This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer File: so7x9PiCePTfGec-M4HOzXjgacE.cer (raw, json) Hash identifier: +rwhZ0EGgnpHLvPwTjzWABSKE91jv4/G9YaFtNEZMKk= Subject key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C58AE57DAEF56B7AC6FD4757343FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214165 IP: 83.175.143.0/24 IP: 2001:67c:260::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:58:ae:57:da:ef:56:b7:ac:6f:d4:75:73:43:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:d1:23:aa:0a:9d:52:9a:8f:a8:84:45:64: 23:55:d5:8b:08:34:84:75:1b:58:1b:56:c3:96:aa: b4:4f:ee:e1:d0:43:fe:1f:32:2b:03:4e:33:00:b0: 74:92:7c:04:9d:17:22:90:ca:0e:1d:d2:3a:3b:30: fe:69:8d:ba:8c:98:dd:a9:a2:58:46:96:45:65:2b: 48:15:60:71:ef:60:84:83:d0:3a:49:bd:84:58:bb: f7:79:ae:2f:01:89:f1:a5:97:c2:8a:50:31:d6:7a: 86:ad:e1:7b:86:27:db:38:90:5e:68:ce:93:fc:90: da:f5:79:c8:b8:65:f4:09:fb:3d:af:16:68:97:3c: 34:8b:a4:8c:bb:67:ef:db:15:81:51:7f:33:22:fb: 3c:2a:89:75:52:86:ac:3c:03:38:08:c8:b9:45:27: 12:be:a9:52:a4:d1:90:06:06:61:07:5c:aa:c9:95: e2:dc:72:fe:71:a8:b4:2e:f6:9c:d9:a9:9c:65:0e: 2c:17:86:38:af:5a:92:23:f7:65:6b:87:1c:a0:ed: 22:a3:61:bd:94:03:85:aa:f2:94:2d:4c:4c:6b:61: d7:03:67:c7:ee:0c:8c:1e:1f:a1:5c:b3:ab:52:31: 32:ca:90:91:a1:a8:e7:f7:13:61:ed:7c:6d:bf:81: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.175.143.0/24 IPv6: 2001:67c:260::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214165 Signature Algorithm: sha256WithRSAEncryption 8c:7c:b7:9b:b8:61:95:08:fe:cd:95:65:b3:e7:fa:1c:19:af: 6d:c6:a9:60:5e:50:2f:c3:ec:a7:f4:bb:da:6f:7f:57:71:ad: 8e:4f:2f:a2:3b:0d:cd:24:fa:7b:33:c3:81:c2:f1:f4:fa:b4: 21:b5:d7:1b:b3:b9:55:c3:4b:3b:8c:e8:bd:92:e8:6e:a7:1a: f5:15:7d:df:bc:06:81:b5:ad:7d:35:7d:8c:07:a7:12:52:b7: e0:0e:3c:a6:ab:1e:bc:20:48:4a:22:59:27:37:38:60:c7:72: 8d:12:8b:9b:64:2d:3e:4f:a3:c4:04:f3:2f:02:70:27:4e:1e: 08:d3:56:6f:11:34:fc:86:ca:75:40:72:91:24:e3:10:86:48: 13:e5:b6:07:66:fd:b8:f4:aa:ee:05:c7:b7:45:99:b5:14:43: 62:ee:62:e7:6d:ca:d2:f7:12:e4:b4:fa:21:46:df:2a:59:81: e1:69:88:26:66:e4:5b:51:96:0a:e0:03:17:c3:5d:4d:3d:1a: 22:3c:7e:27:7c:09:8e:76:4c:07:a7:f4:e4:e5:ce:b7:f5:49: 49:a3:6a:f0:18:15:df:ce:b7:e5:e1:27:c5:fc:a0:67:9f:aa: bd:bb:7d:c8:39:35:74:2b:62:5d:6d:b5:3e:78:01:93:06:d7: da:03:73:f9 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9XFiuV9rvVresb9R1c0P7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjhlZjFmNGY4ODI3OGY0ZGYxOWU3M2UzMzgxY2VjZDc4ZTA2OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpPRI6oKnVKaj6iERWQjVdWLCDSE dRtYG1bDlqq0T+7h0EP+HzIrA04zALB0knwEnRcikMoOHdI6OzD+aY26jJjdqaJY RpZFZStIFWBx72CEg9A6Sb2EWLv3ea4vAYnxpZfCilAx1nqGreF7hifbOJBeaM6T /JDa9XnIuGX0Cfs9rxZolzw0i6SMu2fv2xWBUX8zIvs8Kol1UoasPAM4CMi5RScS vqlSpNGQBgZhB1yqyZXi3HL+cai0Lvac2amcZQ4sF4Y4r1qSI/dla4ccoO0io2G9 lAOFqvKULUxMa2HXA2fH7gyMHh+hXLOrUjEyypCRoajn9xNh7Xxtv4H+dwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLKO8fT4gnj03xnnPjOBzs144GnBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzFmMDUx Yi1lNzM1LTQ5YjgtYmM2ZC05ZWYwYTU5OTI3YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMWYwNTFi LWU3MzUtNDliOC1iYzZkLTllZjBhNTk5MjdiMS8xL3NvN3g5UGlDZVBUZkdlYy1N NEhPelhqZ2FjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAU6+PMA8EAgACMAkDBwAgAQZ8AmAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0SVMA0GCSqGSIb3DQEBCwUAA4IBAQCMfLebuGGV CP7NlWWz5/ocGa9txqlgXlAvw+yn9Lvab39Xca2OTy+iOw3NJPp7M8OBwvH0+rQh tdcbs7lVw0s7jOi9kuhupxr1FX3fvAaBta19NX2MB6cSUrfgDjymqx68IEhKIlkn Nzhgx3KNEoubZC0+T6PEBPMvAnAnTh4I01ZvETT8hsp1QHKRJOMQhkgT5bYHZv24 9KruBce3RZm1FENi7mLnbcrS9xLktPohRt8qWYHhaYgmZuRbUZYK4AMXw11NPRoi PH4nfAmOdkwHp/Tk5c639UlJo2rwGBXfzrfl4SfF/KBnn6q9u33IOTV0K2JdbbU+ eAGTBtfaA3P5 -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:06 2026 by rpki-client