This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer File: v7VI2FclEEUn875Hl2tnRzmuLxM.cer (raw, json) Hash identifier: AVrdZbse6wr02bmcj2gRPRROBr6VwH9m7T0MfxgUdO8= Subject key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB15ED20F5569E70C669854C7AF595 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204403 IP: 185.250.16.0/22 IP: 2a0b:c700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:ed:20:f5:56:9e:70:c6:69:85:4c:7a:f5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb548d85725104527f3be47976b674739ae2f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:c0:e3:0e:5d:99:7f:ed:b3:d4:ba:f1:b9: 7a:37:7b:b2:e7:be:24:78:73:a7:ba:6f:a9:3e:ec: 05:90:ec:49:ff:73:63:32:2f:20:1f:3e:31:67:72: ef:00:94:66:10:2c:4c:14:cf:3f:c5:3d:18:3b:e7: c9:91:93:86:23:a1:c7:bb:30:f2:36:04:f0:3b:ef: 59:ce:a2:0c:d9:c6:02:8a:9b:eb:5d:81:bf:6c:48: aa:0c:72:05:72:2f:08:4d:e0:c4:9f:25:ef:fa:fb: e2:58:9b:4e:20:07:7c:d2:6a:3b:40:23:07:4e:7d: 9a:bb:ea:7a:f7:86:43:86:8c:81:91:24:40:ba:cf: 4b:eb:66:05:1a:f6:12:bb:09:b5:50:09:b8:15:5d: 43:c2:f0:b9:f1:63:62:d0:9c:ff:64:1e:9c:0a:b7: 65:ae:19:d0:66:dd:3f:90:8f:d6:d7:c3:38:d8:42: 6c:9f:c5:13:e1:f0:98:fa:de:99:05:9e:87:bb:23: 8f:23:f8:b5:82:1a:46:1a:83:be:de:b9:a9:3a:2f: 2d:54:ce:9f:d0:c4:6c:e1:42:74:9d:21:d8:0f:b8: 4f:fe:de:c5:86:34:7d:65:da:70:d5:27:7c:cd:4c: 0a:c0:ed:60:c8:69:03:9b:0e:a3:99:bd:f6:52:ce: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.16.0/22 IPv6: 2a0b:c700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204403 Signature Algorithm: sha256WithRSAEncryption 6d:f1:1e:e9:c0:dd:7f:ca:08:89:ec:fe:05:64:53:4a:a6:1f: c9:48:95:c1:2c:dc:d5:07:5c:a0:42:7a:f7:ee:bc:d5:54:f3: 6f:18:ca:cf:1f:e2:9c:f3:fa:46:e1:69:18:96:b7:80:84:70: 46:92:e4:bb:a7:ff:90:0a:d7:18:ce:86:e8:2f:05:a4:f5:15: 86:2f:71:38:81:34:da:1a:f4:b0:34:f6:6f:2a:c4:96:cb:4b: d6:25:56:9e:46:88:07:d1:0c:a8:f4:08:a1:af:e9:6c:3d:99: 92:91:c2:5f:de:96:43:43:32:aa:7a:08:cf:d4:91:b6:c4:8f: e5:a4:9f:2b:56:3c:bb:69:bd:c6:65:d5:8f:07:c6:90:41:5a: 17:4e:9c:74:9d:38:57:38:2d:64:94:17:ff:46:4c:6c:7f:13: 35:c3:a9:47:d1:51:35:84:be:2d:d1:8a:04:67:79:ff:4a:80: 7b:91:96:e0:f8:50:cd:f0:75:1f:3a:93:93:0e:f3:31:82:14: 3a:4b:35:15:16:ab:57:8d:f6:aa:e9:c4:f8:f7:29:6e:c4:77: 99:50:a4:40:7e:5d:ed:1f:8d:28:35:89:92:b6:5d:ac:0d:38: f7:cb:b4:d8:ea:3f:ff:9a:f9:22:3c:25:4b:6b:95:43:eb:65: 64:82:dc:aa -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26xXtIPVWnnDGaYVMevWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmI1NDhkODU3MjUxMDQ1MjdmM2JlNDc5NzZiNjc0NzM5YWUyZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDvA4w5dmX/ts9S68bl6N3uy574k eHOnum+pPuwFkOxJ/3NjMi8gHz4xZ3LvAJRmECxMFM8/xT0YO+fJkZOGI6HHuzDy NgTwO+9ZzqIM2cYCipvrXYG/bEiqDHIFci8ITeDEnyXv+vviWJtOIAd80mo7QCMH Tn2au+p694ZDhoyBkSRAus9L62YFGvYSuwm1UAm4FV1DwvC58WNi0Jz/ZB6cCrdl rhnQZt0/kI/W18M42EJsn8UT4fCY+t6ZBZ6HuyOPI/i1ghpGGoO+3rmpOi8tVM6f 0MRs4UJ0nSHYD7hP/t7FhjR9Zdpw1Sd8zUwKwO1gyGkDmw6jmb32Us55LwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2U3Y2M2 Yi01MmEwLTRiN2EtOGZjMi03MWM0NmMxOTk2MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvZTdjYzZi LTUyYTAtNGI3YS04ZmMyLTcxYzQ2YzE5OTYzNi8xL3Y3VkkyRmNsRUVVbjg3NUhs MnRuUnptdUx4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufoQMA0EAgACMAcDBQMqC8cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeczANBgkqhkiG9w0BAQsFAAOCAQEAbfEe6cDdf8oI iez+BWRTSqYfyUiVwSzc1QdcoEJ69+681VTzbxjKzx/inPP6RuFpGJa3gIRwRpLk u6f/kArXGM6G6C8FpPUVhi9xOIE02hr0sDT2byrElstL1iVWnkaIB9EMqPQIoa/p bD2ZkpHCX96WQ0MyqnoIz9SRtsSP5aSfK1Y8u2m9xmXVjwfGkEFaF06cdJ04Vzgt ZJQX/0ZMbH8TNcOpR9FRNYS+LdGKBGd5/0qAe5GW4PhQzfB1HzqTkw7zMYIUOks1 FRarV432qunE+PcpbsR3mVCkQH5d7R+NKDWJkrZdrA0498u02Oo//5r5IjwlS2uV Q+tlZILcqg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:20 2026 by rpki-client