This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer File: 7XZO39sbgh1dJayLeggKapBvprA.cer (raw, json) Hash identifier: pzdbPXzYjD6AwV8kEX7KxlsBCO8fNGErRpyadCzvhPQ= Subject key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834BC13FE1425665AB5862F47072B83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47884 IP: 91.206.244.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bc:13:fe:14:25:66:5a:b5:86:2f:47:07:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:61:27:4d:57:58:9d:26:28:ab:60:80:27:a3: c3:88:2c:6b:03:b2:fe:25:f0:da:11:16:22:b9:25: aa:f7:0d:79:d4:b6:74:dc:72:75:d3:da:50:93:50: 7c:e3:76:53:22:41:ab:48:be:d9:f4:c2:d9:8f:43: c0:ab:5a:66:ed:ee:8f:64:cb:dc:df:bd:ff:c7:ca: f8:77:bd:2b:0c:e4:ec:53:7f:75:53:87:75:1c:e8: 2e:42:b3:02:c6:3c:bc:ea:ef:b5:a5:23:16:b1:c4: 14:70:0f:18:e6:53:5b:d7:05:37:1f:3b:b5:98:6a: f4:1b:e6:7b:d7:33:1a:b2:57:29:ac:9d:50:96:4b: 17:42:eb:19:60:f9:89:4e:d5:90:82:0c:cb:3c:30: d5:7b:b6:41:bf:8e:f5:4a:64:dc:b5:f3:60:ea:00: 2a:c6:9f:e5:38:d3:4b:d4:de:32:9b:62:92:24:dc: 6d:96:c8:65:50:d8:01:25:30:10:f7:00:a8:c0:47: 02:c6:83:e6:20:fe:f7:13:5d:4b:61:8d:49:38:42: 04:30:2e:fa:f0:ee:82:42:90:39:85:0c:dd:75:0c: 7b:e8:82:b6:80:18:f3:8b:71:bd:ad:1f:65:29:4c: 70:4e:f2:c7:55:d6:75:b3:00:ce:d2:32:aa:9c:e1: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.244.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47884 Signature Algorithm: sha256WithRSAEncryption 93:08:a8:8a:7a:55:dd:aa:4b:7e:b4:5e:f2:46:bf:18:66:02: 91:70:b4:fe:44:dd:1c:43:c4:d6:3c:09:35:57:95:55:9d:0f: 86:d2:8e:94:20:5b:2d:fc:a5:73:9c:d2:11:f3:ac:bb:1d:65: 67:2a:b5:0a:ea:54:bd:89:44:c7:e4:2e:bf:c0:4c:05:f6:58: 21:f1:0d:5d:2f:c9:ad:62:e7:ea:f4:0d:fa:bf:e0:1f:89:14: d1:56:ac:b2:ee:e0:e6:b7:a4:c6:b3:9e:c2:50:e9:66:14:0a: 37:fc:4b:32:08:a4:75:f3:02:a5:ac:42:47:bd:ad:65:9f:e0: 70:d5:c9:ff:6a:68:ad:f9:05:48:bd:77:f1:49:5c:b6:c6:08: c2:01:7b:b9:c6:9a:6d:40:c2:e2:20:fd:8b:3b:c5:ba:3f:b2: 3e:40:08:99:e4:71:3e:37:8a:bb:38:27:91:0f:4b:f5:b4:56: ad:fd:4b:58:50:a3:ff:fd:c4:e7:ac:04:53:18:58:59:91:9b: a5:c8:27:7b:66:15:1e:0d:f5:e1:fe:02:d0:ad:09:b1:2a:cd: 99:d1:57:96:6a:f3:e0:4e:34:bb:39:66:ea:83:cd:d3:ad:eb: 41:6c:08:3d:ac:da:90:72:e0:6f:c1:f6:57:0b:fe:59:6c:69: 51:a7:17:db -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NLwT/hQlZlq1hi9HByuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDc2NGVkZmRiMWI4MjFkNWQyNWFjOGI3YTA4MGE2YTkwNmZhNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92EnTVdYnSYoq2CAJ6PDiCxrA7L+ JfDaERYiuSWq9w151LZ03HJ109pQk1B843ZTIkGrSL7Z9MLZj0PAq1pm7e6PZMvc 373/x8r4d70rDOTsU391U4d1HOguQrMCxjy86u+1pSMWscQUcA8Y5lNb1wU3Hzu1 mGr0G+Z71zMaslcprJ1QlksXQusZYPmJTtWQggzLPDDVe7ZBv471SmTctfNg6gAq xp/lONNL1N4ym2KSJNxtlshlUNgBJTAQ9wCowEcCxoPmIP73E11LYY1JOEIEMC76 8O6CQpA5hQzddQx76IK2gBjzi3G9rR9lKUxwTvLHVdZ1swDO0jKqnOEgdQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO12Tt/bG4IdXSWsi3oICmqQb6awMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2VlZGIz OS0wMzg1LTRhOTgtODk2My1kMzQ4ZWRlYTgzN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZWVkYjM5 LTAzODUtNGE5OC04OTYzLWQzNDhlZGVhODM3Yi8xLzdYWk8zOXNiZ2gxZEpheUxl Z2dLYXBCdnByQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW870MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC7DDANBgkqhkiG9w0BAQsFAAOCAQEAkwioinpV3apLfrRe8ka/GGYCkXC0/kTd HEPE1jwJNVeVVZ0PhtKOlCBbLfylc5zSEfOsux1lZyq1CupUvYlEx+Quv8BMBfZY IfENXS/JrWLn6vQN+r/gH4kU0Vassu7g5rekxrOewlDpZhQKN/xLMgikdfMCpaxC R72tZZ/gcNXJ/2porfkFSL138UlctsYIwgF7ucaabUDC4iD9izvFuj+yPkAImeRx PjeKuzgnkQ9L9bRWrf1LWFCj//3E56wEUxhYWZGbpcgne2YVHg314f4C0K0JsSrN mdFXlmrz4E40uzlm6oPN063rQWwIPazakHLgb8H2Vwv+WWxpUacX2w== -----END CERTIFICATE-----Generated at Fri Jan 2 16:56:59 2026 by rpki-client