This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer File: x7cn_mQvVCkYabzx8pF-D1O-vSI.cer (raw, json) Hash identifier: ueM1VRKe1aOstyHV3TdeP0h4UWSeS/O6gPhhNU3sAcI= Subject key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4F9726E37173148396F97D77E6AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196742 IP: 37.220.152.0/21 IP: 46.183.0.0/21 IP: 109.239.208.0/20 IP: 128.0.160.0/21 IP: 158.255.48.0/21 IP: 185.17.128.0/22 IP: 2a00:7ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4f:97:26:e3:71:73:14:83:96:f9:7d:77:e6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:95:42:38:ac:89:ed:72:e0:c5:1a:4b:b5: db:07:b0:80:8c:02:8b:f6:22:d2:59:f2:56:c9:45: e5:3a:73:3d:96:c6:26:a9:76:77:28:d3:ea:c8:93: 3a:4c:a5:f2:12:66:a5:38:1b:35:6d:c4:05:67:21: 96:6c:d2:47:9f:cb:29:63:5b:a4:57:d1:a0:2a:30: 1a:da:7e:34:aa:80:0c:8c:d9:80:eb:56:20:47:93: 4e:ae:72:ad:dc:23:cb:62:06:e9:30:19:f4:7f:0b: e5:7c:56:bf:4a:21:26:62:b2:96:4e:09:bd:0f:c0: 3f:2d:40:39:9f:a1:05:1f:59:55:fb:ec:bf:ca:4f: cd:96:b2:79:28:4b:52:19:80:8c:e3:45:b6:7d:05: d4:be:49:29:56:df:00:af:71:be:46:4e:fe:4d:87: 92:e0:8b:a8:92:5e:40:0e:91:ee:ee:5f:2c:1f:42: 05:3d:65:e3:64:ab:7d:8d:13:d5:b1:46:24:54:0c: 71:a6:ce:81:d6:2e:8e:ba:39:3a:85:d5:bc:47:e4: 42:5c:a0:76:ca:47:f9:b1:60:f0:49:04:95:f5:91: 0a:04:91:02:5d:c0:6e:aa:be:84:67:e6:0b:88:ce: ad:5a:6d:49:95:e4:2c:1a:08:d7:bd:98:09:7c:7f: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.152.0/21 46.183.0.0/21 109.239.208.0/20 128.0.160.0/21 158.255.48.0/21 185.17.128.0/22 IPv6: 2a00:7ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196742 Signature Algorithm: sha256WithRSAEncryption 67:ce:c0:eb:9d:d3:76:81:23:75:e2:28:f8:d1:b8:1b:af:53: e0:b2:32:d8:21:46:f8:c1:26:bb:d0:17:99:7d:d0:0e:af:fc: d7:88:e3:c6:02:cb:e9:af:4a:2d:71:8a:a1:59:63:95:05:84: c0:59:11:76:1c:a2:b5:34:9e:47:91:ac:14:aa:0d:bc:36:c1: 66:ce:e2:6f:f9:0f:ef:19:b4:e2:ed:35:a7:aa:e4:2c:5e:49: 35:af:d7:1b:75:54:07:af:6e:cb:1a:3b:1f:37:f9:34:e2:b4: 4f:4e:0f:30:f2:eb:9a:5e:da:ea:b8:9c:ca:d9:5c:ce:7f:44: a6:16:70:52:ed:2c:0a:d4:d8:18:19:ef:5c:71:cc:50:3a:02: a1:59:e4:5d:06:2c:26:90:ca:44:4c:38:51:82:71:cc:fb:5b: 05:c3:ee:d8:30:2c:20:4e:6f:64:a2:4a:87:8f:2f:8b:5f:21: 33:a0:40:5a:95:c2:76:05:1c:ef:1f:1d:02:6a:aa:85:4d:bb: 0d:f8:c7:f6:7b:ea:03:68:fc:80:56:64:50:c6:7b:14:a9:ff: 2a:ed:c4:25:a9:c2:b9:d3:34:f2:01:1c:11:db:f1:a1:b5:9e: 6d:a1:84:58:42:f2:53:94:ae:c6:a1:03:af:fc:54:2e:75:c8: 43:9d:c2:6c -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt87U+XJuNxcxSDlvl9d+avMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2I3MjdmZTY0MmY1NDI5MTg2OWJjZjFmMjkxN2UwZjUzYmViZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDeVQjisie1y4MUaS7XbB7CAjAKL 9iLSWfJWyUXlOnM9lsYmqXZ3KNPqyJM6TKXyEmalOBs1bcQFZyGWbNJHn8spY1uk V9GgKjAa2n40qoAMjNmA61YgR5NOrnKt3CPLYgbpMBn0fwvlfFa/SiEmYrKWTgm9 D8A/LUA5n6EFH1lV++y/yk/NlrJ5KEtSGYCM40W2fQXUvkkpVt8Ar3G+Rk7+TYeS 4Iuokl5ADpHu7l8sH0IFPWXjZKt9jRPVsUYkVAxxps6B1i6Oujk6hdW8R+RCXKB2 ykf5sWDwSQSV9ZEKBJECXcBuqr6EZ+YLiM6tWm1JleQsGgjXvZgJfH96pQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMe3J/5kL1QpGGm88fKRfg9Tvr0iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5Lzk4MGJm Yi1jOWI0LTQ0MzMtODkyNy1iNjY3ZTE4ZmQ4MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOTgwYmZi LWM5YjQtNDQzMy04OTI3LWI2NjdlMThmZDgxOC8xL3g3Y25fbVF2VkNrWWFieng4 cEYtRDFPLXZTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDJdyYAwQDLrcAAwQEbe/QAwQDgACgAwQDnv8w AwQCuRGAMA0EAgACMAcDBQAqAHrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMA hjANBgkqhkiG9w0BAQsFAAOCAQEAZ87A653TdoEjdeIo+NG4G69T4LIy2CFG+MEm u9AXmX3QDq/814jjxgLL6a9KLXGKoVljlQWEwFkRdhyitTSeR5GsFKoNvDbBZs7i b/kP7xm04u01p6rkLF5JNa/XG3VUB69uyxo7Hzf5NOK0T04PMPLrml7a6ricytlc zn9EphZwUu0sCtTYGBnvXHHMUDoCoVnkXQYsJpDKREw4UYJxzPtbBcPu2DAsIE5v ZKJKh48vi18hM6BAWpXCdgUc7x8dAmqqhU27DfjH9nvqA2j8gFZkUMZ7FKn/Ku3E JanCudM08gEcEdvxobWebaGEWELyU5SuxqEDr/xULnXIQ53CbA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:57 2026 by rpki-client