This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer File: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer (raw, json) Hash identifier: 1jFHmzrjBDOdN8z1gnm1Epp2/cDkIu0OwZascg/5zXk= Subject key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1274BC47444B55CC92B24C508D709C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21057 AS: 25259 AS: 51007 IP: 31.187.68.0/24 IP: 80.84.128.0/19 IP: 178.249.8.0/21 IP: 185.100.180.0/22 IP: 2a03:a420::/32 IP: 2a03:de40::/32 IP: 2a06:1880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:74:bc:47:44:4b:55:cc:92:b2:4c:50:8d:70:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:08:91:7f:9f:70:32:f6:44:8c:d3:8c:4c: d2:1b:86:04:b2:52:d4:46:d0:6c:9d:3e:5d:62:e8: d6:49:c4:61:e3:b2:52:34:c6:db:f6:c1:63:c9:f7: 34:b5:0a:47:59:bb:0d:1b:24:60:ea:14:6e:84:1e: 08:37:4e:d5:9a:ab:b1:f9:82:5f:a9:eb:aa:46:16: 66:93:3b:96:36:17:4b:e2:7e:07:e4:b6:3c:64:c1: c8:3f:75:cc:0b:81:96:e9:21:1a:67:26:4c:dd:83: c3:6b:d3:f1:0b:fd:df:fe:7a:09:3b:34:33:28:50: 6b:af:1b:31:e3:bb:4d:16:8f:de:98:82:43:36:c3: 50:3a:28:62:4e:8c:e2:cb:64:b5:83:ca:cc:45:b2: 07:b8:2c:84:1b:45:44:e1:61:d3:f4:d2:be:16:c8: 48:06:34:4d:e2:6d:28:e7:59:14:c5:ec:a0:ba:e3: fb:0a:f0:7d:13:2a:65:2c:8e:f8:e1:b5:a1:4c:9e: ce:78:21:d8:48:c7:e6:07:a7:8e:69:b7:5a:33:e6: 01:1d:67:d9:63:40:68:d0:f0:09:0d:28:1e:4d:f6: a3:cc:99:cd:cb:2b:06:2a:80:dc:3c:cb:ea:49:ff: b6:09:d6:2c:15:85:53:09:b8:4b:40:3f:50:fa:1a: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.68.0/24 80.84.128.0/19 178.249.8.0/21 185.100.180.0/22 IPv6: 2a03:a420::/32 2a03:de40::/32 2a06:1880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21057 25259 51007 Signature Algorithm: sha256WithRSAEncryption a3:41:6b:6b:cd:c2:b4:8b:8a:3d:5a:69:3f:65:d8:29:9e:33: ee:11:2d:b8:68:64:35:a6:98:f5:67:6e:67:10:11:7a:12:3e: e0:04:fc:a6:d2:1c:67:24:ef:24:e5:c4:61:7c:b4:bb:05:77: 74:b4:9b:e0:ea:99:ca:eb:f1:f3:9b:20:1c:1b:00:ef:0a:7f: cf:96:d1:b8:2c:a9:8c:57:0e:a2:8a:6c:30:bc:cf:fd:cd:4f: 33:74:1e:92:a6:7e:2e:fe:b1:94:44:1a:b4:4d:24:b9:df:0a: c9:ae:20:7c:c7:be:8f:78:e0:13:d4:bb:6f:4e:b9:b3:f5:cb: 12:35:af:e4:9a:66:6e:a6:83:0f:e8:5e:74:14:aa:c3:18:0f: c3:fb:cd:2c:00:ec:e2:5e:dd:ad:73:b5:36:91:89:29:fb:f3: 16:fb:6f:df:ad:97:7b:1a:01:9c:eb:99:59:0b:da:99:e5:24: 1d:0a:db:1d:0c:69:40:ee:14:c0:f6:d6:f1:97:80:86:b7:19: 3e:8d:ba:00:f6:37:16:6c:6a:d8:b6:e4:5e:1f:38:b3:8e:60: 73:73:25:3b:fb:9e:ca:15:c7:7d:10:9e:3d:16:b8:0a:fa:d8: ce:a2:92:6a:fd:4d:cb:e0:50:b7:bc:cf:d3:9a:d1:9a:ae:5d: d4:be:00:fb -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt8EnS8R0RLVcySskxQjXCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2JhNzc0YmE4MmZiMDQyN2Y3NjZlNzgzZTc3MGY0YmQ5NjQxNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV8IkX+fcDL2RIzTjEzSG4YEslLU RtBsnT5dYujWScRh47JSNMbb9sFjyfc0tQpHWbsNGyRg6hRuhB4IN07Vmqux+YJf qeuqRhZmkzuWNhdL4n4H5LY8ZMHIP3XMC4GW6SEaZyZM3YPDa9PxC/3f/noJOzQz KFBrrxsx47tNFo/emIJDNsNQOihiToziy2S1g8rMRbIHuCyEG0VE4WHT9NK+FshI BjRN4m0o51kUxeyguuP7CvB9EyplLI744bWhTJ7OeCHYSMfmB6eOabdaM+YBHWfZ Y0Bo0PAJDSgeTfajzJnNyysGKoDcPMvqSf+2CdYsFYVTCbhLQD9Q+hrriQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFOy6d0uoL7BCf3ZueD53D0vZZBb5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzgxMGMx MS1hMTA1LTRkYjEtYTZiNS0zOTJiODYzYzlmMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvODEwYzEx LWExMDUtNGRiMS1hNmI1LTM5MmI4NjNjOWYwMy8xLzdMcDNTNmd2c0VKX2RtNTRQ bmNQUzlsa0Z2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQAH7tEAwQFUFSAAwQDsvkIAwQCuWS0MBsEAgAC MBUDBQAqA6QgAwUAKgPeQAMFAyoGGIAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQIC UkECAmKrAgMAxz8wDQYJKoZIhvcNAQELBQADggEBAKNBa2vNwrSLij1aaT9l2Cme M+4RLbhoZDWmmPVnbmcQEXoSPuAE/KbSHGck7yTlxGF8tLsFd3S0m+Dqmcrr8fOb IBwbAO8Kf8+W0bgsqYxXDqKKbDC8z/3NTzN0HpKmfi7+sZREGrRNJLnfCsmuIHzH vo944BPUu29OubP1yxI1r+SaZm6mgw/oXnQUqsMYD8P7zSwA7OJe3a1ztTaRiSn7 8xb7b9+tl3saAZzrmVkL2pnlJB0K2x0MaUDuFMD21vGXgIa3GT6NugD2NxZsati2 5F4fOLOOYHNzJTv7nsoVx30Qnj0WuAr62M6ikmr9TcvgULe8z9Oa0ZquXdS+APs= -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:13 2026 by rpki-client