This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.cer (raw, json) Hash identifier: onAZz/94yf4efq6cfEhnIyf6CnMXd4v+hF1rTb/z4tk= Subject key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC91B6A5FE2116DE7A59A09A3C65C32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.36.92.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1b:6a:5f:e2:11:6d:e7:a5:9a:09:a3:c6:5c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed464c76c01948f87e04e2fc5f516702b3907456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:17:f1:e5:f3:bf:d9:96:a2:0e:00:a5:f4: f2:44:0c:33:ac:95:11:a3:82:f0:43:d1:66:7f:7b: 63:d8:9a:6e:a7:76:8b:a6:d4:d6:3f:8c:1b:84:e1: d9:fd:56:18:17:fe:b5:47:50:4f:28:21:09:8c:9b: 2e:72:72:ae:ab:a5:5d:81:dc:b8:70:9b:ed:b2:28: 14:0c:1e:5e:ef:e7:67:de:f8:a2:4e:d4:26:2b:d6: 01:a6:d4:6a:f1:79:28:e7:35:3f:37:9d:95:7a:9b: 12:29:7a:ac:1b:df:92:03:7c:14:34:57:af:97:ce: 73:c4:21:d6:5d:fe:a4:d0:6c:5c:44:f7:6d:ec:2d: 41:f6:23:26:b9:a5:26:f2:d5:c9:21:61:d7:e1:a3: b5:13:e1:99:20:f7:93:e3:57:89:a4:8f:47:33:90: b4:de:4c:21:f1:a3:85:bc:d5:27:22:c1:a0:fb:ea: 3e:21:fe:4f:30:61:b9:5b:67:87:f3:8a:61:d0:f1: d4:10:3f:ff:9a:85:cb:dc:97:73:4e:5e:55:6b:9b: b3:e3:11:cc:e7:ba:b0:83:f1:5a:5d:9a:9a:47:52: d2:43:9d:62:6b:ae:af:3f:88:99:9e:1f:98:dd:d2: b5:d2:60:fd:0f:55:ee:5d:1d:d4:1e:29:71:c7:df: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.92.0/24 Signature Algorithm: sha256WithRSAEncryption 74:41:88:6c:be:f0:6c:47:42:3f:ec:0e:76:c7:3b:d5:68:db: 14:10:fb:7c:ae:e2:08:54:ae:51:e4:81:e5:36:c0:5d:b8:a7: 66:62:2d:7e:4f:d4:f1:fa:d0:53:13:5c:ff:74:cc:9c:48:bf: 34:8a:61:7d:db:8b:2f:ee:ce:a7:2e:6e:8f:08:f3:54:89:36: 71:66:ed:39:ba:9a:eb:c5:0f:d4:d9:ec:de:e0:78:d2:1c:d9: e5:10:b6:43:e6:21:0c:45:67:77:2c:ae:e1:9b:bb:21:95:73: 3c:fa:01:0c:29:af:90:72:94:67:97:a3:13:3a:04:86:37:de: 04:8a:8b:8c:bb:c3:da:3e:42:ad:e6:63:fb:ea:8b:74:49:93: 3c:00:26:0d:58:2a:de:5f:e5:33:64:39:de:16:23:88:28:64: af:19:f2:4d:5c:a8:6a:de:77:98:f6:9d:6b:2b:2f:b5:97:7a: 19:2c:4c:20:24:8e:90:ff:19:d1:a8:6f:a7:08:c6:01:a6:df: 7c:c4:7a:bd:da:87:c1:d2:85:47:f7:08:a7:3b:75:b1:8b:81: cf:fe:bc:0f:7e:a0:1e:30:5b:5c:6c:8f:d1:44:2b:63:0f:e3: c6:bf:18:ac:91:f4:54:9e:96:31:8f:7b:14:cd:21:5b:13:67: 6a:64:5d:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yRtqX+IRbeelmgmjxlwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDQ2NGM3NmMwMTk0OGY4N2UwNGUyZmM1ZjUxNjcwMmIzOTA3NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns4X8eXzv9mWog4ApfTyRAwzrJUR o4LwQ9Fmf3tj2Jpup3aLptTWP4wbhOHZ/VYYF/61R1BPKCEJjJsucnKuq6Vdgdy4 cJvtsigUDB5e7+dn3viiTtQmK9YBptRq8Xko5zU/N52VepsSKXqsG9+SA3wUNFev l85zxCHWXf6k0GxcRPdt7C1B9iMmuaUm8tXJIWHX4aO1E+GZIPeT41eJpI9HM5C0 3kwh8aOFvNUnIsGg++o+If5PMGG5W2eH84ph0PHUED//moXL3JdzTl5Va5uz4xHM 57qwg/FaXZqaR1LSQ51ia66vP4iZnh+Y3dK10mD9D1XuXR3UHilxx9+nXwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFO1GTHbAGUj4fgTi/F9RZwKzkHRWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2U0ZGI1 MC03NDZlLTQ1ZjQtOTY0ZC0zODU3ZWM1Y2IxZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvZTRkYjUw LTc0NmUtNDVmNC05NjRkLTM4NTdlYzVjYjFkYi8xLzdVWk1kc0FaU1BoLUJPTDhY MUZuQXJPUWRGWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSRcMA0GCSqGSIb3DQEBCwUAA4IBAQB0QYhs vvBsR0I/7A52xzvVaNsUEPt8ruIIVK5R5IHlNsBduKdmYi1+T9Tx+tBTE1z/dMyc SL80imF924sv7s6nLm6PCPNUiTZxZu05uprrxQ/U2eze4HjSHNnlELZD5iEMRWd3 LK7hm7shlXM8+gEMKa+QcpRnl6MTOgSGN94EiouMu8PaPkKt5mP76ot0SZM8ACYN WCreX+UzZDneFiOIKGSvGfJNXKhq3neY9p1rKy+1l3oZLEwgJI6Q/xnRqG+nCMYB pt98xHq92ofB0oVH9winO3Wxi4HP/rwPfqAeMFtcbI/RRCtjD+PGvxiskfRUnpYx j3sUzSFbE2dqZF2k -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:34 2026 by rpki-client