This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer File: p72yx7M0uUvNQziPIfggktts_Uw.cer (raw, json) Hash identifier: pvkTEzLeUbcXAF6H40duCmNCTI0FQ0yqUXjxtLKbknE= Subject key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A74EBE51826EE84251AA29F5ED72C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57844 AS: 203963 IP: 37.123.96.0/21 IP: 178.20.224.0/21 IP: 185.9.156.0/22 IP: 185.118.140.0/24 IP: 185.118.142.0/23 IP: 2a00:9bc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:74:eb:e5:18:26:ee:84:25:1a:a2:9f:5e:d7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:bd:78:2b:aa:9f:77:aa:31:0d:5a:b4:b9: 40:1d:fe:47:91:16:41:1b:4b:02:d5:60:0c:d6:3c: 5f:ff:dc:c3:17:3a:d3:16:fb:34:9c:f6:47:91:19: 9d:d6:99:34:ea:e5:24:97:ff:99:7e:7e:bd:cb:3c: 7c:aa:2b:c9:79:cf:15:bc:8a:a6:44:bb:04:3a:cd: c3:77:d9:7b:18:f3:ec:a7:f5:cb:ce:0c:2b:0e:22: e8:5d:55:d4:5b:59:c2:88:27:a7:cb:2d:f6:2f:42: f4:db:98:85:85:01:50:71:d0:2e:a8:00:e7:e9:a5: 71:33:e8:45:7c:e9:96:07:3c:49:06:53:27:81:3c: 9a:b7:50:50:dd:25:da:af:99:83:de:0e:56:c8:25: f6:3b:3f:c6:e0:4a:57:5c:eb:2b:a5:54:e1:01:d1: 6d:f6:f1:99:2f:89:05:1a:47:05:e4:41:51:38:fd: 00:a0:7e:ba:a5:64:11:32:5f:8a:da:84:26:9c:28: 6d:29:50:6f:75:4e:93:5d:b2:ee:15:48:16:b6:c4: 3a:e1:27:60:42:59:46:ea:7c:84:2d:8c:6c:69:d8: c3:15:c0:51:2b:29:05:3a:97:17:6e:be:27:db:a7: 87:cc:be:24:7b:8c:3b:d5:f4:e5:44:da:dd:a2:76: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.96.0/21 178.20.224.0/21 185.9.156.0/22 185.118.140.0/24 185.118.142.0/23 IPv6: 2a00:9bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57844 203963 Signature Algorithm: sha256WithRSAEncryption a1:d7:77:20:f1:d9:0d:46:82:9c:ce:b1:4c:1b:8d:c1:62:67: d0:ef:b3:b6:4e:33:74:ca:f5:c6:89:d6:5a:31:77:63:bc:cd: 93:f9:2e:02:dc:d1:20:34:ca:d4:97:7c:11:4d:8b:af:06:05: 36:57:a7:7a:67:4e:95:9b:8b:8d:27:0a:7c:d7:33:a7:34:73: f9:ff:cb:fc:13:15:96:5d:0d:0e:a6:0a:c8:b8:e6:26:a3:a9: 7e:e2:0e:20:81:07:e0:f2:f4:6a:15:45:a0:b2:f4:7a:40:7a: 26:76:cd:6e:d9:92:bd:26:55:63:ed:af:33:3b:9a:aa:af:ae: 85:35:a9:0c:c1:c6:a4:aa:07:6a:1a:ca:bc:a9:9f:21:6d:35: 7c:14:e5:e4:dd:8b:6d:a8:f9:96:05:82:65:2c:e9:6e:46:77: ad:54:25:87:c1:f6:19:ad:0a:99:e8:0e:84:43:82:c8:1c:87: 91:72:4e:bf:ea:ec:81:78:d1:2a:9b:45:a9:32:50:19:63:23: 00:b7:af:be:f5:a7:cc:fc:3b:02:6e:e2:63:a3:5d:8e:67:4f: 08:be:2d:f8:75:7d:11:26:9b:04:fe:66:6c:7c:bc:03:46:35: c0:e2:f8:5c:47:77:fe:76:81:d4:0b:2b:1f:34:8b:eb:d7:65: 2a:48:cc:93 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt6WnTr5Rgm7oQlGqKfXtcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2JkYjJjN2IzMzRiOTRiY2Q0MzM4OGYyMWY4MjA5MmRiNmNmZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscm9eCuqn3eqMQ1atLlAHf5HkRZB G0sC1WAM1jxf/9zDFzrTFvs0nPZHkRmd1pk06uUkl/+Zfn69yzx8qivJec8VvIqm RLsEOs3Dd9l7GPPsp/XLzgwrDiLoXVXUW1nCiCenyy32L0L025iFhQFQcdAuqADn 6aVxM+hFfOmWBzxJBlMngTyat1BQ3SXar5mD3g5WyCX2Oz/G4EpXXOsrpVThAdFt 9vGZL4kFGkcF5EFROP0AoH66pWQRMl+K2oQmnChtKVBvdU6TXbLuFUgWtsQ64Sdg QllG6nyELYxsadjDFcBRKykFOpcXbr4n26eHzL4ke4w71fTlRNrdonY00QIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFKe9ssezNLlLzUM4jyH4IJLbbP1MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2ExZWU5 Ni0yZWVkLTQ1MzMtOGFmZC1hOTU4YmY1YWNiZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYTFlZTk2 LTJlZWQtNDUzMy04YWZkLWE5NThiZjVhY2JlYS8xL3A3Mnl4N00wdVV2TlF6aVBJ Zmdna3R0c19Vdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDJXtgAwQDshTgAwQCuQmcAwQAuXaMAwQBuXaO MA0EAgACMAcDBQAqAJvAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDh9AIDAxy7 MA0GCSqGSIb3DQEBCwUAA4IBAQCh13cg8dkNRoKczrFMG43BYmfQ77O2TjN0yvXG idZaMXdjvM2T+S4C3NEgNMrUl3wRTYuvBgU2V6d6Z06Vm4uNJwp81zOnNHP5/8v8 ExWWXQ0OpgrIuOYmo6l+4g4ggQfg8vRqFUWgsvR6QHomds1u2ZK9JlVj7a8zO5qq r66FNakMwcakqgdqGsq8qZ8hbTV8FOXk3YttqPmWBYJlLOluRnetVCWHwfYZrQqZ 6A6EQ4LIHIeRck6/6uyBeNEqm0WpMlAZYyMAt6++9afM/DsCbuJjo12OZ08Ivi34 dX0RJpsE/mZsfLwDRjXA4vhcR3f+doHUCysfNIvr12UqSMyT -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:08 2026 by rpki-client