This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer File: 7w79XeePk7yurRXhTABu270bWVU.cer (raw, json) Hash identifier: W9N4wCfX2WB/fJNZNOoZS6PkpHr1NVuAQoOJgd6QMWQ= Subject key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB654E7E57860DA6FB5A3CD48F5AFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47710 IP: 45.137.120.0/22 IP: 46.251.0.0/21 IP: 46.251.16.0/20 IP: 79.121.0.0 -- 79.121.99.255 IP: 79.121.120.0/21 IP: 88.87.224.0/20 IP: 88.87.248.0/21 IP: 91.147.192.0 -- 91.147.231.255 IP: 91.147.248.0/21 IP: 94.248.128.0 -- 94.248.183.255 IP: 94.248.192.0 -- 94.248.231.255 IP: 94.248.240.0/20 IP: 2a03:bf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:65:4e:7e:57:86:0d:a6:fb:5a:3c:d4:8f:5a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:2d:b9:91:ff:f6:2e:81:10:ca:56:8d:2c: d6:0d:ea:09:17:b1:64:e4:60:29:5a:63:51:d2:45: 70:72:9e:df:06:92:c7:4f:3e:0c:61:c2:8a:d0:90: 41:75:5e:2e:4e:6d:3d:fe:c7:a0:27:b7:31:bc:f5: 41:7f:6b:65:d8:9c:00:c9:be:99:1a:5d:6b:be:63: e7:4a:f2:bf:46:f5:ed:5e:ed:12:99:ff:30:15:11: e2:d3:96:e8:31:af:8e:e8:e5:c7:27:c2:cf:43:14: 56:3d:bf:0f:b1:f8:64:79:3b:e3:f6:3f:a9:a9:3e: 4c:bf:43:25:68:d5:63:c0:14:e5:d1:62:71:e8:19: d1:80:49:21:82:de:be:87:94:f3:28:ea:22:d1:99: 90:85:33:83:40:aa:b8:c0:05:f3:75:81:d8:8f:95: 3e:ae:ee:50:a3:c2:22:d3:24:73:fc:40:44:aa:25: 3f:52:f0:db:42:29:22:ca:03:2e:7a:34:be:a0:53: d7:00:01:be:7c:6d:9a:e2:fa:75:bd:32:95:2b:9d: 2e:16:a7:b5:41:2b:28:33:b3:b9:e5:18:23:15:fd: 4a:54:6e:84:97:b4:d7:81:e3:64:3f:7a:1d:ba:f2: ee:78:8b:cc:7a:5e:a2:14:01:5f:08:1a:92:af:69: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.120.0/22 46.251.0.0/21 46.251.16.0/20 79.121.0.0-79.121.99.255 79.121.120.0/21 88.87.224.0/20 88.87.248.0/21 91.147.192.0-91.147.231.255 91.147.248.0/21 94.248.128.0-94.248.183.255 94.248.192.0-94.248.231.255 94.248.240.0/20 IPv6: 2a03:bf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47710 Signature Algorithm: sha256WithRSAEncryption 8b:24:d5:6a:d7:5b:31:d3:89:9a:33:9d:18:a9:52:61:24:b2: f0:ed:a1:71:5d:d9:b0:17:61:30:d9:16:70:b4:b1:c1:f5:0d: d9:1c:b1:1a:a0:ac:ea:14:26:71:a3:0b:4f:b1:65:2b:ce:58: 90:03:43:f6:d0:ff:fa:22:f3:1a:4e:08:d5:31:3a:c4:4d:60: 19:f9:97:f8:21:dd:27:31:55:45:94:61:c2:bc:87:69:19:27: 3a:f8:6d:db:21:48:06:10:cf:79:20:33:32:5d:5f:6f:14:5a: 59:37:20:6a:3f:93:50:16:4e:9f:ef:62:26:32:4e:62:80:6d: 6d:b8:02:5a:0b:53:70:56:62:b6:0a:2b:c1:ce:1b:dd:ac:25: 5f:fe:9f:30:14:0b:a2:d6:27:bc:b6:13:8b:20:79:e3:c6:51: 92:e5:fc:e1:ce:14:dc:db:77:80:e8:e6:88:1c:ff:5a:7d:08: 57:68:2e:a6:22:c8:5f:bc:77:56:21:b2:52:00:69:a0:c2:a0: 94:7e:21:f2:43:b6:e5:8f:81:b7:6f:9d:86:74:b1:4e:40:5e: 11:cc:b4:66:9d:19:d6:39:59:b5:d4:f7:47:ff:20:69:4f:9f: 3d:f9:dc:15:ef:0c:3f:6d:6e:24:67:6b:1c:3e:d4:c9:00:d5: d1:1f:7b:b3 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAZt262VOfleGDab7WjzUj1r9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjBlZmQ1ZGU3OGY5M2JjYWVhZDE1ZTE0YzAwNmVkYmJkMWI1OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbwtuZH/9i6BEMpWjSzWDeoJF7Fk 5GApWmNR0kVwcp7fBpLHTz4MYcKK0JBBdV4uTm09/segJ7cxvPVBf2tl2JwAyb6Z Gl1rvmPnSvK/RvXtXu0Smf8wFRHi05boMa+O6OXHJ8LPQxRWPb8PsfhkeTvj9j+p qT5Mv0MlaNVjwBTl0WJx6BnRgEkhgt6+h5TzKOoi0ZmQhTODQKq4wAXzdYHYj5U+ ru5Qo8Ii0yRz/EBEqiU/UvDbQikiygMuejS+oFPXAAG+fG2a4vp1vTKVK50uFqe1 QSsoM7O55RgjFf1KVG6El7TXgeNkP3oduvLueIvMel6iFAFfCBqSr2ncbwIDAQAB o4IDEjCCAw4wHQYDVR0OBBYEFO8O/V3nj5O8rq0V4UwAbtu9G1lVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2UwZjll Ni1kNjU1LTQzNzctOGQwOS1lYTg2NTA5YzNiMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZTBmOWU2 LWQ2NTUtNDM3Ny04ZDA5LWVhODY1MDljM2IzMC8xLzd3NzlYZWVQazd5dXJSWGhU QUJ1MjcwYldWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGQBggrBgEF BQcBBwEB/wSBgDB+MG0EAgABMGcDBAItiXgDBAMu+wADBAQu+xAwCwMDAE95AwQC T3lgAwQDT3l4AwQEWFfgAwQDWFf4MAwDBAZbk8ADBANbk+ADBANbk/gwDAMEB174 gAMEA174sDAMAwQGXvjAAwQDXvjgAwQEXvjwMA0EAgACMAcDBQMqA78AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwC6XjANBgkqhkiG9w0BAQsFAAOCAQEAiyTVatdb MdOJmjOdGKlSYSSy8O2hcV3ZsBdhMNkWcLSxwfUN2RyxGqCs6hQmcaMLT7FlK85Y kAND9tD/+iLzGk4I1TE6xE1gGfmX+CHdJzFVRZRhwryHaRknOvht2yFIBhDPeSAz Ml1fbxRaWTcgaj+TUBZOn+9iJjJOYoBtbbgCWgtTcFZitgorwc4b3awlX/6fMBQL otYnvLYTiyB548ZRkuX84c4U3Nt3gOjmiBz/Wn0IV2gupiLIX7x3ViGyUgBpoMKg lH4h8kO25Y+Bt2+dhnSxTkBeEcy0Zp0Z1jlZtdT3R/8gaU+fPfncFe8MP21uJGdr HD7UyQDV0R97sw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:55 2026 by rpki-client