This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer File: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer (raw, json) Hash identifier: Gdzq7QxrFigL0bSTuMI0MJcSK6RYLqpd00gXk1iLuro= Subject key identifier: BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E381BF411E14F05328BC1EE7B79497B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215113 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1b:f4:11:e1:4f:05:32:8b:c1:ee:7b:79:49:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:49:d2:68:c8:2c:cd:cf:5d:d6:2f:a9:cc: b0:ef:b3:49:5e:13:24:0e:13:9b:5c:dc:15:1c:be: de:07:49:77:1e:d1:86:b3:cf:0a:c6:ba:10:f6:07: 83:8a:a8:81:d7:18:cc:a0:7d:b6:4b:d2:ae:d5:62: fc:b4:87:15:9e:c9:d9:03:4d:02:dc:2e:09:40:a6: 4a:89:4a:1c:0d:6b:10:62:a9:16:89:ac:5e:1c:fd: 7f:d7:37:3b:e4:22:7f:cb:9c:b8:4e:5c:2a:95:aa: 1b:1b:73:a6:61:b0:0b:b8:16:e9:e0:43:15:44:b2: b4:03:a5:9a:82:d1:9a:85:1c:0a:a3:2f:95:46:0d: 12:00:0e:3e:31:1a:db:bf:d9:53:89:0a:22:99:3e: 38:3f:12:bc:c4:76:09:51:c5:78:82:51:fd:ac:52: 37:d7:69:d0:b6:ea:58:aa:24:94:e0:31:40:35:6e: 55:e3:5f:95:77:3e:5f:0f:d3:fc:34:72:d6:27:f0: 7b:b4:12:f2:8a:d1:85:f3:76:93:ab:4d:f5:b3:54: d5:8e:61:67:0f:7e:e6:f1:ed:53:3d:16:02:0d:d2: 86:b1:8e:26:bb:aa:6e:28:a2:7d:3f:78:3b:a5:65: 63:9d:6a:6f:b3:e8:af:b9:98:de:1d:45:3c:43:41: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215113 Signature Algorithm: sha256WithRSAEncryption 24:25:a2:4d:78:05:cd:87:01:3d:0a:e4:7b:4d:e9:12:bb:4e: b4:22:ce:a6:65:ea:fe:be:a4:17:f8:bd:b7:ad:5d:aa:0a:5f: 06:94:38:66:22:50:5f:85:4c:13:4c:90:44:5d:f9:9e:0f:7a: dc:aa:b9:c5:08:d7:95:82:22:fb:e9:3f:71:49:ad:ed:de:a8: 5c:32:7c:d3:b2:04:43:f3:9d:e1:49:47:63:ef:2b:92:03:df: 40:50:11:80:53:84:13:f9:7f:14:e8:9a:8a:10:47:e8:9d:0f: 67:d5:c3:8e:f1:98:d3:12:2d:c5:cf:22:3d:24:c2:ab:9e:d7: a9:ce:13:1c:50:c8:8c:14:8d:4c:37:a6:e6:4a:de:0e:b9:ee: 01:fc:a3:c1:31:b1:e4:60:26:f2:49:e5:8e:24:e9:97:9e:b5: 19:80:2f:24:9d:6f:b6:f6:df:ec:88:91:12:c4:2b:da:57:db: 9a:b4:22:13:df:1c:dc:e5:d8:ac:d6:27:52:3e:4e:8e:b9:42: 80:1b:ce:c2:0b:f4:49:9c:97:c4:95:47:88:48:c9:0f:54:c7: 79:be:b3:ef:df:cf:99:b2:e7:2a:96:7b:15:88:e0:ca:61:bc: e9:23:5b:2a:5f:8c:bd:ec:12:a8:24:30:d2:c9:16:bd:23:4c: c7:02:38:fa -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OBv0EeFPBTKLwe57eUl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmJjOGE4NjY4ZjUwZmRhZjQ5NGY1MjhhMmNhYWZkMDJiN2MzMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a1J0mjILM3PXdYvqcyw77NJXhMk DhObXNwVHL7eB0l3HtGGs88KxroQ9geDiqiB1xjMoH22S9Ku1WL8tIcVnsnZA00C 3C4JQKZKiUocDWsQYqkWiaxeHP1/1zc75CJ/y5y4TlwqlaobG3OmYbALuBbp4EMV RLK0A6WagtGahRwKoy+VRg0SAA4+MRrbv9lTiQoimT44PxK8xHYJUcV4glH9rFI3 12nQtupYqiSU4DFANW5V41+Vdz5fD9P8NHLWJ/B7tBLyitGF83aTq031s1TVjmFn D37m8e1TPRYCDdKGsY4mu6puKKJ9P3g7pWVjnWpvs+ivuZjeHUU8Q0H0BQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL+8ioZo9Q/a9JT1KKLKr9ArfDGtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2NiODhh ZS1mMDIwLTQ0ZDktYjQ2Mi1kYTYxOTliODJmMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvY2I4OGFl LWYwMjAtNDRkOS1iNDYyLWRhNjE5OWI4MmYxMS8xL3Y3eUtobWoxRDlyMGxQVW9v c3F2MEN0OE1hMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNISTANBgkqhkiG9w0BAQsFAAOCAQEAJCWiTXgFzYcB PQrke03pErtOtCLOpmXq/r6kF/i9t61dqgpfBpQ4ZiJQX4VME0yQRF35ng963Kq5 xQjXlYIi++k/cUmt7d6oXDJ807IEQ/Od4UlHY+8rkgPfQFARgFOEE/l/FOiaihBH 6J0PZ9XDjvGY0xItxc8iPSTCq57Xqc4THFDIjBSNTDem5kreDrnuAfyjwTGx5GAm 8knljiTpl561GYAvJJ1vtvbf7IiREsQr2lfbmrQiE98c3OXYrNYnUj5OjrlCgBvO wgv0SZyXxJVHiEjJD1THeb6z79/PmbLnKpZ7FYjgymG86SNbKl+MvewSqCQw0skW vSNMxwI4+g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:00 2026 by rpki-client