This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer File: 0l7-VEtjV8f7woGy5BscsudD6Jw.cer (raw, json) Hash identifier: JeokoFabaYBLLYxTgo7o1LZD4YQJyQUlHak62jdWOlA= Subject key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B80203BEE794AF6B901A6930212CC7F4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 19:12:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203031 AS: 210440 IP: 194.153.159.128/26 IP: 2001:678:120::/48 IP: 2001:678:10d0::/48 IP: 2001:7f8:fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:20:3b:ee:79:4a:f6:b9:01:a6:93:02:12:cc:7f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 19:12:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:6f:09:84:60:86:01:5e:4c:b6:d7:15:1d: 7c:78:10:6a:72:f4:b2:3c:a8:29:fd:3f:73:44:a0: 3c:8a:5e:89:35:49:86:ad:25:50:59:b9:6f:98:e4: 92:f4:44:5d:07:a2:5f:97:ae:44:16:1c:31:40:6b: 9b:be:74:21:d6:46:e3:b3:2c:64:ea:8e:d7:73:11: 25:95:31:db:f2:5b:92:d2:fa:5b:df:2a:25:49:ff: ed:1a:3b:99:89:c9:06:27:2b:bc:c7:39:1b:e9:67: 9a:e4:8f:1e:f6:bd:92:f0:77:e6:bf:df:45:df:4f: dd:52:49:25:06:9a:20:cc:1b:ab:41:3f:13:b2:8b: ff:b8:bc:86:7f:d7:99:ff:d8:ed:60:d1:22:d4:90: 8f:1f:e4:f3:47:d1:34:ed:b3:44:a6:b5:3c:b2:0d: 45:e8:a8:53:5c:df:8e:3e:9c:30:ad:99:23:37:56: 33:14:e3:2f:0e:bb:50:63:dd:2c:1b:47:4d:59:4b: 6d:49:80:8d:5f:49:61:89:02:82:80:43:aa:9e:ff: 63:8f:3c:d5:5e:91:d0:78:50:48:67:c6:08:95:5f: a1:d6:f8:80:d8:a9:95:f7:b3:7e:fc:1f:8b:64:8e: f7:9d:96:60:fc:b4:e0:ad:f5:98:38:87:f1:3f:aa: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.128/26 IPv6: 2001:678:120::/48 2001:678:10d0::/48 2001:7f8:fc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203031 210440 Signature Algorithm: sha256WithRSAEncryption 87:6c:f2:a1:a4:dc:34:8e:e2:a6:1c:df:10:c5:55:42:8e:b5: 80:a2:1b:2e:b6:82:21:28:4b:bb:81:17:33:ce:a3:ab:1d:61: b8:15:c7:2b:fe:bc:08:df:75:07:c1:22:10:d2:2c:b1:80:69: 73:de:fa:82:0e:62:1b:57:3a:2b:51:ef:59:ae:73:e9:df:81: de:f7:5e:11:fc:80:25:d3:49:b2:20:18:bd:cb:3b:58:eb:24: 34:6b:d1:d3:c6:ec:e0:a4:be:a0:6a:df:65:64:25:cf:87:b9: fa:29:fd:15:9c:70:2e:2a:3d:7d:2a:5f:b0:72:ae:f5:81:ae: f6:cf:42:e2:d0:fc:24:4a:bb:bb:39:b6:29:5f:58:9d:e1:d3: bc:e7:77:b6:6b:5e:5e:f4:2f:a1:5b:73:32:e8:4f:80:62:eb: e9:7a:97:07:9d:84:4e:b2:d0:d5:df:da:d9:db:09:72:13:b7: cc:d7:1f:db:71:c0:5d:f3:50:d0:51:82:42:33:b9:55:bf:3e: 90:14:04:dd:a7:cd:38:09:44:0a:b3:cb:55:31:65:d8:14:3c: be:c4:1d:fe:42:f8:53:63:76:ab:e4:52:d2:01:b8:d3:f2:ab: eb:8a:66:a6:46:c1:f0:77:eb:bf:9c:b4:69:b1:15:9f:fa:75: 8c:77:e4:2c -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZuAIDvueUr2uQGmkwISzH9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTkxMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjVlZmU1NDRiNjM1N2M3ZmJjMjgxYjJlNDFiMWNiMmU3NDNlODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlRvCYRghgFeTLbXFR18eBBqcvSy PKgp/T9zRKA8il6JNUmGrSVQWblvmOSS9ERdB6Jfl65EFhwxQGubvnQh1kbjsyxk 6o7XcxEllTHb8luS0vpb3yolSf/tGjuZickGJyu8xzkb6Wea5I8e9r2S8Hfmv99F 30/dUkklBpogzBurQT8Tsov/uLyGf9eZ/9jtYNEi1JCPH+TzR9E07bNEprU8sg1F 6KhTXN+OPpwwrZkjN1YzFOMvDrtQY90sG0dNWUttSYCNX0lhiQKCgEOqnv9jjzzV XpHQeFBIZ8YIlV+h1viA2KmV97N+/B+LZI73nZZg/LTgrfWYOIfxP6omdwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFNJe/lRLY1fH+8KBsuQbHLLnQ+icMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzdkOGI0 MS1iYzY2LTRhNWYtODJlNi1hODJjYmJjNzM2NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvN2Q4YjQx LWJjNjYtNGE1Zi04MmU2LWE4MmNiYmM3MzY3NS8xLzBsNy1WRXRqVjhmN3dvR3k1 QnNjc3VkRDZKdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjANBAIAATAHAwUGwpmfgDAhBAIAAjAbAwcAIAEGeAEgAwcAIAEG eBDQAwcAIAEH+AD8MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMZFwIDAzYIMA0G CSqGSIb3DQEBCwUAA4IBAQCHbPKhpNw0juKmHN8QxVVCjrWAohsutoIhKEu7gRcz zqOrHWG4Fccr/rwI33UHwSIQ0iyxgGlz3vqCDmIbVzorUe9ZrnPp34He914R/IAl 00myIBi9yztY6yQ0a9HTxuzgpL6gat9lZCXPh7n6Kf0VnHAuKj19Kl+wcq71ga72 z0Li0PwkSru7ObYpX1id4dO853e2a15e9C+hW3My6E+AYuvpepcHnYROstDV39rZ 2wlyE7fM1x/bccBd81DQUYJCM7lVvz6QFATdp804CUQKs8tVMWXYFDy+xB3+QvhT Y3ar5FLSAbjT8qvrimamRsHwd+u/nLRpsRWf+nWMd+Qs -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:19 2026 by rpki-client