This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer File: we7iyrhrXuQPwncMqMtcUMYrdVs.cer (raw, json) Hash identifier: TMf+XQ7FV2iBnD79Bvsk5GC3LrqnkusVbFEkxK2ibXo= Subject key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B96AE375778951ADCFE5B84990124 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43067 IP: 91.196.80.0/22 IP: 91.234.72.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:96:ae:37:57:78:95:1a:dc:fe:5b:84:99:01:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:00:0e:13:ad:8c:29:28:69:4a:3d:46:37: 09:30:de:26:18:9d:7f:af:52:77:cf:03:6b:0d:e2: 1a:06:42:94:57:74:7c:64:a4:a2:51:99:a4:c1:82: 18:97:92:fc:6d:8f:8c:f7:5a:7e:7b:c4:db:fd:ca: 62:e3:7d:76:f6:3e:6c:77:08:74:e5:9a:46:c1:5f: 2c:74:50:47:a0:03:e3:d8:44:a3:5a:45:32:39:a3: 35:c5:0e:ff:48:7d:05:0c:47:2d:08:f3:37:db:ac: d1:ae:a9:cb:30:02:7b:0d:af:ff:d8:ef:9e:55:3a: e7:be:85:69:af:4f:1e:41:eb:fd:3b:63:dd:77:2d: 7c:37:ed:02:59:ec:62:fb:b2:49:9e:3b:b1:8b:63: 56:08:03:c6:23:09:3d:c8:27:de:98:46:ee:04:41: 2d:59:f1:05:87:8f:57:1c:05:f6:0f:ad:f6:97:29: b3:ed:93:0a:d1:53:ae:82:78:60:eb:84:56:56:07: 6a:d1:3e:eb:36:50:ec:d9:7e:70:28:ad:ca:cc:9d: 15:de:d1:f9:84:b3:32:8e:15:3b:16:cb:52:76:35: 9a:62:9b:d2:c0:4a:a4:42:3d:0a:34:70:a1:3a:86: c3:b4:b6:f3:ee:0b:a3:47:32:d9:eb:c2:0d:b8:66: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.80.0/22 91.234.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43067 Signature Algorithm: sha256WithRSAEncryption 57:03:c2:9e:79:b0:1c:83:86:be:7e:bd:2d:72:e6:c1:c0:41: 51:c5:aa:a6:b2:e9:41:86:06:5b:cb:a0:a8:56:68:2d:26:5d: a6:7b:57:2a:1a:e9:5b:48:fe:c1:63:f3:09:e4:f2:cc:81:47: 5d:f9:18:cb:fd:09:53:aa:7a:9c:cf:5d:ab:ac:21:60:31:e8: 5f:f5:40:bc:78:57:ae:ce:5b:dd:a6:0b:a1:27:ac:9f:a8:21: d8:ea:6c:60:63:b0:ec:2f:f0:4a:98:c3:ad:58:bd:19:dd:52: 72:b7:3c:a1:0e:0b:36:42:b0:58:a9:f8:55:83:5b:1d:cd:a0: 95:45:8e:92:7d:0e:3d:cb:1f:3b:bb:13:ac:7a:df:e2:bd:52: c6:78:d8:b0:e4:17:52:c5:04:91:69:39:08:c3:71:f0:f3:33: fb:da:18:ab:69:43:68:c4:6f:ca:88:c3:f6:94:f8:60:56:5b: af:14:0b:89:e6:03:78:6f:75:3a:61:f3:5f:86:b6:c4:37:4a: 31:f0:25:b4:30:20:1c:3b:e5:e8:d3:cd:de:03:41:9a:a4:1e: 70:bf:ab:52:d6:06:40:27:49:14:3a:24:d6:0f:25:d3:05:b1: 25:35:2b:54:8e:c4:54:50:20:09:09:88:18:eb:e5:c0:d5:f5: 63:f2:8a:51 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9W5auN1d4lRrc/luEmQEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWVlZTJjYWI4NmI1ZWU0MGZjMjc3MGNhOGNiNWM1MGM2MmI3NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJAADhOtjCkoaUo9RjcJMN4mGJ1/ r1J3zwNrDeIaBkKUV3R8ZKSiUZmkwYIYl5L8bY+M91p+e8Tb/cpi43129j5sdwh0 5ZpGwV8sdFBHoAPj2ESjWkUyOaM1xQ7/SH0FDEctCPM326zRrqnLMAJ7Da//2O+e VTrnvoVpr08eQev9O2Pddy18N+0CWexi+7JJnjuxi2NWCAPGIwk9yCfemEbuBEEt WfEFh49XHAX2D632lymz7ZMK0VOugnhg64RWVgdq0T7rNlDs2X5wKK3KzJ0V3tH5 hLMyjhU7FstSdjWaYpvSwEqkQj0KNHChOobDtLbz7gujRzLZ68INuGZ5SQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFMHu4sq4a17kD8J3DKjLXFDGK3VbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzYxZjNk OC0xYTI0LTQ0NmYtYTJiMi0wZDA3NjUyZTRjYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjFmM2Q4 LTFhMjQtNDQ2Zi1hMmIyLTBkMDc2NTJlNGNhYi8xL3dlN2l5cmhyWHVRUHduY01x TXRjVU1ZcmRWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8RQAwQCW+pIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCoOzANBgkqhkiG9w0BAQsFAAOCAQEAVwPCnnmwHIOGvn69LXLmwcBB UcWqprLpQYYGW8ugqFZoLSZdpntXKhrpW0j+wWPzCeTyzIFHXfkYy/0JU6p6nM9d q6whYDHoX/VAvHhXrs5b3aYLoSesn6gh2OpsYGOw7C/wSpjDrVi9Gd1Scrc8oQ4L NkKwWKn4VYNbHc2glUWOkn0OPcsfO7sTrHrf4r1SxnjYsOQXUsUEkWk5CMNx8PMz +9oYq2lDaMRvyojD9pT4YFZbrxQLieYDeG91OmHzX4a2xDdKMfAltDAgHDvl6NPN 3gNBmqQecL+rUtYGQCdJFDok1g8l0wWxJTUrVI7EVFAgCQmIGOvlwNX1Y/KKUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:28 2026 by rpki-client