This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer (raw, json) Hash identifier: lU9wEyxUFmzby0mFUkp9wUDCo0VZcdZ05quc4tjUDvM= Subject key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BA8DC2078158D1B771A9F81A06392 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:25c::/48 IP: 2001:67c:1998::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a8:dc:20:78:15:8d:1b:77:1a:9f:81:a0:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:9e:6c:61:21:33:b9:6c:0c:1e:7c:e5:4a: fc:a6:a1:1b:28:db:1c:87:d2:98:ac:23:ff:55:0e: f6:05:5a:88:35:ca:a8:4c:c6:6a:54:f6:53:a9:09: 83:dd:71:c7:bc:89:da:1b:b4:ee:4f:21:ba:f3:7c: 75:a4:e2:b9:3a:09:0b:23:c6:98:99:fc:4d:45:04: 5c:fd:01:5a:03:db:4d:11:94:4f:19:f6:8c:d1:3c: 32:1b:75:77:e3:4f:f5:69:fd:b9:5d:8f:4a:17:10: e2:1d:d1:e2:6d:cd:79:af:3c:a5:cd:50:e6:94:ec: ae:fe:ef:23:69:6d:ff:63:2a:81:a8:63:d7:08:a7: ac:5a:ab:67:bd:12:76:82:a6:5f:96:ba:2a:3f:79: 27:cf:be:62:6a:da:7d:46:62:53:bf:d2:61:2e:6c: b6:30:76:11:7d:5b:2b:d0:88:f0:33:90:21:e4:fa: 0a:21:15:f0:bd:42:4d:a3:d3:21:57:a5:63:c1:3b: 30:a4:6a:c2:29:c5:db:30:1d:00:0c:6f:c8:e9:11: cf:f2:51:0f:17:bf:3d:6d:13:d7:a0:5c:b8:e8:67: f1:be:97:1b:ca:b6:bf:33:88:e5:95:27:6d:d7:e2: f6:b7:f3:f6:20:1c:e9:e7:d4:1b:ee:7c:d4:f6:e0: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:25c::/48 2001:67c:1998::/48 Signature Algorithm: sha256WithRSAEncryption 8c:0d:83:77:f2:46:a1:78:4b:ef:3f:16:a7:40:b3:f0:07:74: 4e:35:52:92:14:f5:8c:25:e7:b2:da:7b:d7:80:49:30:a1:69: 51:83:9b:86:13:2d:f4:3c:40:03:f1:81:49:45:c3:d6:6b:5d: 4a:82:d0:59:a2:40:0d:1f:5f:9d:d0:e6:0d:5a:2b:f9:da:a7: df:ae:36:5b:f9:a2:37:52:ad:86:a1:0b:90:ae:37:5a:fc:a8: d7:90:b0:dd:64:e7:e7:fc:51:21:b1:82:c6:cc:fe:72:b0:de: e9:d7:bb:22:23:1f:74:30:15:4a:89:73:63:e2:db:68:ca:49: 3a:f7:8b:4f:8d:4d:7e:83:60:59:8c:d2:5e:90:90:6f:54:53: 23:63:84:68:48:ed:a4:04:37:74:7d:b7:23:1c:94:a4:b2:f2: 56:f6:92:15:0e:75:c0:91:20:9d:6d:a7:1c:60:67:d6:e5:91: bd:37:5f:81:c6:de:1e:60:00:67:15:5f:06:7c:c1:f7:23:52: 7b:6e:99:6c:f9:f6:2d:c1:18:01:ea:c5:fb:1b:12:67:75:ba: 56:23:59:1f:32:03:93:57:6d:4f:d9:ee:de:2e:a0:32:6f:7e: ba:80:99:5b:d5:c9:f3:80:7f:4d:36:f4:d0:fe:84:f6:6e:fd: a0:91:af:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt9W6jcIHgVjRt3Gp+BoGOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNjZTRlMmIxYWQyOTA4NjdkZGM3N2YzMWU1ZjE1M2U5YjIwODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZWebGEhM7lsDB585Ur8pqEbKNsc h9KYrCP/VQ72BVqINcqoTMZqVPZTqQmD3XHHvInaG7TuTyG683x1pOK5OgkLI8aY mfxNRQRc/QFaA9tNEZRPGfaM0TwyG3V340/1af25XY9KFxDiHdHibc15rzylzVDm lOyu/u8jaW3/YyqBqGPXCKesWqtnvRJ2gqZflroqP3knz75iatp9RmJTv9JhLmy2 MHYRfVsr0IjwM5Ah5PoKIRXwvUJNo9MhV6VjwTswpGrCKcXbMB0ADG/I6RHP8lEP F789bRPXoFy46Gfxvpcbyra/M4jllSdt1+L2t/P2IBzp59Qb7nzU9uC0vQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFOw85OKxrSkIZ93HfzHl8VPpsgiHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2VmMjIx Ni03YzFmLTRmNmQtODVjNS1mNTNhZDQ2Y2FmM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZWYyMjE2 LTdjMWYtNGY2ZC04NWM1LWY1M2FkNDZjYWYzYy8xLzdEems0ckd0S1FobjNjZF9N ZVh4VS1teUNJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAJcAwcAIAEGfBmYMA0GCSqGSIb3DQEB CwUAA4IBAQCMDYN38kaheEvvPxanQLPwB3RONVKSFPWMJeey2nvXgEkwoWlRg5uG Ey30PEAD8YFJRcPWa11KgtBZokANH1+d0OYNWiv52qffrjZb+aI3Uq2GoQuQrjda /KjXkLDdZOfn/FEhsYLGzP5ysN7p17siIx90MBVKiXNj4ttoykk694tPjU1+g2BZ jNJekJBvVFMjY4RoSO2kBDd0fbcjHJSksvJW9pIVDnXAkSCdbaccYGfW5ZG9N1+B xt4eYABnFV8GfMH3I1J7bpls+fYtwRgB6sX7GxJndbpWI1kfMgOTV21P2e7eLqAy b366gJlb1cnzgH9NNvTQ/oT2bv2gka8s -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:03 2026 by rpki-client