This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer File: i7CxfdibOGQklyi5_C7q5RD95Ps.cer (raw, json) Hash identifier: bXhU+BqWPZkDhzpOURvyt7gYJheH6sMz+8yc5ZbZPFc= Subject key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F18B59A68E2B4CD5370C5CB4D046 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41751 IP: 91.206.0.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:8b:59:a6:8e:2b:4c:d5:37:0c:5c:b4:d0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:64:a0:66:f3:12:cb:cb:92:9d:06:51:2b: ef:ab:67:e3:ca:29:10:14:3b:35:c5:87:2f:2f:e8: 5b:34:9a:21:77:3a:ae:ef:39:48:5d:d7:7b:b6:c9: d4:02:98:de:9b:61:54:f7:60:cd:d0:18:3e:c9:e8: ef:1f:c3:1b:ee:38:a2:58:eb:75:20:75:6d:de:e8: cc:f5:08:64:3d:5c:cc:1d:11:d1:18:ef:64:a9:9a: ad:96:dd:fb:10:14:e9:6f:2d:f0:34:ca:0a:c4:5f: cc:0f:9b:23:a1:85:ba:44:36:77:58:af:87:c8:6a: ee:30:83:4d:a6:5f:75:20:0c:c9:18:d4:e8:ce:4b: b2:85:9d:ba:f6:be:4b:b6:f4:35:44:02:7f:b8:10: d9:ee:28:3a:cc:be:90:70:69:99:17:60:f2:95:06: 55:7a:bb:8c:a4:9e:57:21:ec:b7:85:6b:61:46:bf: 61:21:82:1f:af:04:5b:dd:03:e8:a2:99:07:4e:6a: a7:f1:ed:66:ff:0a:af:13:ec:23:61:17:73:61:c3: 8d:ed:dd:e1:11:3f:4e:2b:6a:4c:18:10:d7:ac:9f: 45:48:71:b9:86:b1:38:bd:8f:2b:2d:44:51:b5:9d: 0a:74:ad:29:6e:e3:af:8e:d4:0e:5e:5c:8d:94:cf: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.0.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41751 Signature Algorithm: sha256WithRSAEncryption 10:8e:14:d2:de:78:e3:87:9e:bf:33:9f:ff:92:0b:3a:f0:ac: df:a0:22:03:f4:0d:27:7e:eb:ee:6a:df:56:61:0d:bb:fa:3e: 36:69:e9:8a:a6:b4:d1:f0:fd:6c:4a:10:a1:fe:05:de:47:7f: da:6d:91:3f:c2:21:78:31:e3:2b:e5:f2:22:71:da:d2:e2:ea: 5b:33:cd:c2:78:e0:a3:0e:14:b1:4d:25:f2:1d:ae:3b:1b:8f: a2:14:fa:96:40:1e:59:c4:16:72:a8:75:25:c9:69:0c:86:7a: 47:27:d1:c5:1b:45:e6:45:bf:f4:c5:cc:20:54:3c:9d:36:b3: de:8f:6c:47:b4:69:a1:62:32:67:5b:da:ba:3c:a4:0d:77:34: df:4d:0f:29:83:d7:c3:b2:28:26:b3:1e:29:1f:cb:79:25:35: e9:81:0f:5f:5f:72:d9:fd:3e:0c:a6:72:73:26:5a:19:b8:53: 4b:11:de:ff:7b:2a:91:59:66:8a:11:e1:c6:8a:47:d8:f9:72: 85:b2:3f:01:7d:db:31:79:cc:b2:90:81:d3:ab:df:0a:b5:8d: 6f:ed:8a:7d:76:f5:f2:14:af:6e:7a:32:8d:b1:4f:31:86:fd: 95:44:6a:48:db:28:13:f9:8a:f4:ac:0b:73:7e:81:8e:9a:ea: c0:67:f3:60 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WPGLWaaOK0zVNwxctNBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmIwYjE3ZGQ4OWIzODY0MjQ5NzI4YjlmYzJlZWFlNTEwZmRlNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQhkoGbzEsvLkp0GUSvvq2fjyikQ FDs1xYcvL+hbNJohdzqu7zlIXdd7tsnUApjem2FU92DN0Bg+yejvH8Mb7jiiWOt1 IHVt3ujM9QhkPVzMHRHRGO9kqZqtlt37EBTpby3wNMoKxF/MD5sjoYW6RDZ3WK+H yGruMINNpl91IAzJGNTozkuyhZ269r5LtvQ1RAJ/uBDZ7ig6zL6QcGmZF2DylQZV eruMpJ5XIey3hWthRr9hIYIfrwRb3QPoopkHTmqn8e1m/wqvE+wjYRdzYcON7d3h ET9OK2pMGBDXrJ9FSHG5hrE4vY8rLURRtZ0KdK0pbuOvjtQOXlyNlM+BPwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIuwsX3YmzhkJJcoufwu6uUQ/eT7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2JhOTVm ZS00NTk5LTRkODMtYjZiZC1lMDE5MTlmY2ZlZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvYmE5NWZl LTQ1OTktNGQ4My1iNmJkLWUwMTkxOWZjZmVkZi8xL2k3Q3hmZGliT0dRa2x5aTVf QzdxNVJEOTVQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW84AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCjFzANBgkqhkiG9w0BAQsFAAOCAQEAEI4U0t5444eevzOf/5ILOvCs36AiA/QN J37r7mrfVmENu/o+Nmnpiqa00fD9bEoQof4F3kd/2m2RP8IheDHjK+XyInHa0uLq WzPNwnjgow4UsU0l8h2uOxuPohT6lkAeWcQWcqh1JclpDIZ6RyfRxRtF5kW/9MXM IFQ8nTaz3o9sR7RpoWIyZ1vaujykDXc0300PKYPXw7IoJrMeKR/LeSU16YEPX19y 2f0+DKZycyZaGbhTSxHe/3sqkVlmihHhxopH2PlyhbI/AX3bMXnMspCB06vfCrWN b+2KfXb18hSvbnoyjbFPMYb9lURqSNsoE/mK9KwLc36BjprqwGfzYA== -----END CERTIFICATE-----Generated at Mon Jan 12 13:06:05 2026 by rpki-client