This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer File: 7m9CHCUwligDR9wuksoQzDmME08.cer (raw, json) Hash identifier: 2ErA0j3w4LDJHKzyH6I8Uz42qBT4Bryp3npQXeswQgY= Subject key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CA04BBF69CFA33D5F2F4C209A68C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44991 IP: 195.230.106.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a0:4b:bf:69:cf:a3:3d:5f:2f:4c:20:9a:68:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee6f421c253096280347dc2e92ca10cc398c134f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:c5:93:6e:78:52:d7:a6:2b:5b:85:09:a0: 8f:e8:7f:42:fa:a2:bb:9d:36:0c:64:2b:be:4c:06: 9c:d3:c4:42:2e:c4:9c:ca:0c:8f:eb:3f:f8:a9:d5: fe:14:a4:48:d0:81:52:04:2f:e1:ec:9e:57:01:85: c9:14:b6:98:47:c7:86:14:16:9a:54:db:64:aa:f1: a8:6d:cd:60:ec:20:92:80:9d:2d:e0:b6:b8:8c:03: ca:a9:71:c3:80:84:c6:01:09:ca:cb:01:c1:3d:08: 51:7d:f5:d1:ca:61:8a:35:39:36:c3:a3:d0:d9:f0: 51:3b:93:3d:19:2f:08:5b:e3:3f:8b:b1:40:23:3b: 0e:11:b6:2d:35:eb:e0:fd:10:cb:d2:5f:0a:21:fc: 22:ab:8d:de:86:73:66:6c:5e:65:3f:4a:2f:cd:8d: ca:05:c1:36:aa:1c:14:b1:b4:54:b3:af:30:69:4c: 0f:7c:37:5f:53:15:60:dd:e9:fc:b1:d7:0b:b5:9a: ce:01:f4:87:f6:4d:ab:b2:ba:76:ae:71:ab:f0:31: 92:f7:ec:a5:16:11:8b:f3:59:fd:10:64:ce:84:d5: a6:2f:51:62:97:d9:8d:c9:21:15:1c:10:95:01:2a: 03:88:8e:51:9d:6d:b8:a8:8c:39:d4:12:88:bd:12: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.106.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44991 Signature Algorithm: sha256WithRSAEncryption 47:22:1b:f2:a3:95:97:6d:a0:01:ec:48:b1:18:16:a3:4c:d5: 9e:8a:4a:98:ea:f6:ca:d3:7d:cb:aa:a4:1d:f4:16:4d:3a:6c: 02:2e:ab:6e:a2:9d:92:d0:00:c7:76:c8:c7:4d:5a:bf:3f:0d: 71:51:4b:17:2b:80:31:05:ae:8f:ef:66:c2:b3:1b:e6:82:39: 7e:43:9c:1f:f9:9f:b5:2b:33:e7:57:04:1b:36:23:8d:a7:0e: 9f:d5:4b:44:68:e3:cd:ba:2d:26:2d:b0:b6:96:86:75:2d:61: a6:55:ee:b3:44:da:ea:8a:d7:d0:17:1a:1d:e7:ac:45:4a:d2: cd:23:cc:c3:98:e0:af:2b:46:42:0a:59:d8:64:19:4a:e0:6b: 2d:90:d1:91:57:46:9d:5b:40:a8:73:ea:49:f8:50:b2:96:20: 21:12:92:3a:eb:96:71:af:40:77:48:78:5f:f5:c4:77:fd:79: a7:dd:ea:65:ba:4a:5e:8b:a7:5b:23:a8:f5:fc:53:9f:87:9c: 64:cf:d1:ce:14:e1:62:82:e8:76:2d:b4:43:e7:48:85:20:de: 6b:66:79:16:e7:77:42:7a:52:37:6f:f5:91:77:d2:8e:cf:49: bb:16:c2:cc:e5:a5:a4:5b:72:9c:80:f4:17:23:b0:1a:e5:f1: 5c:a9:c2:63 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XKBLv2nPoz1fL0wgmmjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTZmNDIxYzI1MzA5NjI4MDM0N2RjMmU5MmNhMTBjYzM5OGMxMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSDFk254UtemK1uFCaCP6H9C+qK7 nTYMZCu+TAac08RCLsScygyP6z/4qdX+FKRI0IFSBC/h7J5XAYXJFLaYR8eGFBaa VNtkqvGobc1g7CCSgJ0t4La4jAPKqXHDgITGAQnKywHBPQhRffXRymGKNTk2w6PQ 2fBRO5M9GS8IW+M/i7FAIzsOEbYtNevg/RDL0l8KIfwiq43ehnNmbF5lP0ovzY3K BcE2qhwUsbRUs68waUwPfDdfUxVg3en8sdcLtZrOAfSH9k2rsrp2rnGr8DGS9+yl FhGL81n9EGTOhNWmL1Fil9mNySEVHBCVASoDiI5RnW24qIw51BKIvRKdJQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO5vQhwlMJYoA0fcLpLKEMw5jBNPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzNlMDkz NS02YTk1LTQ3YTQtYWQ0Yy0zNTQyZjk5YmU2M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvM2UwOTM1 LTZhOTUtNDdhNC1hZDRjLTM1NDJmOTliZTYzYi8xLzdtOUNIQ1V3bGlnRFI5d3Vr c29RekRtTUUwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCvvzANBgkqhkiG9w0BAQsFAAOCAQEARyIb8qOVl22gAexIsRgWo0zVnopKmOr2 ytN9y6qkHfQWTTpsAi6rbqKdktAAx3bIx01avz8NcVFLFyuAMQWuj+9mwrMb5oI5 fkOcH/mftSsz51cEGzYjjacOn9VLRGjjzbotJi2wtpaGdS1hplXus0Ta6orX0Bca HeesRUrSzSPMw5jgrytGQgpZ2GQZSuBrLZDRkVdGnVtAqHPqSfhQspYgIRKSOuuW ca9Ad0h4X/XEd/15p93qZbpKXounWyOo9fxTn4ecZM/RzhThYoLodi20Q+dIhSDe a2Z5Fud3QnpSN2/1kXfSjs9JuxbCzOWlpFtynID0FyOwGuXxXKnCYw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:28 2026 by rpki-client