This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.cer (raw, json) Hash identifier: Sj703mgQgIUHza7Q2lXbr6KSKU6CvLrFSELza9HWzAQ= Subject key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4B46F4F1489779BB24A6C4102386E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.35.208.0/24 IP: 2a14:2e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b4:6f:4f:14:89:77:9b:b2:4a:6c:41:02:38:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:18:51:c9:66:99:ee:2c:72:45:f6:53:1e: f3:72:36:5f:ea:e4:ac:ef:6d:9e:a6:a8:b2:c9:27: 98:75:86:73:55:3a:90:a6:9c:17:5f:b1:44:be:ff: 6a:4b:8b:5e:95:98:54:84:88:ef:d2:b9:a3:11:e4: 3c:93:fd:97:02:cb:49:87:ce:1a:f8:64:4e:42:58: ca:3d:21:b0:7c:2b:9f:af:29:bf:29:5a:5c:49:d0: 68:1e:45:83:16:2a:ff:58:f3:ad:d1:90:d6:25:c8: 57:15:0c:61:06:63:dd:7a:6a:79:7c:23:fd:13:73: 5f:f8:88:b8:48:56:2e:b8:e5:f5:6c:5a:3b:1d:76: 28:82:38:c0:fc:6e:a8:8e:1f:38:ce:32:04:91:53: c5:c8:71:5c:f8:45:08:4c:a1:a0:27:50:7a:6f:50: 50:db:dd:77:76:40:66:0c:64:3f:19:58:9d:a1:c8: 30:16:78:56:9d:c2:38:86:6f:6c:1d:6f:45:9c:20: 14:dc:8d:cd:23:51:89:d4:72:5b:4d:d7:66:8c:be: 66:0a:99:54:f3:9b:83:f2:56:d5:aa:47:36:1d:8e: 2f:63:19:6b:a1:80:d6:75:e3:13:bb:78:21:f6:96: c2:fb:dd:69:52:3a:85:69:9c:eb:50:10:48:80:b1: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.208.0/24 IPv6: 2a14:2e00::/29 Signature Algorithm: sha256WithRSAEncryption 07:80:61:ca:c8:51:ef:76:c4:31:eb:d0:d4:a5:56:2a:2c:ab: 6d:b9:a5:c1:b4:e7:46:4a:54:ce:f9:80:02:94:68:d5:1f:20: 4d:ed:7c:85:c2:5f:18:31:88:26:0c:f4:95:90:66:73:7e:68: aa:db:d8:48:d2:5d:86:c8:bc:7d:9c:ba:2f:12:48:18:f6:98: a1:2d:d0:08:1c:3a:fb:ee:41:04:8e:49:d1:bc:6d:31:a4:a5: 1d:27:4b:01:fd:93:46:25:1b:58:3a:25:08:e9:dc:89:9a:ec: 65:55:27:98:3d:27:b6:c1:41:a4:da:43:3b:20:79:84:71:46: c0:a9:26:ab:ff:26:cc:a7:ac:06:37:63:9d:d7:1d:b6:01:d9: 2f:8b:8b:f8:8c:dc:cc:d5:31:7a:f6:0f:8f:8d:74:2b:7e:1b: 25:8f:df:52:b7:95:e6:cc:be:d6:eb:9c:56:e2:ee:8c:38:f0: 8f:28:2c:57:5f:b5:d2:06:59:78:c3:ae:58:01:cc:fa:fd:72: ec:03:a5:24:9c:b7:76:0a:22:2c:ec:29:8b:46:42:c3:23:ce: de:f0:be:31:d4:63:b3:17:aa:7c:4e:68:2c:32:c6:03:b9:eb: 90:cf:28:25:a4:5f:ed:fd:45:5f:6c:52:49:cf:ad:aa:9a:c2: 9a:80:3e:40 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pLRvTxSJd5uySmxBAjhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTIzNDI4MzczZGNlOGE1Zjk3ZjQ1ZWZjNmMyOGI5ZmJlN2NkNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTkYUclmme4sckX2Ux7zcjZf6uSs 722epqiyySeYdYZzVTqQppwXX7FEvv9qS4telZhUhIjv0rmjEeQ8k/2XAstJh84a +GROQljKPSGwfCufrym/KVpcSdBoHkWDFir/WPOt0ZDWJchXFQxhBmPdemp5fCP9 E3Nf+Ii4SFYuuOX1bFo7HXYogjjA/G6ojh84zjIEkVPFyHFc+EUITKGgJ1B6b1BQ 2913dkBmDGQ/GVidocgwFnhWncI4hm9sHW9FnCAU3I3NI1GJ1HJbTddmjL5mCplU 85uD8lbVqkc2HY4vYxlroYDWdeMTu3gh9pbC+91pUjqFaZzrUBBIgLE4wQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFO4jQoNz3Oil+X9F78bCi5++fNVNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzhmYTg1 NC0wNTk3LTRjMGQtYjBiNS0zZjc3ZmQ0Mjc5OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOGZhODU0 LTA1OTctNGMwZC1iMGI1LTNmNzdmZDQyNzk5YS8xLzdpTkNnM1BjNktYNWYwWHZ4 c0tMbjc1ODFVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSPQMA0EAgACMAcDBQMqFC4AMA0GCSqGSIb3 DQEBCwUAA4IBAQAHgGHKyFHvdsQx69DUpVYqLKttuaXBtOdGSlTO+YAClGjVHyBN 7XyFwl8YMYgmDPSVkGZzfmiq29hI0l2GyLx9nLovEkgY9pihLdAIHDr77kEEjknR vG0xpKUdJ0sB/ZNGJRtYOiUI6dyJmuxlVSeYPSe2wUGk2kM7IHmEcUbAqSar/ybM p6wGN2Od1x22Adkvi4v4jNzM1TF69g+PjXQrfhslj99St5XmzL7W65xW4u6MOPCP KCxXX7XSBll4w65YAcz6/XLsA6UknLd2CiIs7CmLRkLDI87e8L4x1GOzF6p8Tmgs MsYDueuQzyglpF/t/UVfbFJJz62qmsKagD5A -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:23 2026 by rpki-client