This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer File: t7GVtlEuyHh9maGy5OvYCIT5gLI.cer (raw, json) Hash identifier: 9DxHwyCnf5Vtccr6R0+rDpsp1VDWYYv/G/27cXxKryA= Subject key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6F807E8D508D2E534179293BBB6D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35695 IP: 178.216.136.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f8:07:e8:d5:08:d2:e5:34:17:92:93:bb:b6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:2d:18:39:d4:c0:d7:19:26:1f:b3:96:37: b2:91:22:cb:4a:a7:aa:d4:60:51:b0:5d:e3:bc:32: 90:cc:ec:0b:a8:e1:ca:71:af:58:c1:14:b3:5b:b4: 0c:75:08:19:e9:ee:91:3d:db:14:52:88:0e:96:01: 73:b7:ac:19:fe:86:6f:61:8b:05:f9:ad:54:8b:f3: 3e:37:85:ab:ac:62:5f:54:0e:a4:51:57:55:5f:66: 52:2d:da:12:4d:4a:05:3e:a2:d9:8d:c0:d4:c6:ba: fd:5d:ec:8b:21:a2:6a:d0:25:83:0a:24:50:47:fa: fc:0b:b5:fe:1b:7b:ad:29:1f:67:64:4f:d3:d2:9a: 67:9d:1c:e9:e8:9b:f4:bc:0e:0b:91:81:fa:9e:8e: 46:2e:e0:e7:d9:24:56:3e:5d:f5:46:4f:1e:25:ef: c9:b1:c9:52:6f:b9:88:aa:63:e4:82:dc:2d:dd:e5: 17:5e:15:c3:9d:c1:86:e0:0f:26:9a:25:6a:04:3d: 69:4d:e0:5b:04:68:5d:77:00:29:15:c5:9d:0c:ff: db:83:fe:07:d3:6f:14:7f:f1:79:e7:6d:f6:12:0c: 64:ba:83:be:62:ce:d8:f5:d0:68:db:d9:13:8c:5f: fc:da:ad:14:fc:0c:9b:ce:f3:5f:2e:14:a9:8e:9a: bc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35695 Signature Algorithm: sha256WithRSAEncryption 7b:d9:ed:5c:29:af:b7:64:b6:39:9c:be:e6:74:6a:a2:ef:15: 1f:4a:ee:d7:82:a1:c9:4c:25:6b:e4:b2:2c:d4:db:1c:18:01: 5b:07:15:71:95:c7:33:5c:11:b3:59:ea:ce:77:37:6d:00:1a: 6c:1b:cd:06:17:79:4e:93:0d:cd:86:33:eb:f4:ef:eb:0f:d7: 86:ca:8e:6c:e1:9d:4e:21:13:22:ca:7b:8f:38:9d:4e:07:4c: 07:67:f7:9c:44:f1:c9:61:17:8a:71:0f:e3:35:c0:fd:eb:98: dc:1e:5d:88:8d:fb:31:37:48:ac:28:9e:9a:c5:8f:57:99:da: 09:20:6b:22:6b:ee:54:06:d5:3c:08:e7:f4:7d:1c:94:8a:18: c7:0d:f3:39:7e:6b:4d:7f:f5:2c:32:f4:25:aa:88:7a:03:be: 11:59:c9:f3:d7:cf:bb:eb:49:27:45:1a:b1:ef:02:57:74:0e: c9:6f:77:d3:34:1f:c4:c2:3e:68:28:7b:7e:18:50:11:78:40: 53:4e:ea:48:96:cf:7f:e1:cb:27:f6:9c:ad:73:76:ca:49:68: e5:03:76:fb:cd:d2:30:52:a0:35:03:65:5b:ed:00:c1:8c:34: a1:d1:be:37:e8:41:08:10:2c:19:9c:45:e3:dc:d4:4e:dc:ef: 37:1f:b7:50 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xvgH6NUI0uU0F5KTu7bYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2IxOTViNjUxMmVjODc4N2Q5OWExYjJlNGViZDgwODg0Zjk4MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQtGDnUwNcZJh+zljeykSLLSqeq 1GBRsF3jvDKQzOwLqOHKca9YwRSzW7QMdQgZ6e6RPdsUUogOlgFzt6wZ/oZvYYsF +a1Ui/M+N4WrrGJfVA6kUVdVX2ZSLdoSTUoFPqLZjcDUxrr9XeyLIaJq0CWDCiRQ R/r8C7X+G3utKR9nZE/T0ppnnRzp6Jv0vA4LkYH6no5GLuDn2SRWPl31Rk8eJe/J sclSb7mIqmPkgtwt3eUXXhXDncGG4A8mmiVqBD1pTeBbBGhddwApFcWdDP/bg/4H 028Uf/F55232EgxkuoO+Ys7Y9dBo29kTjF/82q0U/AybzvNfLhSpjpq8GQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLexlbZRLsh4fZmhsuTr2AiE+YCyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2ZjZmQy Ny0xNGM4LTQ4NDQtOWZmZi1iMzg4MTEwYTMwNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZmNmZDI3 LTE0YzgtNDg0NC05ZmZmLWIzODgxMTBhMzA3OC8xL3Q3R1Z0bEV1eUhoOW1hR3k1 T3ZZQ0lUNWdMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDstiIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCLbzANBgkqhkiG9w0BAQsFAAOCAQEAe9ntXCmvt2S2OZy+5nRqou8VH0ru14Kh yUwla+SyLNTbHBgBWwcVcZXHM1wRs1nqznc3bQAabBvNBhd5TpMNzYYz6/Tv6w/X hsqObOGdTiETIsp7jzidTgdMB2f3nETxyWEXinEP4zXA/euY3B5diI37MTdIrCie msWPV5naCSBrImvuVAbVPAjn9H0clIoYxw3zOX5rTX/1LDL0JaqIegO+EVnJ89fP u+tJJ0Uase8CV3QOyW930zQfxMI+aCh7fhhQEXhAU07qSJbPf+HLJ/acrXN2yklo 5QN2+83SMFKgNQNlW+0AwYw0odG+N+hBCBAsGZxF49zUTtzvNx+3UA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:51 2026 by rpki-client