This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VxHFPIguKxeq3Au-sEaEUJdCmk.cer File: 7VxHFPIguKxeq3Au-sEaEUJdCmk.cer (raw, json) Hash identifier: zi714Pn2hfyKtMcidwYh/Af3Fv0/Hqd7z3OhtFSL9e8= Subject key identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A73BC4A9227D7D34D7C242DCCD1C1DB42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 16:25:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204632 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:bc:4a:92:27:d7:d3:4d:7c:24:2d:cc:d1:c1:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 16:25:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed5c4714f220b8ac5eab702efac11a11425d0a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:b9:26:c3:1d:a6:3a:43:e6:63:ca:71:cc: 88:54:11:f8:6d:10:9c:1c:6d:a2:83:66:05:24:83: 70:dd:57:51:f5:26:da:ef:af:95:90:3c:9a:10:5a: 9b:69:02:83:f7:69:c5:90:85:04:fc:11:4e:ea:e3: 0f:6b:7a:40:85:91:f4:b3:12:ec:fe:c9:2b:7c:10: 34:b8:f5:24:2e:95:d9:4e:0a:24:45:95:c2:d1:71: be:32:08:dc:e7:4b:2e:61:a5:b7:f6:fb:ae:61:2e: 19:25:ca:cd:ab:5f:d9:ef:8c:83:43:43:55:4d:4e: 6b:98:57:d9:04:bf:fb:19:e4:a2:eb:8d:7e:26:d7: 89:84:71:aa:a6:06:21:7b:e8:a1:9f:d3:f0:9f:7f: 81:e8:e1:3a:d9:9f:e4:d3:0d:50:89:2c:34:ec:b4: b1:d9:04:02:a0:2e:64:ee:37:76:24:e0:24:d3:4b: 8e:2a:74:8b:d8:fc:9d:bf:58:a1:b9:df:44:ce:4a: 91:51:c7:51:a2:64:99:be:fa:3a:58:6a:25:26:ab: ed:e0:1b:e8:4e:d2:5b:78:6c:dc:fc:9c:c7:a6:33: 26:c5:f1:17:9a:c6:eb:11:da:29:d1:a1:a4:d4:46: bd:72:17:ea:a2:47:3c:3c:2a:76:66:af:d4:70:3c: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:47:14:F2:20:B8:AC:5E:AB:70:2E:FA:C1:1A:11:42:5D:0A:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b98e90-795d-42c9-969a-9ab60123e67f/1/7VxHFPIguKxeq3Au-sEaEUJdCmk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204632 Signature Algorithm: sha256WithRSAEncryption 20:67:2c:5c:d0:3b:2d:fd:02:60:5c:9d:6a:be:58:8e:d2:9f: 1a:6b:cb:3b:dd:49:9f:d3:06:85:9e:e5:af:3b:12:25:c3:f2: 01:55:d4:4d:0c:96:6b:de:75:37:e6:79:70:71:7a:43:8b:0e: 37:25:c3:55:31:9c:7c:c1:f0:a2:f6:de:c7:fa:74:c4:a4:51: 26:61:f3:db:73:1e:a5:73:40:f4:f3:ba:6a:34:32:3f:73:f2: 79:14:18:42:e8:39:64:b2:d1:d9:b0:7e:70:4c:17:fd:62:7a: 9f:67:5a:ef:60:c6:45:d6:51:c3:52:78:5c:78:5d:53:d0:ca: b8:c3:0f:2d:74:be:c8:2d:36:a5:67:f8:be:bf:3f:35:51:a4: 6f:84:7c:e8:00:8c:67:65:08:be:b1:ca:a1:e4:08:09:c7:43: 60:3f:ba:e2:5c:a4:7f:b5:2c:ba:51:b6:f3:3d:9a:b1:b6:97: 32:3c:6e:38:d8:7b:b9:0f:5c:88:67:4f:d8:68:73:d3:19:2e: 66:25:0f:93:7d:52:20:90:53:3e:b1:19:d8:84:d9:ae:d7:1e: 66:9f:b1:50:59:5b:c5:12:97:02:41:0e:12:f1:e7:5d:c2:e1: 87:51:b1:82:56:77:3a:2c:d3:5c:10:10:2b:6f:bc:cf:a0:1c: 07:4a:f6:25 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZpzvEqSJ9fTTXwkLczRwdtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTYyNTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDVjNDcxNGYyMjBiOGFjNWVhYjcwMmVmYWMxMWExMTQyNWQwYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ65JsMdpjpD5mPKccyIVBH4bRCc HG2ig2YFJINw3VdR9Sba76+VkDyaEFqbaQKD92nFkIUE/BFO6uMPa3pAhZH0sxLs /skrfBA0uPUkLpXZTgokRZXC0XG+Mgjc50suYaW39vuuYS4ZJcrNq1/Z74yDQ0NV TU5rmFfZBL/7GeSi641+JteJhHGqpgYhe+ihn9Pwn3+B6OE62Z/k0w1QiSw07LSx 2QQCoC5k7jd2JOAk00uOKnSL2Pydv1ihud9EzkqRUcdRomSZvvo6WGolJqvt4Bvo TtJbeGzc/JzHpjMmxfEXmsbrEdop0aGk1Ea9chfqokc8PCp2Zq/UcDyTrQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFO1cRxTyILisXqtwLvrBGhFCXQppMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2I5OGU5 MC03OTVkLTQyYzktOTY5YS05YWI2MDEyM2U2N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvYjk4ZTkw LTc5NWQtNDJjOS05NjlhLTlhYjYwMTIzZTY3Zi8xLzdWeEhGUElndUt4ZXEzQXUt c0VhRVVKZENtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfWDANBgkqhkiG9w0BAQsFAAOCAQEAIGcsXNA7Lf0C YFydar5YjtKfGmvLO91Jn9MGhZ7lrzsSJcPyAVXUTQyWa951N+Z5cHF6Q4sONyXD VTGcfMHwovbex/p0xKRRJmHz23MepXNA9PO6ajQyP3PyeRQYQug5ZLLR2bB+cEwX /WJ6n2da72DGRdZRw1J4XHhdU9DKuMMPLXS+yC02pWf4vr8/NVGkb4R86ACMZ2UI vrHKoeQICcdDYD+64lykf7UsulG28z2asbaXMjxuONh7uQ9ciGdP2Ghz0xkuZiUP k31SIJBTPrEZ2ITZrtceZp+xUFlbxRKXAkEOEvHnXcLhh1GxglZ3OizTXBAQK2+8 z6AcB0r2JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:31 2025 by rpki-client