This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer File: 7C6CHYjeegETQXBCAjRvfCu5688.cer (raw, json) Hash identifier: EGVx7hED4fE4iZKMStm2MTCbMlKVRMdDILZ+B8h3YYQ= Subject key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F828F261E8B7350DDF52F8C80EE16C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35720 IP: 91.219.184.0/22 IP: 194.79.24.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:8f:26:1e:8b:73:50:dd:f5:2f:8c:80:ee:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:02:cb:7c:d9:b0:c2:2a:cd:11:83:89:2e:79: fc:7e:90:d4:4a:ab:ab:9f:4b:23:df:cb:a0:60:07: 1e:e7:70:2c:f0:80:f8:3b:55:21:49:25:7b:30:52: 3b:6f:00:36:d9:ae:60:25:cc:7b:de:d3:83:18:c0: 3c:22:e9:d1:1f:01:04:3e:7f:a4:bd:9c:a0:0f:74: 8b:eb:dc:14:72:4d:70:3a:ff:05:f7:b9:89:32:76: af:49:64:2c:b3:8f:88:d2:a3:16:9d:7e:23:4d:ec: 90:f8:9e:c3:c9:71:8e:56:38:fd:44:06:9f:65:3e: 9b:fc:47:55:a1:d5:12:48:ed:30:13:94:52:c5:b6: 6c:0b:cb:24:ad:f6:87:04:b3:34:c2:f0:6d:77:a6: 8a:34:12:a5:b8:7e:ab:2a:b8:07:98:5b:a3:56:30: 1f:8d:fc:a6:ea:fc:b4:24:ba:0c:53:f1:c3:11:03: 6e:5d:b1:75:7b:38:5e:38:75:c2:0c:d8:da:33:5f: 33:7d:73:0a:0e:23:45:3a:3b:45:b9:cd:ad:26:49: ff:b4:07:85:89:9c:4f:22:7c:1b:f3:fb:59:6d:84: fd:2c:ed:25:24:5e:3e:cb:5f:26:85:80:ee:c4:b2: d0:5e:b0:08:1c:54:25:4e:47:6b:6a:d7:b6:3e:bd: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.184.0/22 194.79.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35720 Signature Algorithm: sha256WithRSAEncryption a7:c4:18:7c:75:76:4e:f0:16:e3:ea:f2:4a:76:46:8a:f7:c3: e6:07:cd:50:ca:f1:5a:5c:61:2f:67:f3:c0:e2:a7:46:d1:e7: 94:f7:19:72:e3:05:17:4b:f1:9f:41:06:7e:fd:f6:10:5e:16: 06:07:89:55:fc:a6:24:86:da:26:eb:ff:15:3c:de:7c:f8:55: 1b:ec:8b:93:c1:28:62:1b:36:f4:7e:9e:76:36:ad:4e:fa:59: 03:61:79:5a:77:4a:1e:be:2a:01:b9:d3:44:87:3d:05:89:68: 8f:1f:8b:28:24:48:1b:ce:75:2d:2b:ff:3b:f9:ab:0b:d2:91: 1a:f6:84:04:21:9e:0a:bc:3c:33:82:27:01:11:87:37:e3:a8: b9:dd:dd:73:ef:df:53:b2:dc:ac:13:00:a4:70:46:79:ca:de: 3d:8c:5b:f6:4e:7e:c6:8d:63:bf:38:2b:50:2d:a5:56:4b:9a: 54:7d:bc:5f:8b:ff:06:2f:a9:45:0f:b0:be:49:39:52:ac:3b: 6e:b6:b9:18:49:cc:a9:13:ce:10:fa:ce:00:60:3f:5a:77:27: 9b:97:98:c0:30:fb:d8:ca:f9:04:fa:6f:6c:a2:5e:f1:c3:a9: 27:d5:db:60:1a:ea:3a:68:47:11:9b:a4:bc:df:c5:b7:7a:f3: ac:ce:f0:7f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/go8mHotzUN31L4yA7hbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzJlODIxZDg4ZGU3YTAxMTM0MTcwNDIwMjM0NmY3YzJiYjllYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gLLfNmwwirNEYOJLnn8fpDUSqur n0sj38ugYAce53As8ID4O1UhSSV7MFI7bwA22a5gJcx73tODGMA8IunRHwEEPn+k vZygD3SL69wUck1wOv8F97mJMnavSWQss4+I0qMWnX4jTeyQ+J7DyXGOVjj9RAaf ZT6b/EdVodUSSO0wE5RSxbZsC8skrfaHBLM0wvBtd6aKNBKluH6rKrgHmFujVjAf jfym6vy0JLoMU/HDEQNuXbF1ezheOHXCDNjaM18zfXMKDiNFOjtFuc2tJkn/tAeF iZxPInwb8/tZbYT9LO0lJF4+y18mhYDuxLLQXrAIHFQlTkdrate2Pr2SbQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOwugh2I3noBE0FwQgI0b3wruevPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzdkZGE0 Zi1mMGM3LTQwMDgtOWFiOS1kZmEwYjgwNTI2MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvN2RkYTRm LWYwYzctNDAwOC05YWI5LWRmYTBiODA1MjYxNC8xLzdDNkNIWWplZWdFVFFYQkNB alJ2ZkN1NTY4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9u4AwQCwk8YMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCLiDANBgkqhkiG9w0BAQsFAAOCAQEAp8QYfHV2TvAW4+rySnZGivfD 5gfNUMrxWlxhL2fzwOKnRtHnlPcZcuMFF0vxn0EGfv32EF4WBgeJVfymJIbaJuv/ FTzefPhVG+yLk8EoYhs29H6edjatTvpZA2F5WndKHr4qAbnTRIc9BYlojx+LKCRI G851LSv/O/mrC9KRGvaEBCGeCrw8M4InARGHN+Ooud3dc+/fU7LcrBMApHBGecre PYxb9k5+xo1jvzgrUC2lVkuaVH28X4v/Bi+pRQ+wvkk5Uqw7bra5GEnMqRPOEPrO AGA/Wncnm5eYwDD72Mr5BPpvbKJe8cOpJ9XbYBrqOmhHEZukvN/Ft3rzrM7wfw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:04 2026 by rpki-client