This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer File: 7_ktk2igmtNvelft-9CgXZ_UDh0.cer (raw, json) Hash identifier: l3MikoS4fsN/Y6VaA3ZEP8NJZgAchNOFboPDWayu/Q0= Subject key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7440DD3AC4B74FC8B25598736A832 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.130.156.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:44:0d:d3:ac:4b:74:fc:8b:25:59:87:36:a8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:6d:90:bb:e8:59:a9:fa:0e:fe:4f:53:cf: 9e:8b:e9:a8:f0:f6:98:00:4e:7a:e3:76:36:c4:ea: 61:76:55:65:12:34:66:21:80:cf:ed:c7:63:f7:24: 00:86:7d:7f:85:f8:13:31:c0:43:83:c8:74:1f:1d: 70:6a:01:36:41:e4:3c:8f:d0:42:df:ee:cf:83:bb: 0d:69:d8:e1:3d:c0:23:7a:ed:84:80:40:d3:a0:f6: ca:ff:fd:64:ea:3b:2c:09:64:b4:44:8d:36:00:a0: 6a:c3:28:62:01:6c:68:75:d4:1d:80:24:c2:d1:0e: 2c:f0:2e:8c:c5:86:fe:e9:9b:26:0e:31:d4:ff:81: fb:fd:68:ea:7d:cf:dd:a8:09:21:6a:ce:eb:ae:34: 38:61:bc:75:4a:43:02:2e:5e:0a:08:ff:c0:79:9b: 61:07:07:60:35:39:e4:74:49:c6:ce:0e:bc:0c:08: 85:0b:b8:92:2f:34:a7:54:97:00:b5:b8:22:dd:51: e3:f5:75:53:53:11:45:3f:84:45:3f:d9:ae:dd:07: b5:5e:c4:80:c6:65:a2:7a:ab:27:bc:95:a3:64:ee: be:f9:b3:b7:60:43:e0:a6:c4:8d:fb:59:a7:d1:f9: 02:9e:e8:43:f1:fb:0c:e4:5e:81:94:a0:c4:10:96: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.156.0/22 Signature Algorithm: sha256WithRSAEncryption aa:76:95:2b:92:ef:af:6d:6b:df:c7:da:b6:56:67:af:ad:a0: ec:a6:17:c1:50:be:ce:5d:31:7f:1f:9b:55:e5:90:55:f4:0c: 4b:b5:0c:92:64:41:ac:17:8a:38:6e:8a:15:ff:c1:02:7d:52: 74:73:0d:1f:ac:30:51:f5:91:39:4c:55:f0:5b:08:d5:6e:79: 5d:3b:e1:91:9b:aa:5a:c0:90:05:57:2f:97:f4:f1:72:8e:bf: 53:fe:1b:cd:ed:9f:ec:95:dd:ad:e9:90:ad:18:d5:08:86:39: b5:0b:4c:53:0c:81:8b:06:c9:b9:50:db:e7:3e:8c:1d:25:68: e7:34:99:b9:52:e2:75:37:17:ee:6a:9f:81:b5:06:06:6a:d1: c4:df:4c:ed:e0:b4:91:3f:72:f1:36:a5:33:ef:9e:2e:a9:db: 03:62:89:ef:85:2c:3a:6a:29:7d:0f:f0:44:14:f8:ab:e1:76: 87:ef:c4:ff:80:e7:43:87:01:0c:8a:57:74:ef:72:20:f4:1a: 3f:06:db:d2:e3:bd:63:59:15:f2:f4:7f:8b:6d:78:d9:11:7e: 4c:fd:91:d5:c1:70:51:be:87:10:e5:11:58:b2:2f:50:41:1b: 25:5e:13:3e:1f:86:92:63:49:59:f0:bf:b1:d6:95:f7:36:68: c3:21:4a:27 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+p0QN06xLdPyLJVmHNqgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmY5MmQ5MzY4YTA5YWQzNmY3YTU3ZWRmYmQwYTA1ZDlmZDQwZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+RtkLvoWan6Dv5PU8+ei+mo8PaY AE5643Y2xOphdlVlEjRmIYDP7cdj9yQAhn1/hfgTMcBDg8h0Hx1wagE2QeQ8j9BC 3+7Pg7sNadjhPcAjeu2EgEDToPbK//1k6jssCWS0RI02AKBqwyhiAWxoddQdgCTC 0Q4s8C6MxYb+6ZsmDjHU/4H7/Wjqfc/dqAkhas7rrjQ4Ybx1SkMCLl4KCP/AeZth BwdgNTnkdEnGzg68DAiFC7iSLzSnVJcAtbgi3VHj9XVTUxFFP4RFP9mu3Qe1XsSA xmWieqsnvJWjZO6++bO3YEPgpsSN+1mn0fkCnuhD8fsM5F6BlKDEEJYIFQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFO/5LZNooJrTb3pX7fvQoF2f1A4dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzdmNzI1 OS01M2QwLTQxYWUtOTUxZC00MDA0MTdjOTcxN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvN2Y3MjU5 LTUzZDAtNDFhZS05NTFkLTQwMDQxN2M5NzE3ZS8xLzdfa3RrMmlnbXROdmVsZnQt OUNnWFpfVURoMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYKcMA0GCSqGSIb3DQEBCwUAA4IBAQCqdpUr ku+vbWvfx9q2VmevraDsphfBUL7OXTF/H5tV5ZBV9AxLtQySZEGsF4o4booV/8EC fVJ0cw0frDBR9ZE5TFXwWwjVbnldO+GRm6pawJAFVy+X9PFyjr9T/hvN7Z/sld2t 6ZCtGNUIhjm1C0xTDIGLBsm5UNvnPowdJWjnNJm5UuJ1Nxfuap+BtQYGatHE30zt 4LSRP3LxNqUz754uqdsDYonvhSw6ail9D/BEFPir4XaH78T/gOdDhwEMild073Ig 9Bo/BtvS471jWRXy9H+LbXjZEX5M/ZHVwXBRvocQ5RFYsi9QQRslXhM+H4aSY0lZ 8L+x1pX3NmjDIUon -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:29 2026 by rpki-client