This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer File: M7Zai666T_YhSS6-5vweiK2yGwM.cer (raw, json) Hash identifier: 1kLj5gli5VfR2KPkgk2Kd3sBDMi9WiKQuW/mnpMD1l4= Subject key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2B881DC6C33FB182A6C05A5752842 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208111 AS: 213622 IP: 2a14:9d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b8:81:dc:6c:33:fb:18:2a:6c:05:a5:75:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:f2:a1:ff:b1:21:8f:76:56:96:1d:ab:a4: 84:59:4c:4f:c5:44:fd:92:ef:5a:1d:90:71:d6:aa: e5:be:f5:eb:9c:75:8c:e4:4c:bd:9e:69:c5:0c:5a: 50:22:47:4f:e1:5a:26:c3:78:e1:1f:c3:78:fb:f5: 5a:ef:90:5a:3c:4f:12:30:9d:7b:73:9a:f6:4d:73: 4b:7a:ad:c7:40:82:b9:85:a3:92:a6:f3:17:96:f3: 5d:06:12:ec:71:31:2a:1f:ab:b3:21:d6:fa:89:0d: 0f:5e:63:45:a7:98:e3:a3:28:c2:b8:11:ba:70:61: 5c:c6:f7:fb:ec:02:15:69:7f:37:ef:20:fa:c3:89: 60:a1:e3:4b:88:0b:27:ee:b8:3b:a4:0b:ee:75:bc: 29:41:72:32:a8:df:28:f5:66:1f:af:50:03:7a:43: 59:51:74:f6:8c:68:1d:40:a8:1d:2a:57:ce:42:85: 78:9b:8d:14:b3:58:31:8b:5a:3b:17:ed:5b:4d:4d: af:7f:54:3f:da:27:a6:db:80:fb:9e:c1:c4:6b:af: ab:a4:c1:35:da:1e:76:3c:20:50:f1:38:b8:ca:da: 62:79:d3:d4:41:92:d5:af:f2:32:be:fc:be:d9:b0: 08:57:42:b5:a0:8b:a0:01:bd:77:a2:7c:a2:e0:48: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208111 213622 Signature Algorithm: sha256WithRSAEncryption 80:c0:c4:02:16:4e:57:31:73:a5:15:8c:59:fb:c4:de:c2:eb: 89:91:6c:76:ef:d4:7a:01:48:e1:97:a6:d2:db:4e:b0:ee:86: 9a:3c:7d:52:1b:da:00:63:60:fa:67:50:15:bb:36:6a:71:3b: 9b:35:cb:7c:ed:25:87:36:f3:4d:1d:13:81:ef:44:8e:6d:18: e6:79:cc:2b:4f:38:40:07:41:1a:b9:c6:b5:e0:6f:95:e1:21: ec:85:0a:e2:bb:9d:75:5f:92:2b:9b:cc:55:d1:36:e9:82:4e: f2:fe:80:43:7d:04:73:e3:a2:c7:5d:bb:ee:e9:5e:f8:9e:9b: 23:e8:d2:c5:af:ab:54:68:22:8d:15:f2:78:ec:f8:3b:4f:79: 82:d3:4e:11:5f:c0:e3:8d:df:5d:ff:58:cf:58:c5:62:8b:bd: c5:56:8f:1e:06:c1:1f:d4:12:51:0b:48:cb:98:91:d5:77:e2: ad:97:4c:0a:2f:84:4f:90:42:25:98:95:44:47:03:80:42:af: 5b:d5:ae:f5:f7:fa:12:7d:d9:09:3b:4d:99:c4:44:c9:a5:2a: 25:75:45:cd:15:7f:14:da:ac:50:13:d0:28:0a:f7:48:e8:ac: 33:e2:31:3e:5e:a9:34:73:9f:af:de:f1:99:3f:4e:15:7b:b9: a6:a3:aa:0e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/8riB3Gwz+xgqbAWldShCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2I2NWE4YmFlYmE0ZmY2MjE0OTJlYmVlNmZjMWU4OGFkYjIxYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQLyof+xIY92VpYdq6SEWUxPxUT9 ku9aHZBx1qrlvvXrnHWM5Ey9nmnFDFpQIkdP4Vomw3jhH8N4+/Va75BaPE8SMJ17 c5r2TXNLeq3HQIK5haOSpvMXlvNdBhLscTEqH6uzIdb6iQ0PXmNFp5jjoyjCuBG6 cGFcxvf77AIVaX837yD6w4lgoeNLiAsn7rg7pAvudbwpQXIyqN8o9WYfr1ADekNZ UXT2jGgdQKgdKlfOQoV4m40Us1gxi1o7F+1bTU2vf1Q/2iem24D7nsHEa6+rpME1 2h52PCBQ8Ti4ytpiedPUQZLVr/Iyvvy+2bAIV0K1oIugAb13onyi4EgIRQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDO2Wouuuk/2IUkuvub8HoitshsDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2FhYmM2 Yy0wNDU2LTQ5MzUtYTQ2OS1kNTQ3MTg1NTEyZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvYWFiYzZj LTA0NTYtNDkzNS1hNDY5LWQ1NDcxODU1MTJkZS8xL003WmFpNjY2VF9ZaFNTNi01 dndlaUsyeUd3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhSdADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMDLO8CAwNCdjANBgkqhkiG9w0BAQsFAAOCAQEAgMDEAhZOVzFzpRWMWfvE3sLr iZFsdu/UegFI4Zem0ttOsO6Gmjx9UhvaAGNg+mdQFbs2anE7mzXLfO0lhzbzTR0T ge9Ejm0Y5nnMK084QAdBGrnGteBvleEh7IUK4ruddV+SK5vMVdE26YJO8v6AQ30E c+Oix1277ule+J6bI+jSxa+rVGgijRXyeOz4O095gtNOEV/A443fXf9Yz1jFYou9 xVaPHgbBH9QSUQtIy5iR1XfirZdMCi+ET5BCJZiVREcDgEKvW9Wu9ff6En3ZCTtN mcREyaUqJXVFzRV/FNqsUBPQKAr3SOisM+IxPl6pNHOfr97xmT9OFXu5pqOqDg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:27 2026 by rpki-client