This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer File: 1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer (raw, json) Hash identifier: bPpLycy7b2ak8iy1/0g6N2c3xlFXElBiMrqSkFRKzBY= Subject key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3626F9C681FC524A8962C2AD4C894D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211479 IP: 2001:67c:109c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:26:f9:c6:81:fc:52:4a:89:62:c2:ad:4c:89:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:9f:0e:63:ec:60:c0:e1:48:f3:c7:3f:bd: 42:27:7a:0a:29:fc:c6:c0:e4:5a:33:a0:76:09:3e: c5:45:d8:10:19:30:1e:29:54:6c:3e:13:f8:d8:51: 3b:ed:16:9f:dd:1c:a5:a2:d8:80:99:91:ba:59:43: 2c:71:5d:db:b9:22:ba:51:1e:e7:6b:1b:7c:dd:ff: bb:38:17:42:ef:ce:91:a9:84:35:42:f2:ed:7d:3a: ff:ea:0b:db:e4:f7:4e:ad:b7:cb:c4:8d:59:03:cd: 18:17:5f:f5:d0:75:e5:86:48:05:ec:c6:1f:36:d5: b9:38:86:e9:82:e1:fe:aa:da:11:64:a8:f3:c0:6f: 92:4d:87:ff:8c:a6:98:61:e0:30:eb:ae:e5:fa:57: d9:82:3f:5f:4d:5e:12:e0:87:ca:2f:bd:10:9e:d0: ad:d5:fe:8a:8b:df:53:8a:28:2e:c3:6e:ad:d2:e9: c7:a8:5c:11:4e:3e:ed:10:78:dc:e0:fd:26:0d:ba: f1:5e:d4:6c:c4:d6:2c:3a:d6:c3:a2:50:cc:a2:64: ec:2a:2f:0a:31:67:5e:b7:14:cc:27:8a:56:d4:e0: ce:51:41:fb:3d:de:63:d8:29:8b:e4:7f:16:dc:54: 03:de:93:89:01:b5:b4:bb:b5:c7:cd:67:8a:0b:9e: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:109c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211479 Signature Algorithm: sha256WithRSAEncryption 4e:e3:65:fa:4e:8a:f3:d6:c1:dd:9d:ee:72:d8:27:58:a6:ef: da:f7:9c:42:8c:1f:35:53:dc:5a:18:76:83:87:10:19:32:d1: bf:4c:39:fe:11:47:9d:a4:cb:ff:e7:68:da:38:09:3c:f1:59: 06:8e:6e:c9:a2:9d:2c:9e:33:ea:8d:a2:e6:10:ce:e2:a2:d0: 38:62:bd:dc:8e:50:0c:de:ba:c4:16:f1:ac:ef:04:b7:45:c8: 4d:ab:8e:a1:7d:43:1a:9c:e5:0f:68:16:e4:2c:f4:62:83:14: d6:73:06:b0:d9:42:9c:7b:08:f5:83:76:2f:a7:e9:e5:3b:a8: a2:20:af:63:9d:40:17:ac:84:9f:a3:5b:43:9b:66:5f:f4:56: 37:d3:1a:e6:ae:f8:3f:c4:0d:ee:79:5d:51:0f:36:8c:92:68: 99:7a:2c:a0:8b:0b:21:7c:bf:ff:47:bd:e8:8a:f9:a0:aa:9f: 19:89:22:f1:1a:6a:c1:2e:24:0f:f5:2c:cf:7b:19:2b:80:cf: 1b:16:d2:b1:bf:2e:34:a9:98:62:06:e4:aa:f2:46:64:c2:71: 51:7b:b6:e0:0a:41:11:6c:3a:fa:6c:bb:a7:86:19:18:57:7b: 09:5f:6c:91:fe:99:08:b7:e8:74:06:b7:28:81:c8:5b:12:06: 20:e0:ed:41 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt7Nib5xoH8UkqJYsKtTIlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmIwMzAxZWY2ZmY1ODk3YjViZTJjOTQxZGRiNTE5NzhmZDQ4OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfyfDmPsYMDhSPPHP71CJ3oKKfzG wORaM6B2CT7FRdgQGTAeKVRsPhP42FE77Raf3RylotiAmZG6WUMscV3buSK6UR7n axt83f+7OBdC786RqYQ1QvLtfTr/6gvb5PdOrbfLxI1ZA80YF1/10HXlhkgF7MYf NtW5OIbpguH+qtoRZKjzwG+STYf/jKaYYeAw667l+lfZgj9fTV4S4IfKL70QntCt 1f6Ki99Tiiguw26t0unHqFwRTj7tEHjc4P0mDbrxXtRsxNYsOtbDolDMomTsKi8K MWdetxTMJ4pW1ODOUUH7Pd5j2CmL5H8W3FQD3pOJAbW0u7XHzWeKC55BcQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPuwMB72/1iXtb4slB3bUZeP1In/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzQwNWQ5 Yi0xMDczLTRjZDctOTBlYi1lOGY2MGNhYjE4NjYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNDA1ZDli LTEwNzMtNGNkNy05MGViLWU4ZjYwY2FiMTg2Ni8xLzEtN0F3SHZiX1dKZTF2aXlV SGR0Umw0X1VpZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwQnDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDOhcwDQYJKoZIhvcNAQELBQADggEBAE7jZfpOivPWwd2d7nLYJ1im79r3 nEKMHzVT3FoYdoOHEBky0b9MOf4RR52ky//naNo4CTzxWQaObsminSyeM+qNouYQ zuKi0DhivdyOUAzeusQW8azvBLdFyE2rjqF9Qxqc5Q9oFuQs9GKDFNZzBrDZQpx7 CPWDdi+n6eU7qKIgr2OdQBeshJ+jW0ObZl/0VjfTGuau+D/EDe55XVEPNoySaJl6 LKCLCyF8v/9HveiK+aCqnxmJIvEaasEuJA/1LM97GSuAzxsW0rG/LjSpmGIG5Kry RmTCcVF7tuAKQRFsOvpsu6eGGRhXewlfbJH+mQi36HQGtyiByFsSBiDg7UE= -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:21 2026 by rpki-client