This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer (raw, json) Hash identifier: WpycJEu+K2E9cKnUFd6vBWZ56OVc9O1NJLSJkbdK470= Subject key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB0095154D2042D772DA6B36BA3150 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42043 IP: 185.88.152.0/22 IP: 193.186.32.0/24 IP: 2a03:7ee0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:00:95:15:4d:20:42:d7:72:da:6b:36:ba:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:af:d4:cb:17:42:cb:d8:74:58:57:0f:c2: aa:91:fa:86:56:69:0b:09:b5:c6:6f:17:dc:b9:d0: 88:ec:0a:26:d8:26:cb:1f:a6:d4:5a:3b:e6:58:71: bb:e0:1e:f9:9c:d7:05:69:98:96:67:bf:ab:8e:eb: 3f:26:48:03:df:76:79:2e:66:68:28:95:0e:10:63: 7b:1f:c9:26:78:b9:77:75:da:0e:85:3b:3e:60:3c: 4f:05:6c:a7:46:b4:b1:75:6f:e2:a0:5c:b4:44:46: 9b:94:aa:16:19:d5:b6:d0:99:d5:ce:46:34:00:69: bc:33:81:fc:ce:29:ac:b9:61:19:cf:3e:5a:d5:45: 0f:97:4f:95:53:c7:2f:c0:85:ce:25:1d:5f:53:13: b1:b6:17:83:30:17:14:5d:a5:c4:58:82:5c:e3:32: 3e:de:f3:54:28:67:25:b4:df:88:45:0d:8f:01:8c: b6:43:f1:81:a7:1d:fc:f0:26:f8:47:66:ad:a7:1b: a6:d2:d2:c4:46:73:f4:ec:50:aa:2f:67:93:8a:55: 25:ef:c2:d0:c6:67:a5:49:50:7a:0e:08:bf:ce:f8: 70:a1:30:21:ad:67:93:48:4d:09:07:fa:de:51:ba: c0:0d:a6:50:a8:f4:23:bd:bf:78:46:67:c0:35:17: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.152.0/22 193.186.32.0/24 IPv6: 2a03:7ee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42043 Signature Algorithm: sha256WithRSAEncryption 6a:2a:81:ff:7e:c3:8a:69:26:03:fd:7b:2a:7b:ae:2b:f3:8f: b2:78:18:ff:06:13:e9:8a:b3:ff:57:e6:76:9c:58:64:02:2c: 50:15:f0:da:93:1e:e6:f4:b5:c9:1e:b8:3c:db:8b:8a:53:8b: f5:4b:58:37:78:2a:91:78:29:34:65:6b:94:20:3c:ce:57:53: 6e:e1:04:43:7f:3c:53:46:fe:b4:0e:c5:c6:6e:86:88:51:d7: b4:d1:10:43:c8:92:ba:dd:9a:cc:94:7b:83:6f:df:69:55:5c: 53:17:ad:37:fe:f2:92:7e:cd:87:b7:1d:65:9d:62:db:2c:35: 62:19:3a:69:67:ff:b3:74:88:72:2a:60:d3:df:d9:3b:bc:e3: 70:46:b7:21:cd:04:44:b2:07:e1:c5:c7:03:07:85:09:b2:2b: 1c:c4:22:9a:81:be:5d:33:51:5e:c5:f5:69:3c:50:b8:ee:2c: a6:7a:90:53:17:d5:f5:13:68:b2:a9:ff:eb:60:49:c0:10:29: 27:1a:2d:14:1d:04:98:dc:c3:0e:90:33:59:3f:13:8a:6b:42: 43:38:8a:57:c8:24:f1:e5:3a:67:5c:af:6e:a5:11:97:d9:67: 2b:e3:6f:98:2e:c0:ce:a1:f7:6f:68:a1:1b:10:31:05:45:28: fb:46:bd:1b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9ywCVFU0gQtdy2ms2ujFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQ3YmJmY2MyYjhmYWI2NmE1ODFiODIyN2NhMGFjODE3ZmExNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2auv1MsXQsvYdFhXD8KqkfqGVmkL CbXGbxfcudCI7Aom2CbLH6bUWjvmWHG74B75nNcFaZiWZ7+rjus/JkgD33Z5LmZo KJUOEGN7H8kmeLl3ddoOhTs+YDxPBWynRrSxdW/ioFy0REablKoWGdW20JnVzkY0 AGm8M4H8zimsuWEZzz5a1UUPl0+VU8cvwIXOJR1fUxOxtheDMBcUXaXEWIJc4zI+ 3vNUKGcltN+IRQ2PAYy2Q/GBpx388Cb4R2atpxum0tLERnP07FCqL2eTilUl78LQ xmelSVB6Dgi/zvhwoTAhrWeTSE0JB/reUbrADaZQqPQjvb94RmfANRdhuwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFL/Xu/zCuPq2algbgifKCsgX+hRrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzgyZmIw NS02MWU2LTQzMzUtYjE2Ny0zNmFlZDg3ZTMzODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvODJmYjA1 LTYxZTYtNDMzNS1iMTY3LTM2YWVkODdlMzM4OC8xL3Y5ZTdfTUs0LXJacVdCdUNK OG9LeUJmNkZHcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuViYAwQAwbogMA0EAgACMAcDBQAqA37gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCkOzANBgkqhkiG9w0BAQsFAAOCAQEAaiqB /37DimkmA/17KnuuK/OPsngY/wYT6Yqz/1fmdpxYZAIsUBXw2pMe5vS1yR64PNuL ilOL9UtYN3gqkXgpNGVrlCA8zldTbuEEQ388U0b+tA7Fxm6GiFHXtNEQQ8iSut2a zJR7g2/faVVcUxetN/7ykn7Nh7cdZZ1i2yw1Yhk6aWf/s3SIcipg09/ZO7zjcEa3 Ic0ERLIH4cXHAweFCbIrHMQimoG+XTNRXsX1aTxQuO4spnqQUxfV9RNosqn/62BJ wBApJxotFB0EmNzDDpAzWT8TimtCQziKV8gk8eU6Z1yvbqURl9lnK+NvmC7AzqH3 b2ihGxAxBUUo+0a9Gw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:44 2026 by rpki-client