CsMqmodmBjtXmWjxjbGflQKJjdNARY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:32 2026 by rpki-client