This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer File: k7dqyfeoSteQrVfIgLyfhirUyec.cer (raw, json) Hash identifier: 6DsR5+EwIoJ/1edGino67lnB3OL+Vc4nlOuiJ9hXDoI= Subject key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FCF16BD0B5EC3343FC0A28ADDB55F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49765 IP: 5.226.56.0/21 IP: 91.102.56.0/21 IP: 94.136.224.0/19 IP: 109.72.16.0/20 IP: 137.221.0.0 -- 137.221.23.255 IP: 185.48.108.0/22 IP: 2a00:fce0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cf:16:bd:0b:5e:c3:34:3f:c0:a2:8a:dd:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:98:ee:4b:07:0e:b0:81:68:5a:74:1e:bd: 58:54:88:52:62:ce:90:ac:f3:2d:16:bf:a7:35:0a: 3e:57:7f:b4:1a:b3:80:ee:03:ac:d1:2a:fb:25:3f: 71:84:cc:c2:51:06:8d:3d:47:9d:1a:a1:df:fb:e8: 61:2f:68:eb:e6:3f:56:64:17:c0:95:6e:5f:e0:35: 62:c6:d8:fc:9e:d2:f6:b0:bc:1e:0f:31:71:22:57: 18:bb:4d:41:6a:e8:ae:f7:14:ce:c8:44:97:1c:83: 63:c0:09:39:da:aa:0b:26:ee:a7:ca:d6:50:a0:49: 74:0f:4f:67:0e:c2:e3:c6:45:14:c7:53:9d:4e:79: 57:f0:32:22:ee:ec:fb:59:0a:b9:89:07:03:97:7d: ba:1a:92:24:3b:52:93:1d:65:4e:b9:6b:c2:95:3f: 2a:90:d1:65:78:d2:fe:d3:b5:c6:eb:89:c3:f8:c1: fa:e5:3b:51:8a:1f:86:b9:b8:f7:65:94:05:59:cb: 63:ec:4c:98:0e:37:1d:e7:fa:85:80:09:42:ae:5c: 16:a8:85:52:c1:2c:09:86:90:9f:c2:81:28:4d:71: 0e:86:77:bd:b9:fb:b6:ed:c7:4b:20:ea:a8:cd:fe: d7:c2:a2:d2:2f:00:80:b1:4f:8a:3d:bc:ed:bc:f0: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.56.0/21 91.102.56.0/21 94.136.224.0/19 109.72.16.0/20 137.221.0.0-137.221.23.255 185.48.108.0/22 IPv6: 2a00:fce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49765 Signature Algorithm: sha256WithRSAEncryption a4:2a:7b:69:3a:53:7a:17:6d:ac:d6:96:58:bc:2c:9e:f4:6a: 16:07:cd:29:bb:40:0d:99:c5:bb:3e:78:a7:43:31:05:5c:28: 19:58:3f:64:e5:03:3c:6e:1f:c6:99:3b:39:8e:17:7e:bd:01: ad:6a:67:f7:ce:fa:6c:c2:4c:2d:a2:8a:14:55:ac:51:07:8b: 72:4e:d3:9b:2e:ae:ac:2e:76:8c:67:4c:41:70:80:5b:e3:3f: 2c:da:30:a5:41:f6:ca:9d:b4:dc:13:61:27:b4:d1:42:89:4f: 7f:bf:a5:ae:f3:78:c0:58:6f:e7:dd:f2:95:bd:74:83:f9:73: 5f:1d:36:82:56:b7:9d:1e:d1:73:bc:f9:f1:24:52:f7:51:cc: c8:5d:49:7b:a3:a5:b9:65:e6:9d:71:91:d7:d8:b6:cf:40:34: ad:49:1c:1a:88:c9:b8:11:e5:89:dc:ee:12:49:e4:a5:c5:9e: 04:71:da:91:9b:c0:1f:65:8d:bc:df:9a:96:b7:cf:d9:e6:0d: 91:53:cb:1e:00:12:32:c4:04:fb:1e:dc:1e:6e:e0:b2:03:6d: 9b:61:85:12:9a:09:b6:37:23:0e:ed:09:33:eb:e8:c9:fd:96: 0a:a1:82:0c:65:7c:e0:72:28:7c:28:a6:ab:8c:2b:06:b3:ec: 20:aa:13:5f -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt8f88WvQtewzQ/wKKK3bVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I3NmFjOWY3YTg0YWQ3OTBhZDU3Yzg4MGJjOWY4NjJhZDRjOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE2Y7ksHDrCBaFp0Hr1YVIhSYs6Q rPMtFr+nNQo+V3+0GrOA7gOs0Sr7JT9xhMzCUQaNPUedGqHf++hhL2jr5j9WZBfA lW5f4DVixtj8ntL2sLweDzFxIlcYu01Bauiu9xTOyESXHINjwAk52qoLJu6nytZQ oEl0D09nDsLjxkUUx1OdTnlX8DIi7uz7WQq5iQcDl326GpIkO1KTHWVOuWvClT8q kNFleNL+07XG64nD+MH65TtRih+Gubj3ZZQFWctj7EyYDjcd5/qFgAlCrlwWqIVS wSwJhpCfwoEoTXEOhne9ufu27cdLIOqozf7XwqLSLwCAsU+KPbztvPBYrwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFJO3asn3qErXkK1XyIC8n4Yq1MnnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2QzM2Nl MC02OWEwLTRiYTMtYjNjOS05OTgyNzhmNGZiYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZDMzY2Uw LTY5YTAtNGJhMy1iM2M5LTk5ODI3OGY0ZmJiMi8xL2s3ZHF5ZmVvU3RlUXJWZkln THlmaGlyVXllYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAxBAIAATArAwQDBeI4AwQDW2Y4AwQFXojgAwQEbUgQMAsDAwCJ 3QMEA4ndEAMEArkwbDANBAIAAjAHAwUAKgD84DAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAwmUwDQYJKoZIhvcNAQELBQADggEBAKQqe2k6U3oXbazWlli8LJ70ahYH zSm7QA2Zxbs+eKdDMQVcKBlYP2TlAzxuH8aZOzmOF369Aa1qZ/fO+mzCTC2iihRV rFEHi3JO05surqwudoxnTEFwgFvjPyzaMKVB9sqdtNwTYSe00UKJT3+/pa7zeMBY b+fd8pW9dIP5c18dNoJWt50e0XO8+fEkUvdRzMhdSXujpbll5p1xkdfYts9ANK1J HBqIybgR5Ync7hJJ5KXFngRx2pGbwB9ljbzfmpa3z9nmDZFTyx4AEjLEBPse3B5u 4LIDbZthhRKaCbY3Iw7tCTPr6Mn9lgqhggxlfOByKHwopquMKwaz7CCqE18= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:30 2026 by rpki-client