This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer (raw, json) Hash identifier: VXXxchVnistEuvQB9Cr4t3Sea4WYltGFOBqnLbUgAMA= Subject key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6A12266B4FE10108FAA66FD1FEB7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206755 IP: 185.177.56.0/22 IP: 2a0a:3180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a1:22:66:b4:fe:10:10:8f:aa:66:fd:1f:eb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:2c:b6:4b:83:d5:1d:b6:19:57:fc:47:01: 8f:cc:86:b5:95:58:94:82:5c:4c:ce:89:1b:a5:ce: 79:28:ec:3a:3c:08:18:cd:ea:35:77:24:e1:05:3d: 2b:67:59:bb:ba:45:a3:01:a6:09:64:3a:5d:1a:2d: ac:bb:52:9c:41:3e:f0:b1:ab:9b:29:6f:27:d0:d4: 52:61:eb:04:63:51:19:da:68:79:c9:08:8e:40:de: 69:12:39:8f:58:bb:11:08:61:f3:62:79:cb:93:9a: 67:51:13:95:65:d5:12:9b:fe:10:8c:94:d5:85:fa: 6b:9c:8d:9f:22:8c:13:7a:32:be:ee:8a:0e:89:9b: 4a:eb:a0:f8:84:ef:9b:f1:24:92:ae:46:dc:4f:ad: eb:9e:9d:28:9e:00:9d:c5:fa:31:62:ac:1f:3f:09: 9e:9f:7e:8a:b6:bb:d7:3c:a4:72:80:37:e5:df:2e: 81:94:bd:e1:eb:2b:7f:da:ba:ce:b7:9d:f2:3e:90: e9:33:4a:48:78:6a:a1:22:fc:0f:2f:1e:73:b4:30: 42:5d:1e:34:f0:6c:1c:46:82:23:d6:a6:ca:31:3d: 8e:7d:e5:41:fe:b1:1d:fd:28:4d:28:c8:b4:c8:6a: 17:7a:b9:ca:3b:eb:e5:b3:c1:84:e9:2f:b3:0b:41: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.56.0/22 IPv6: 2a0a:3180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206755 Signature Algorithm: sha256WithRSAEncryption 91:5d:63:57:98:a3:a2:79:65:f0:ac:cd:8d:48:a3:6c:48:7e: 81:8d:81:70:22:9e:dc:0e:52:b0:d9:b6:73:c0:c8:32:27:8a: 35:7a:1a:8e:f6:21:e5:af:7f:f4:ec:5e:eb:1b:46:eb:ad:67: cb:f5:7f:ec:6d:3e:a1:d8:c5:7a:96:11:ce:a2:21:65:1c:2f: 67:c5:4e:2a:19:40:01:38:28:ac:38:27:cc:21:90:5e:55:55: d7:f8:31:12:3d:5f:41:0b:e5:59:92:78:e6:b7:a5:22:83:fd: f3:b8:3a:fa:d0:1d:a1:d7:dc:97:21:6f:2f:84:f3:17:16:a3: 7c:dd:ba:22:c0:d2:22:7f:f0:65:e8:52:3c:cf:c7:12:2e:9f: 14:ad:05:83:3a:59:d4:cd:fb:70:de:be:f9:f8:62:35:af:e3: 1d:47:fd:5c:19:15:e1:0f:3e:f8:81:5e:4c:8c:5b:1a:7a:b4: 13:bd:50:86:43:ab:71:4b:5e:6f:4d:1f:36:7e:0f:10:f6:2d: 87:55:3b:4f:2c:82:3f:6a:c2:c1:d0:fb:84:2e:0b:f1:3c:9d: 47:58:ce:11:42:1d:eb:cd:73:99:f4:42:ef:d9:fa:6f:98:84: cc:01:03:d3:9f:f8:18:32:68:d3:db:20:b1:88:0e:bd:62:ea: b0:28:20:6b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pqEiZrT+EBCPqmb9H+t8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDVlZDdhNTgxNDdhYTUxNGM4ZTZkYWZiY2M1ZDg3NTdjN2QzMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVostkuD1R22GVf8RwGPzIa1lViU glxMzokbpc55KOw6PAgYzeo1dyThBT0rZ1m7ukWjAaYJZDpdGi2su1KcQT7wsaub KW8n0NRSYesEY1EZ2mh5yQiOQN5pEjmPWLsRCGHzYnnLk5pnUROVZdUSm/4QjJTV hfprnI2fIowTejK+7ooOiZtK66D4hO+b8SSSrkbcT63rnp0ongCdxfoxYqwfPwme n36KtrvXPKRygDfl3y6BlL3h6yt/2rrOt53yPpDpM0pIeGqhIvwPLx5ztDBCXR40 8GwcRoIj1qbKMT2OfeVB/rEd/ShNKMi0yGoXernKO+vls8GE6S+zC0EoVQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNBe16WBR6pRTI5tr7zF2HV8fTJyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzI0ZmJm Yy1kOTAyLTQ5ZGItOTc4YS0zNWEyMGZmODkyM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvMjRmYmZj LWQ5MDItNDlkYi05NzhhLTM1YTIwZmY4OTIzZS8xLzBGN1hwWUZIcWxGTWptMnZ2 TVhZZFh4OU1uSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubE4MA0EAgACMAcDBQMqCjGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnozANBgkqhkiG9w0BAQsFAAOCAQEAkV1jV5ijonll 8KzNjUijbEh+gY2BcCKe3A5SsNm2c8DIMieKNXoajvYh5a9/9Oxe6xtG661ny/V/ 7G0+odjFepYRzqIhZRwvZ8VOKhlAATgorDgnzCGQXlVV1/gxEj1fQQvlWZJ45rel IoP987g6+tAdodfclyFvL4TzFxajfN26IsDSIn/wZehSPM/HEi6fFK0FgzpZ1M37 cN6++fhiNa/jHUf9XBkV4Q8++IFeTIxbGnq0E71QhkOrcUteb00fNn4PEPYth1U7 TyyCP2rCwdD7hC4L8TydR1jOEUId681zmfRC79n6b5iEzAED05/4GDJo09sgsYgO vWLqsCggaw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:54 2026 by rpki-client