This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer (raw, json) Hash identifier: SqbZH3EOSG8DMs/m8gkQHswzGepT3db1wDxsdaliy1w= Subject key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83DA82A3B16FD328F2293F339B8292 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43940 AS: 201777 IP: 62.4.32.0/19 IP: 109.72.96.0/20 IP: 185.64.0.0/22 IP: 185.179.92.0/22 IP: 185.215.88.0/22 IP: 213.133.0.0/19 IP: 213.196.64.0/19 IP: 2a03:7a0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:da:82:a3:b1:6f:d3:28:f2:29:3f:33:9b:82:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:c6:17:25:60:3e:b9:f5:b5:89:cd:fa:7b: ed:2c:4c:8d:c8:02:ce:a7:88:a8:27:4c:4e:6e:4d: 70:44:81:36:45:64:be:42:72:fe:4c:8a:82:1b:85: 23:79:9a:51:f1:c3:52:e0:eb:66:73:f3:b6:2d:44: 58:83:f0:06:05:5c:87:8c:8f:99:85:6e:7b:c2:84: f7:db:f7:e5:e8:33:40:a2:ef:36:3f:4b:2d:18:52: cf:e8:17:c2:7e:68:e0:d7:b9:ca:f3:97:cc:f5:22: c6:2d:60:ec:ca:3e:60:6f:fc:4f:46:55:5a:38:f1: 7e:0d:14:91:70:52:54:ff:ed:fb:76:98:e9:7c:83: d9:1c:82:75:cb:c6:d9:0c:b9:ae:14:96:d9:67:af: 5c:2f:f1:b5:cf:f6:9f:8a:19:a2:7d:77:df:73:fa: 5a:df:20:3f:66:10:bb:77:68:75:65:1e:74:0f:95: 35:a3:c4:d8:c6:91:52:c9:0a:df:25:7a:6b:16:35: 8a:4e:89:24:1a:ec:c2:bd:6d:8f:3e:f5:82:1b:ac: 9d:70:46:65:c1:ba:10:a9:d2:f4:60:6e:fd:c2:c4: de:02:03:3a:59:5d:c0:05:37:72:59:9b:9a:9c:91: 2f:21:8c:51:cf:7c:aa:80:5f:15:84:2d:20:87:36: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.4.32.0/19 109.72.96.0/20 185.64.0.0/22 185.179.92.0/22 185.215.88.0/22 213.133.0.0/19 213.196.64.0/19 IPv6: 2a03:7a0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43940 201777 Signature Algorithm: sha256WithRSAEncryption 8b:68:56:6f:5a:2f:a2:ef:32:67:32:40:57:6a:c5:11:1d:a8: 93:c3:36:b7:48:3d:08:2f:6f:30:3e:73:5c:06:82:56:8e:eb: fa:e3:4c:57:f2:8c:41:29:75:2c:e0:2a:68:98:45:68:55:17: 97:15:42:a2:9d:41:a5:dd:f0:49:16:5c:d7:b5:81:0b:e8:16: d2:1f:df:98:6e:45:fd:f2:dd:e6:20:dd:5f:c5:27:ba:b7:76: 85:9f:2c:38:12:10:da:b0:5d:49:4d:5c:54:4d:51:64:01:8d: 18:32:b3:11:23:02:8d:f2:76:54:45:0b:7d:cf:56:b1:09:47: bf:68:19:5f:e6:e6:4b:a7:90:a8:45:49:28:b1:aa:e1:03:c5: 04:8e:8e:16:f4:de:4b:40:7b:19:d6:01:4b:14:a0:ff:cf:ea: c9:42:41:76:65:f6:34:4f:f7:2b:d9:4c:d9:fd:c6:d4:cf:95: 35:ff:1c:f1:27:a1:7a:d2:0d:1c:fd:90:5e:4b:a7:c5:4d:bf: 15:d9:d0:b5:fa:73:69:f8:fd:64:0f:e6:06:9c:b2:e2:3a:87: 2e:d5:cc:7e:02:ab:ee:c8:68:40:01:61:14:de:01:6a:db:4c: 5d:d9:71:18:68:4c:d3:8a:6b:5e:9c:d6:a0:0b:6c:ae:71:76: 35:81:ff:7f -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt/g9qCo7Fv0yjyKT8zm4KSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmJjNDIzOWM5Y2I5ODFmMTlhNDk1ZTYzM2QzYmVjODg5ZmNiZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPGFyVgPrn1tYnN+nvtLEyNyALO p4ioJ0xObk1wRIE2RWS+QnL+TIqCG4UjeZpR8cNS4Otmc/O2LURYg/AGBVyHjI+Z hW57woT32/fl6DNAou82P0stGFLP6BfCfmjg17nK85fM9SLGLWDsyj5gb/xPRlVa OPF+DRSRcFJU/+37dpjpfIPZHIJ1y8bZDLmuFJbZZ69cL/G1z/afihmifXffc/pa 3yA/ZhC7d2h1ZR50D5U1o8TYxpFSyQrfJXprFjWKTokkGuzCvW2PPvWCG6ydcEZl wboQqdL0YG79wsTeAgM6WV3ABTdyWZuanJEvIYxRz3yqgF8VhC0ghzbZOQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2M4NGE0 ZC05ZTU3LTQ3NTYtYmRiYi0wMWFhMDU2YjFmNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYzg0YTRk LTllNTctNDc1Ni1iZGJiLTAxYWEwNTZiMWY2Zi8xL203eENPY25MbUI4WnBKWG1N OU8teUluOHZvay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQFPgQgAwQEbUhgAwQCuUAAAwQCubNcAwQCuddY AwQF1YUAAwQF1cRAMA0EAgACMAcDBQMqAwegMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwCrpAIDAxQxMA0GCSqGSIb3DQEBCwUAA4IBAQCLaFZvWi+i7zJnMkBXasUR HaiTwza3SD0IL28wPnNcBoJWjuv640xX8oxBKXUs4CpomEVoVReXFUKinUGl3fBJ FlzXtYEL6BbSH9+YbkX98t3mIN1fxSe6t3aFnyw4EhDasF1JTVxUTVFkAY0YMrMR IwKN8nZURQt9z1axCUe/aBlf5uZLp5CoRUkosarhA8UEjo4W9N5LQHsZ1gFLFKD/ z+rJQkF2ZfY0T/cr2UzZ/cbUz5U1/xzxJ6F60g0c/ZBeS6fFTb8V2dC1+nNp+P1k D+YGnLLiOocu1cx+AqvuyGhAAWEU3gFq20xd2XEYaEzTimtenNagC2yucXY1gf9/ -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:09 2026 by rpki-client