This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer File: m7S5jjWbTJLDEYP790kjjmtvCMI.cer (raw, json) Hash identifier: WCtYfHHMXjIC0B2ae1i1ArGpTM3rQ+Ca0eYrEqcgRyg= Subject key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC85AC98B142CBFD3C912245460625C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204927 IP: 176.121.2.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5a:c9:8b:14:2c:bf:d3:c9:12:24:54:60:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:de:82:d2:51:9b:fe:6a:ee:d7:db:b4:e6: ff:10:19:26:87:19:d9:46:61:59:78:16:37:c1:27: d2:f5:95:24:23:fd:59:57:7d:be:58:19:2c:7f:6e: dc:63:8d:4a:30:21:74:5e:e7:e1:06:c5:3d:a4:c6: 07:76:f7:a0:d6:57:75:0d:be:ee:72:20:0b:ea:91: b3:ed:b7:13:d7:3a:c9:21:a0:c5:77:67:e2:f0:af: ac:bf:0f:a3:1f:08:c8:ba:77:41:41:59:de:41:03: e4:7e:45:a7:5a:1a:b4:c9:32:d3:30:06:70:39:68: 95:04:f1:77:48:29:6e:f9:98:25:d6:ce:b2:2d:3a: 16:4d:77:e2:1e:1f:ea:20:5a:60:3d:e5:99:29:6e: 14:8e:4a:24:99:1d:54:39:d1:5f:0b:db:01:e9:2f: f6:eb:02:c2:a8:07:72:eb:26:5b:16:47:22:f4:b4: c1:d2:65:78:2b:32:cd:1a:d6:16:23:2f:9e:ac:a2: af:cb:65:fd:f0:e1:d4:aa:a6:e8:1f:ea:22:e4:5e: 95:d5:a8:1b:d0:23:96:a0:00:49:be:c1:91:aa:8f: da:6f:c7:1f:21:14:c9:ac:b4:88:24:d0:e1:d1:73: 44:93:0e:34:8f:03:f6:c8:53:b7:ee:0c:c9:5a:45: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.2.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204927 Signature Algorithm: sha256WithRSAEncryption ac:9a:53:ec:fd:d7:e4:06:89:61:a4:bb:35:34:5f:bf:9a:4f: dc:fc:a3:7e:39:1b:a0:72:92:75:fa:13:ad:4f:9c:dd:92:00: 26:0e:f2:28:39:91:1d:e1:f8:1c:91:20:5a:eb:2c:90:b6:c7: 75:bc:76:59:47:a0:6e:55:89:77:fa:7e:b1:f4:b9:98:32:98: a5:b9:52:e4:a0:9b:a2:e4:4d:75:92:03:f9:a5:93:9f:44:fa: cd:71:a0:a3:8e:be:56:b9:8f:55:b9:df:92:88:db:73:0c:1a: ad:99:6f:4f:12:41:8c:fc:19:9a:43:32:ab:b0:ef:e5:a1:56: 14:79:0c:8d:fb:d5:c2:92:f5:27:4c:4e:19:eb:c0:12:ec:97: c7:18:a4:ee:ae:10:d7:cf:15:8f:b9:47:0a:54:88:02:cb:ab: d7:57:92:b1:5c:60:74:02:85:64:47:9b:4a:b5:ce:ae:0f:d1: b3:7c:ec:b1:9f:63:a7:df:9c:62:ad:1a:39:bf:36:f6:35:b0: df:76:ee:f3:e5:fa:cf:ae:92:ec:bb:c3:6e:b9:5e:97:5a:79: 27:fa:14:d0:96:b0:b3:dc:a5:22:5c:8c:41:1e:de:5a:bc:2c: fa:d7:c4:42:04:4c:6d:64:18:6a:5b:ab:17:0d:05:b3:5b:8a: d5:76:2f:9a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yFrJixQsv9PJEiRUYGJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI0Yjk4ZTM1OWI0YzkyYzMxMTgzZmJmNzQ5MjM4ZTZiNmYwOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06negtJRm/5q7tfbtOb/EBkmhxnZ RmFZeBY3wSfS9ZUkI/1ZV32+WBksf27cY41KMCF0XufhBsU9pMYHdveg1ld1Db7u ciAL6pGz7bcT1zrJIaDFd2fi8K+svw+jHwjIundBQVneQQPkfkWnWhq0yTLTMAZw OWiVBPF3SClu+Zgl1s6yLToWTXfiHh/qIFpgPeWZKW4UjkokmR1UOdFfC9sB6S/2 6wLCqAdy6yZbFkci9LTB0mV4KzLNGtYWIy+erKKvy2X98OHUqqboH+oi5F6V1agb 0COWoABJvsGRqo/ab8cfIRTJrLSIJNDh0XNEkw40jwP2yFO37gzJWkV/1QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJu0uY41m0ySwxGD+/dJI45rbwjCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2M5ZDRi Yi0zMTM1LTRhOWMtYjM3MS1iYjBkMDRhMjc3MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYzlkNGJi LTMxMzUtNGE5Yy1iMzcxLWJiMGQwNGEyNzcyNy8xL203UzVqaldiVEpMREVZUDc5 MGtqam10dkNNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHkCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMgfzANBgkqhkiG9w0BAQsFAAOCAQEArJpT7P3X5AaJYaS7NTRfv5pP3Pyjfjkb oHKSdfoTrU+c3ZIAJg7yKDmRHeH4HJEgWusskLbHdbx2WUegblWJd/p+sfS5mDKY pblS5KCbouRNdZID+aWTn0T6zXGgo46+VrmPVbnfkojbcwwarZlvTxJBjPwZmkMy q7Dv5aFWFHkMjfvVwpL1J0xOGevAEuyXxxik7q4Q188Vj7lHClSIAsur11eSsVxg dAKFZEebSrXOrg/Rs3zssZ9jp9+cYq0aOb829jWw33bu8+X6z66S7LvDbrlel1p5 J/oU0Jaws9ylIlyMQR7eWrws+tfEQgRMbWQYalurFw0Fs1uK1XYvmg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:16 2026 by rpki-client