This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer (raw, json) Hash identifier: FrgjclUuAEQpxd7pgp2ZBbXkGJNJaTz5E2ku5V1RrDY= Subject key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3D3D5D49349DF005144A9B59B1F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35268 IP: 195.60.74.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3d:3d:5d:49:34:9d:f0:05:14:4a:9b:59:b1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:57:e3:bb:16:b6:77:a6:e9:00:d4:d4:f8: 4a:ac:44:38:73:d1:f9:df:ba:ce:22:d2:b0:4f:f9: 2e:fc:a3:88:76:52:2f:c0:b9:17:e8:db:a1:c4:8d: 15:8d:e0:3d:c9:52:93:c1:0e:ea:08:2f:0e:9a:65: 55:13:ab:66:ec:32:06:29:a0:19:ad:ac:53:dd:f7: 19:ec:71:ac:f4:97:e4:17:59:5b:81:53:d8:f0:81: 6e:49:cf:76:77:5e:50:bb:11:20:cf:b3:4b:65:77: 67:3d:72:68:b0:01:c5:44:52:84:c9:33:03:d4:cb: f3:72:31:bb:5d:47:13:1b:76:37:34:eb:d6:03:9f: 7e:4f:e4:7b:ec:da:88:91:60:9a:a2:02:d9:d9:e7: c4:50:3b:93:64:fe:13:09:40:59:b9:0b:0e:5d:59: 86:a1:37:b7:22:b8:db:c2:58:c5:0f:bc:7d:c0:fb: 06:15:3c:33:a8:ce:62:cc:d6:6e:63:0a:9e:c7:3c: dc:b6:be:59:4d:29:da:9d:87:08:2e:ba:18:a5:76: d1:bc:a7:7a:9e:1a:15:65:71:26:ae:67:6f:af:36: 83:57:55:66:47:7f:6a:9c:12:31:f1:51:3c:2b:2f: 1c:e5:3c:58:ae:d1:d1:3e:6f:c3:6c:c9:1c:5b:51: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.74.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35268 Signature Algorithm: sha256WithRSAEncryption 56:1e:96:b0:97:a8:49:e0:e4:c7:4a:11:39:a2:1c:73:5a:f4: 15:1b:b8:d8:d7:94:0a:e3:91:4b:3a:32:2f:73:fd:77:c5:d7: 60:a7:c7:a8:d2:7a:ae:7e:1a:9e:5a:61:73:d2:a5:1a:8e:ed: 02:44:89:38:f8:9c:b3:c0:e9:4a:0c:8c:7e:5a:34:24:02:ae: 6a:97:79:e1:1f:3d:ef:8a:76:79:71:f5:11:d3:e1:b3:30:db: fb:ad:8f:fb:a5:c1:59:0d:65:0e:c8:03:2c:26:80:9d:51:64: 8b:f6:aa:09:d3:89:77:29:27:a4:34:e6:2b:be:46:a7:b5:07: 83:d1:80:a6:1e:22:6a:27:30:2a:8c:4a:58:74:97:26:5e:5c: cd:50:99:01:08:a8:f3:fd:61:ed:a6:e7:b1:3a:00:e9:dd:34: 09:bc:a7:8d:eb:f0:d4:f5:46:ef:c6:bc:f9:1c:e3:36:40:29: 2e:14:87:c4:dd:07:91:9f:e9:10:3e:cd:57:2c:5c:cd:1d:1e: 8a:75:38:dd:8a:c5:0b:ca:06:c6:30:86:2a:20:b7:a6:55:8d: f4:e7:45:53:23:fd:f8:92:8a:1f:95:64:f6:71:cb:aa:7e:20: 95:bd:15:cc:4f:2c:3c:61:27:2d:de:5f:bb:16:d1:22:9c:58: 70:02:c6:8b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57T09XUk0nfAFFEqbWbHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGQxM2QzNzQxZTRiM2YzYTNhM2UzNDcyMWYxMjQ2ZTRiMjdjN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIFX47sWtnem6QDU1PhKrEQ4c9H5 37rOItKwT/ku/KOIdlIvwLkX6NuhxI0VjeA9yVKTwQ7qCC8OmmVVE6tm7DIGKaAZ raxT3fcZ7HGs9JfkF1lbgVPY8IFuSc92d15QuxEgz7NLZXdnPXJosAHFRFKEyTMD 1MvzcjG7XUcTG3Y3NOvWA59+T+R77NqIkWCaogLZ2efEUDuTZP4TCUBZuQsOXVmG oTe3IrjbwljFD7x9wPsGFTwzqM5izNZuYwqexzzctr5ZTSnanYcILroYpXbRvKd6 nhoVZXEmrmdvrzaDV1VmR39qnBIx8VE8Ky8c5TxYrtHRPm/DbMkcW1EBUwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO3RPTdB5LPzo6PjRyHxJG5LJ8emMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5Lzg4MDhi Yy05NzZkLTQyMTItYWQyZi0xYThmMjNlMmNlYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvODgwOGJj LTk3NmQtNDIxMi1hZDJmLTFhOGYyM2UyY2ViYi8xLzdkRTlOMEhrc19Pam8tTkhJ ZkVrYmtzbng2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwzxKMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCJxDANBgkqhkiG9w0BAQsFAAOCAQEAVh6WsJeoSeDkx0oROaIcc1r0FRu42NeU CuORSzoyL3P9d8XXYKfHqNJ6rn4anlphc9KlGo7tAkSJOPics8DpSgyMflo0JAKu apd54R8974p2eXH1EdPhszDb+62P+6XBWQ1lDsgDLCaAnVFki/aqCdOJdyknpDTm K75Gp7UHg9GAph4iaicwKoxKWHSXJl5czVCZAQio8/1h7abnsToA6d00Cbynjevw 1PVG78a8+RzjNkApLhSHxN0HkZ/pED7NVyxczR0einU43YrFC8oGxjCGKiC3plWN 9OdFUyP9+JKKH5Vk9nHLqn4glb0VzE8sPGEnLd5fuxbRIpxYcALGiw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:27 2026 by rpki-client