This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.cer (raw, json) Hash identifier: 8rfbZ7xWr92PMyueMvam3iDCizHQ0+a41qsiBMJAEoY= Subject key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEB1E68228C8312699E972D09ADA14787 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 20:47:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203860 IP: 2001:67c:a0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:1e:68:22:8c:83:12:69:9e:97:2d:09:ad:a1:47:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 20:47:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:b6:92:63:37:8f:b3:03:ee:93:43:26:a1: 4e:11:3c:84:ec:41:c0:53:8d:b1:86:d6:4a:50:b6: 83:75:e3:f1:bb:95:14:73:f8:15:9a:17:f0:67:64: ae:39:9e:4e:f2:76:19:64:cf:de:64:a4:0e:78:c1: 97:95:12:14:54:b5:b9:eb:43:c1:95:db:46:0c:ba: 87:1f:07:02:52:ae:ce:fe:7f:74:0b:59:44:80:30: 88:f8:d0:89:92:cd:0b:04:2a:96:b1:47:1d:c7:9a: 72:6f:76:94:9e:9e:97:0e:03:d8:d6:cf:a9:36:3f: 38:c2:6e:33:b4:89:0f:b3:2b:66:c8:50:2a:8a:48: b1:d2:13:b1:7c:54:b5:30:39:f2:e8:da:5e:75:b1: 86:5d:cd:df:31:92:ce:09:17:7b:64:db:c9:c2:65: a9:0f:94:4a:e8:21:65:be:1f:98:e2:b5:2f:ed:39: a3:89:f6:96:34:91:13:2d:5b:8d:44:cc:c9:aa:62: 05:6b:dc:e4:fa:c0:47:af:2f:31:91:83:6f:65:74: 0d:3f:9f:37:fd:9b:9c:b7:77:3c:16:be:97:ed:e3: b8:66:27:b2:05:c0:ae:fa:7e:87:29:4a:12:5c:97: cf:78:21:e2:ac:95:e4:dd:a6:de:44:b4:17:7d:ac: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203860 Signature Algorithm: sha256WithRSAEncryption 5d:a5:24:41:a4:2c:f2:b4:1c:69:58:d4:e9:57:69:a7:db:26: 84:1e:5f:08:09:bb:65:08:63:e5:67:9f:b8:2d:dc:2b:a2:2e: db:94:9e:6a:2b:ce:82:9e:68:a4:9e:be:30:d4:07:bf:4e:f3: d7:50:a3:2c:d2:4a:37:ed:c9:60:c5:27:3b:33:67:9a:93:7f: 44:fc:1f:3a:82:88:63:a8:66:5a:ca:14:8a:de:35:14:33:6c: 9b:59:8a:d7:26:c3:03:36:6c:da:25:05:af:0f:58:47:cb:20: 79:bd:cb:16:16:16:a6:1d:94:02:cb:80:2e:67:7c:89:4c:24: 63:dc:c9:b6:74:b1:2d:8c:40:f7:f8:bb:c9:cf:00:47:ce:c4: fe:0c:3d:65:a7:39:e1:84:f9:1e:8c:94:da:97:2e:65:54:b8: 82:dc:4b:c6:9e:26:b3:fd:3e:83:f1:0c:83:44:a3:25:ae:1f: c1:6e:7e:97:48:3a:0a:dc:c9:c9:40:cf:e6:8f:fc:6d:99:d2: 7c:74:7a:61:fb:ec:e5:41:5b:d5:f2:cd:e1:29:27:24:b4:36: 99:a8:1b:0a:c8:50:cc:07:d3:6a:ca:cf:90:93:57:38:cf:57: ed:70:27:80:dd:7b:b4:b0:cc:ad:a7:71:46:57:1b:61:fd:27: 90:96:d2:42 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZrrHmgijIMSaZ6XLQmtoUeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MjA0NzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDIxYTNmMzEyYTQ5ZjNlOWQ4YzZjNDRjOWRlMTMzYTllZDg3N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwO2kmM3j7MD7pNDJqFOETyE7EHA U42xhtZKULaDdePxu5UUc/gVmhfwZ2SuOZ5O8nYZZM/eZKQOeMGXlRIUVLW560PB ldtGDLqHHwcCUq7O/n90C1lEgDCI+NCJks0LBCqWsUcdx5pyb3aUnp6XDgPY1s+p Nj84wm4ztIkPsytmyFAqikix0hOxfFS1MDny6NpedbGGXc3fMZLOCRd7ZNvJwmWp D5RK6CFlvh+Y4rUv7TmjifaWNJETLVuNRMzJqmIFa9zk+sBHry8xkYNvZXQNP583 /Zuct3c8Fr6X7eO4ZieyBcCu+n6HKUoSXJfPeCHirJXk3abeRLQXfaxqQQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFO0ho/MSpJ8+nYxsRMneEzqe2HfqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2NiMzUw YS03Zjc0LTRhNmItYmE1Ny1kZjEzNGYyYTJlNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvY2IzNTBh LTdmNzQtNGE2Yi1iYTU3LWRmMTM0ZjJhMmU2Yy8xLzdTR2o4eEtrbno2ZGpHeEV5 ZDRUT3A3WWQtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfACgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMcVDANBgkqhkiG9w0BAQsFAAOCAQEAXaUkQaQs8rQcaVjU6Vdpp9smhB5f CAm7ZQhj5WefuC3cK6Iu25SeaivOgp5opJ6+MNQHv07z11CjLNJKN+3JYMUnOzNn mpN/RPwfOoKIY6hmWsoUit41FDNsm1mK1ybDAzZs2iUFrw9YR8sgeb3LFhYWph2U AsuALmd8iUwkY9zJtnSxLYxA9/i7yc8AR87E/gw9Zac54YT5HoyU2pcuZVS4gtxL xp4ms/0+g/EMg0SjJa4fwW5+l0g6CtzJyUDP5o/8bZnSfHR6Yfvs5UFb1fLN4Skn JLQ2magbCshQzAfTasrPkJNXOM9X7XAngN17tLDMradxRlcbYf0nkJbSQg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:16 2025 by rpki-client