This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer File: k7MitZBI4Qe5Sm2wZVevXwycKQw.cer (raw, json) Hash identifier: +I3PRHKHuIti/N5lyP5WZCrQ5bbVIGBnuJpKvRZwfUc= Subject key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F833DD8EBCE6CEAE32C99C4324345B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3d:d8:eb:ce:6c:ea:e3:2c:99:c4:32:43:45:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b322b59048e107b94a6db06557af5f0c9c290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:8a:b1:14:09:af:92:6e:29:01:19:80:27: 9c:b8:72:bd:1c:2a:f1:97:ba:09:5f:8f:37:70:e0: ae:99:a2:71:f4:43:e1:be:96:e7:9d:cb:68:ff:fc: 5b:a0:f0:e0:61:af:85:5b:af:83:8b:0f:a6:92:76: 76:bf:66:f8:83:63:97:fc:ce:44:34:29:59:15:0d: 83:7c:7d:6c:e8:f7:4c:66:7c:68:f2:20:20:c9:72: 82:7d:21:52:81:b3:fd:b9:01:aa:8a:80:eb:5e:31: 42:c9:5a:e2:89:a7:33:57:6a:5a:94:6b:7a:f5:74: 59:fc:c7:c9:05:1e:05:6e:c6:81:90:21:43:0a:8f: 1b:ba:15:be:5b:ef:e3:67:87:9d:39:c9:87:11:6b: 9f:e2:2a:d5:59:20:d1:85:93:94:ce:84:04:cc:21: 2f:4c:39:b1:bd:9c:72:3c:d6:29:d3:0b:5e:b5:d4: f8:1f:37:5b:c5:ae:b2:1e:5a:7b:2e:f6:5c:b8:e3: 60:00:dd:9d:e3:ee:91:b6:bc:17:c4:fe:5c:49:2e: 87:78:7f:69:4d:d6:f0:3b:39:bb:43:04:1d:79:b0: 19:98:58:e5:eb:46:d9:89:60:de:58:6c:49:88:33: cc:fa:f7:e7:1c:29:bb:b6:15:fd:e8:80:34:dd:9f: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.26.0/23 Signature Algorithm: sha256WithRSAEncryption 08:2f:35:17:b2:59:f6:a6:cd:b7:fe:99:29:2a:0c:29:99:f5: 58:78:cf:13:ef:af:5e:92:08:c5:6f:44:49:05:ae:13:d3:b8: e7:25:98:e3:71:e2:1d:60:19:53:92:2a:39:6e:2a:bd:3d:be: 21:3e:7f:e5:96:58:ba:fc:60:4c:95:91:e7:55:83:26:a2:7e: 6a:34:33:2e:98:72:38:26:18:7c:53:74:9a:f7:27:a9:e3:8a: 12:a6:38:44:48:12:0d:b9:66:0c:e7:04:d4:df:98:19:9e:16: 65:cc:51:6e:08:59:26:87:01:e3:42:35:0a:ef:29:d7:36:df: 9c:cd:82:a9:79:35:b7:b0:4a:98:cc:1b:7b:91:fa:e2:e8:f1: d1:68:b7:4d:89:56:61:da:dd:de:60:bc:7e:34:4b:4b:65:e4: 21:e1:9e:c4:ae:09:63:28:7c:bd:21:61:75:12:7d:70:11:7f: 49:9e:05:db:df:bb:c9:03:fd:16:e5:9e:30:5c:ba:f4:6e:95: 57:e9:79:e9:3e:f9:77:fa:87:8e:59:4b:6f:31:fb:fb:63:61: 34:80:28:f2:7a:e2:cd:d6:87:1f:7c:89:73:9d:a8:de:fb:75: 49:ea:83:e1:c6:00:d2:1d:db:2b:d2:10:da:64:91:fd:9c:c7: bd:0a:7e:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gz3Y685s6uMsmcQyQ0W5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2IzMjJiNTkwNDhlMTA3Yjk0YTZkYjA2NTU3YWY1ZjBjOWMyOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1OKsRQJr5JuKQEZgCecuHK9HCrx l7oJX483cOCumaJx9EPhvpbnncto//xboPDgYa+FW6+Diw+mknZ2v2b4g2OX/M5E NClZFQ2DfH1s6PdMZnxo8iAgyXKCfSFSgbP9uQGqioDrXjFCyVriiaczV2palGt6 9XRZ/MfJBR4FbsaBkCFDCo8buhW+W+/jZ4edOcmHEWuf4irVWSDRhZOUzoQEzCEv TDmxvZxyPNYp0wtetdT4Hzdbxa6yHlp7LvZcuONgAN2d4+6RtrwXxP5cSS6HeH9p TdbwOzm7QwQdebAZmFjl60bZiWDeWGxJiDPM+vfnHCm7thX96IA03Z/0awIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJOzIrWQSOEHuUptsGVXr18MnCkMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzdmZjUy MC03MjcwLTRhOTgtYWVjOS1lZjYwNGQ0MTZjMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvN2ZmNTIw LTcyNzAtNGE5OC1hZWM5LWVmNjA0ZDQxNmMzNy8xL2s3TWl0WkJJNFFlNVNtMnda VmV2WHd5Y0tRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwQUaMA0GCSqGSIb3DQEBCwUAA4IBAQAILzUX sln2ps23/pkpKgwpmfVYeM8T769ekgjFb0RJBa4T07jnJZjjceIdYBlTkio5biq9 Pb4hPn/llli6/GBMlZHnVYMmon5qNDMumHI4Jhh8U3Sa9yep44oSpjhESBINuWYM 5wTU35gZnhZlzFFuCFkmhwHjQjUK7ynXNt+czYKpeTW3sEqYzBt7kfri6PHRaLdN iVZh2t3eYLx+NEtLZeQh4Z7ErgljKHy9IWF1En1wEX9JngXb37vJA/0W5Z4wXLr0 bpVX6XnpPvl3+oeOWUtvMfv7Y2E0gCjyeuLN1ocffIlznaje+3VJ6oPhxgDSHdsr 0hDaZJH9nMe9Cn4k -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:17 2026 by rpki-client