This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer (raw, json) Hash identifier: gKaRaDlun1KU0ZvK9xPfMXVNxwibrWP+Bn00bEKEX4Y= Subject key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E44B25E2863FDC0F258412DF1004 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207558 IP: 91.196.228.0/22 IP: 91.224.171.0/24 IP: 2a0f:d840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e4:4b:25:e2:86:3f:dc:0f:25:84:12:df:10:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09fecd7071b727db3d12f09efbb454e04d4f743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:b3:4e:b3:b9:87:6b:1f:47:30:21:20:0c: 30:e2:ba:02:9a:97:e0:f7:ce:0c:94:49:0e:a1:ca: 7e:8d:3f:69:42:1d:e6:a7:db:00:68:c9:10:de:1a: 35:25:36:5d:dd:80:60:cf:8e:b3:4c:11:bb:d7:a2: bf:91:5f:8c:20:8e:15:81:03:27:02:8e:bc:a2:9c: ee:d7:b7:c8:66:6b:72:ff:52:98:d2:a6:25:15:4c: 51:f8:cf:1f:30:33:88:52:07:58:86:ef:b4:12:91: 0b:17:47:5f:32:7a:ce:05:d6:14:0e:c8:cb:f6:47: 2f:2d:7a:f2:89:b9:6e:b7:f4:f5:c2:95:b9:48:02: 57:9f:f8:c6:68:1b:42:b3:23:ca:ea:ab:a5:51:25: bd:d4:c5:40:07:63:ba:2e:ea:ab:56:e8:ac:d9:dd: 94:b8:45:9c:89:ee:a6:a4:9f:c1:3b:a0:31:ef:bb: 47:39:4b:ce:5f:9a:76:a0:ba:46:c2:89:92:fa:17: a5:28:e0:96:ef:94:bb:48:2a:4e:89:c1:80:50:db: 1b:ec:b6:6b:be:a7:c7:24:7a:66:c3:19:af:1f:61: 9d:55:8c:bd:d0:a5:51:4d:5c:e5:29:61:8a:e0:e9: 09:dd:a0:10:79:7b:56:7d:13:72:b3:3b:f5:22:84: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.228.0/22 91.224.171.0/24 IPv6: 2a0f:d840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207558 Signature Algorithm: sha256WithRSAEncryption 41:36:43:73:3a:e2:37:f0:9b:d7:8e:c0:09:b7:02:29:8d:3b: f9:59:70:03:88:b6:c3:90:dc:0c:80:ba:ba:12:0b:8f:12:d9: e8:2c:5c:ad:a4:ee:90:18:19:50:a0:4f:dc:bf:ca:83:58:1d: 48:0c:2c:7b:d0:43:cb:67:48:f1:21:b3:8e:c9:19:e7:f4:96: 57:97:8b:04:cf:ee:f2:c9:4c:ff:33:06:ba:fc:ca:35:ec:13: 36:cf:44:a8:c6:2c:ad:7b:d4:1d:85:71:d5:70:14:a8:7f:07: d5:bb:e9:29:eb:f3:14:5c:02:b1:f2:11:93:a6:da:2a:3e:60: 4d:e3:e7:a9:e5:39:03:f1:ef:b1:cb:c2:02:19:ab:00:e9:9c: ca:04:a7:c7:6e:23:10:85:a4:a1:19:65:31:b6:a9:7d:0b:82: 43:91:e2:ff:28:dd:15:e9:c5:61:ce:28:22:5c:c5:32:87:53: a8:30:34:e2:0c:2f:7d:de:e4:de:f1:7a:25:dc:10:5e:91:6a: 74:8a:71:03:86:78:e0:dc:e0:d5:c8:26:68:28:5c:d4:2e:95: ef:28:91:ac:e7:06:e1:c9:3b:73:e7:15:6b:2a:37:6a:4e:1e: 8d:2c:81:3a:25:25:0f:83:f7:07:a4:01:80:cc:d2:26:59:f7: d6:0f:79:ee -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NORLJeKGP9wPJYQS3xAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWZlY2Q3MDcxYjcyN2RiM2QxMmYwOWVmYmI0NTRlMDRkNGY3NDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPKzTrO5h2sfRzAhIAww4roCmpfg 984MlEkOocp+jT9pQh3mp9sAaMkQ3ho1JTZd3YBgz46zTBG716K/kV+MII4VgQMn Ao68opzu17fIZmty/1KY0qYlFUxR+M8fMDOIUgdYhu+0EpELF0dfMnrOBdYUDsjL 9kcvLXryiblut/T1wpW5SAJXn/jGaBtCsyPK6qulUSW91MVAB2O6LuqrVuis2d2U uEWcie6mpJ/BO6Ax77tHOUvOX5p2oLpGwomS+helKOCW75S7SCpOicGAUNsb7LZr vqfHJHpmwxmvH2GdVYy90KVRTVzlKWGK4OkJ3aAQeXtWfRNyszv1IoShaQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzcyZTNh MS05MDZjLTQ0OGItOThkYS01YTIwNmU4YjEzNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNzJlM2Ex LTkwNmMtNDQ4Yi05OGRhLTVhMjA2ZThiMTM2OS8xL0NmN05jSEczSjlzOUV2Q2Ut N1JVNEUxUGREMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW8TkAwQAW+CrMA0EAgACMAcDBQMqD9hAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMqxjANBgkqhkiG9w0BAQsFAAOCAQEAQTZD czriN/Cb147ACbcCKY07+VlwA4i2w5DcDIC6uhILjxLZ6CxcraTukBgZUKBP3L/K g1gdSAwse9BDy2dI8SGzjskZ5/SWV5eLBM/u8slM/zMGuvzKNewTNs9EqMYsrXvU HYVx1XAUqH8H1bvpKevzFFwCsfIRk6baKj5gTePnqeU5A/HvscvCAhmrAOmcygSn x24jEIWkoRllMbapfQuCQ5Hi/yjdFenFYc4oIlzFModTqDA04gwvfd7k3vF6JdwQ XpFqdIpxA4Z44Nzg1cgmaChc1C6V7yiRrOcG4ck7c+cVayo3ak4ejSyBOiUlD4P3 B6QBgMzSJln31g957g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:41 2026 by rpki-client