This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer (raw, json) Hash identifier: 7wdq1KHd2jhTRTtFndzB+iyIeXIkJ1tITwnWgSzmtRc= Subject key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A96B93E01F23A0E895C88A134582B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15598 AS: 24898 AS: 24900 -- 24901 IP: 62.146.0.0 -- 62.146.163.255 IP: 62.146.184.0 -- 62.146.223.255 IP: 62.146.240.0/22 IP: 80.190.4.0 -- 80.190.71.255 IP: 80.190.88.0 -- 80.190.255.255 IP: 81.17.104.0 -- 81.17.119.255 IP: 81.17.124.0/22 IP: 82.149.64.0/21 IP: 82.149.84.0 -- 82.149.95.255 IP: 185.234.108.0/24 IP: 212.112.224.0/19 IP: 212.123.96.0/19 IP: 2a01:138::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:96:b9:3e:01:f2:3a:0e:89:5c:88:a1:34:58:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:af:45:46:65:06:0f:53:25:b7:4f:54:f9: e4:cd:78:47:6a:34:c2:24:18:fb:fd:3a:6a:3f:0a: 7b:44:a9:25:35:70:d2:64:28:9b:32:b1:4c:b6:09: 13:98:74:04:66:f6:43:52:82:ad:b9:e3:8b:4a:ae: e9:45:aa:50:75:64:3e:f5:7f:00:10:d6:d1:a6:b3: be:27:ba:17:22:80:e8:31:40:37:dc:7c:5d:04:02: 15:77:50:42:ad:d2:f8:51:23:98:d9:14:17:64:fb: a9:d1:36:83:a2:cf:ee:3d:dd:e2:5c:9e:e6:0f:3c: 74:4d:d7:0b:f0:00:7b:fa:23:4b:f7:bb:78:4b:a5: 4a:41:ac:90:d0:e7:52:63:e0:81:83:17:13:0c:c1: 1f:cc:44:5a:30:4f:7b:7b:d9:2c:6e:56:28:d3:67: 01:46:08:9a:b9:4f:3d:75:c9:fe:4f:15:6d:15:ff: e8:e0:b1:58:91:c1:dc:fb:cc:4b:dc:34:f0:f6:5b: 67:6a:15:64:08:30:a0:35:80:22:ad:44:38:a0:96: 66:e4:29:f7:41:e8:2c:b6:77:9c:4d:5e:a7:01:3e: 73:24:a8:20:5d:94:15:d3:04:39:52:65:a6:0e:79: cc:53:f4:a1:7d:ab:46:6f:9e:5a:25:e7:81:0e:0c: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.0.0-62.146.163.255 62.146.184.0-62.146.223.255 62.146.240.0/22 80.190.4.0-80.190.71.255 80.190.88.0-80.190.255.255 81.17.104.0-81.17.119.255 81.17.124.0/22 82.149.64.0/21 82.149.84.0-82.149.95.255 185.234.108.0/24 212.112.224.0/19 212.123.96.0/19 IPv6: 2a01:138::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15598 24898 24900-24901 Signature Algorithm: sha256WithRSAEncryption ad:09:74:2c:f6:47:ca:d9:76:fc:89:fa:ae:1c:f2:f1:50:e4: 3d:fa:2e:aa:e7:3b:41:bb:54:ce:79:ee:4c:31:f5:c1:ba:9c: 96:27:f3:7e:1e:d7:82:95:29:3e:c4:3f:08:46:d0:75:be:46: f8:4d:eb:63:42:a3:44:f5:55:3e:d6:c8:a5:b3:ee:ae:2b:cf: 04:66:05:45:ab:d1:fe:4d:d0:d4:6e:dd:3b:e3:11:bc:68:4d: 06:f3:74:34:58:53:43:79:25:86:c0:89:2f:0f:77:b1:58:a5: 37:2e:54:1c:e1:3f:58:2e:2f:9d:e5:a3:8d:68:88:a8:f4:0b: 5b:69:91:19:cd:18:ba:13:d6:bb:22:31:81:8d:8a:14:31:f9: 12:9a:cf:4a:87:83:e0:99:77:da:78:5d:7e:01:70:1f:d4:cf: 4e:86:df:62:c1:07:32:b4:5e:c7:36:95:af:e2:1b:64:2d:94: 5c:88:14:5b:2c:41:9e:e7:02:0b:96:8f:28:52:32:8d:2e:cb: a4:9e:5e:d5:29:1d:28:42:5f:64:dd:f2:9f:da:08:9e:b8:e5: c3:da:ed:09:3f:10:cc:30:1a:d6:00:7a:57:ec:92:9a:f0:39: 1e:80:2d:1b:4c:09:61:51:be:05:02:d2:6f:7d:0a:ab:9d:9e: fa:22:5c:41 -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgISAZt6Wpa5PgHyOg6JXIihNFgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzM1NDNhYTAwMzczZTllNGQxMGU2NGM4M2QzNzc5YjM3ODg4OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHqvRUZlBg9TJbdPVPnkzXhHajTC JBj7/TpqPwp7RKklNXDSZCibMrFMtgkTmHQEZvZDUoKtueOLSq7pRapQdWQ+9X8A ENbRprO+J7oXIoDoMUA33HxdBAIVd1BCrdL4USOY2RQXZPup0TaDos/uPd3iXJ7m Dzx0TdcL8AB7+iNL97t4S6VKQayQ0OdSY+CBgxcTDMEfzERaME97e9ksblYo02cB RgiauU89dcn+TxVtFf/o4LFYkcHc+8xL3DTw9ltnahVkCDCgNYAirUQ4oJZm5Cn3 QegstnecTV6nAT5zJKggXZQV0wQ5UmWmDnnMU/ShfatGb55aJeeBDgz0/QIDAQAB o4IDLzCCAyswHQYDVR0OBBYEFOw1Q6oANz6eTRDmTIPTd5s3iIjBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzE5ZTcx NS1mZmFhLTRjNDMtYjc5YS01NmY2ZWNjMWMxMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMTllNzE1 LWZmYWEtNGM0My1iNzlhLTU2ZjZlY2MxYzEyMS8xLzdEVkRxZ0EzUHA1TkVPWk1n OU4zbXplSWlNRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGgBggrBgEF BQcBBwEB/wSBkDCBjTB8BAIAATB2MAsDAwE+kgMEAj6SoDAMAwQDPpK4AwQFPpLA AwQCPpLwMAwDBAJQvgQDBANQvkAwCwMEA1C+WAMDAFC+MAwDBANREWgDBANREXAD BAJREXwDBANSlUAwDAMEAlKVVAMEBVKVQAMEALnqbAMEBdRw4AMEBdR7YDANBAIA AjAHAwUDKgEBODAnBggrBgEFBQcBCAEB/wQYMBagFDASAgI87gICYUIwCAICYUQC AmFFMA0GCSqGSIb3DQEBCwUAA4IBAQCtCXQs9kfK2Xb8ifquHPLxUOQ9+i6q5ztB u1TOee5MMfXBupyWJ/N+HteClSk+xD8IRtB1vkb4TetjQqNE9VU+1sils+6uK88E ZgVFq9H+TdDUbt074xG8aE0G83Q0WFNDeSWGwIkvD3exWKU3LlQc4T9YLi+d5aON aIio9AtbaZEZzRi6E9a7IjGBjYoUMfkSms9Kh4PgmXfaeF1+AXAf1M9Oht9iwQcy tF7HNpWv4htkLZRciBRbLEGe5wILlo8oUjKNLsuknl7VKR0oQl9k3fKf2gieuOXD 2u0JPxDMMBrWAHpX7JKa8DkegC0bTAlhUb4FAtJvfQqrnZ76IlxB -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:57 2026 by rpki-client