This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer (raw, json) Hash identifier: SSqhvu1Y5WD0R59ypSkBLeVD3TCUI0APndQvKrcefj0= Subject key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910EED657DB3B22506CDE75C0410418 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51897 AS: 57405 AS: 61008 IP: 46.143.192.0/18 IP: 185.84.220.0/22 IP: 2a05:a380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:d6:57:db:3b:22:50:6c:de:75:c0:41:04:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:15:9d:ec:17:d2:96:48:28:e2:3e:37:bc: 3a:57:be:d0:33:92:9e:5a:fc:07:58:09:9e:c9:0c: 8b:c1:56:ad:73:ca:c9:4d:ea:3c:1a:a8:af:63:c5: 00:ce:a0:06:3e:69:03:d9:13:43:04:96:22:26:1d: 45:d8:40:a8:0e:cc:1e:f9:9a:80:0e:04:6a:56:77: 78:2d:ac:7b:c6:d2:e9:73:2f:53:9a:6f:2c:40:26: e6:fa:91:c2:7f:81:7d:ed:bd:13:78:02:08:3e:4b: 2c:36:3b:49:28:be:3f:3a:fa:d9:b8:d2:71:d2:ff: 4c:ca:4b:1f:53:3c:e7:1c:6c:bd:25:97:2d:a3:62: cf:09:32:46:21:43:e9:38:2b:25:1f:65:bb:07:87: c3:e5:81:6d:b4:84:01:c2:ed:de:19:c7:75:6b:97: 8a:26:18:9e:1c:2c:86:98:95:36:26:ad:08:69:16: e6:f8:f4:83:8a:c1:28:40:94:bf:6a:02:bc:01:ed: 73:a5:d2:fb:bf:83:e0:5f:3a:4e:8c:6c:67:5a:dc: 60:9a:de:fe:92:66:ae:82:a9:ad:c3:b6:07:6e:f5: 3c:68:ad:a5:9c:f9:6c:64:cc:0c:2d:38:52:89:31: f2:b3:ff:d3:78:b9:14:f9:4d:81:15:44:97:b7:b7: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.192.0/18 185.84.220.0/22 IPv6: 2a05:a380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51897 57405 61008 Signature Algorithm: sha256WithRSAEncryption 94:75:53:77:b2:f3:76:b8:dc:36:13:d1:31:9f:0d:9d:80:d2: aa:70:fd:ef:e1:8c:22:27:21:4c:0e:cb:0f:2f:e0:c0:92:be: 81:09:8e:99:fc:30:5d:ad:f5:1e:41:64:ba:66:04:d2:ac:1a: 25:85:fc:74:1a:7c:31:2c:cd:c6:e7:e0:dc:be:b2:69:99:3d: 1c:5b:c9:ec:9f:57:dd:01:4c:d1:90:81:71:e7:ed:0e:c4:68: 27:51:ef:2c:44:f0:2a:fb:5d:65:2c:0e:6e:fa:a2:7c:38:88: 7a:29:4c:15:64:2a:7c:3c:02:28:bd:46:28:ea:2e:ea:dd:47: 73:40:ea:db:21:85:f8:6c:26:13:8e:04:a1:4f:75:76:16:19: f1:77:cf:5e:55:1d:bb:ef:f4:52:a5:94:3e:c1:c6:13:44:38: be:28:b3:6a:80:6b:2a:14:d2:10:95:75:2c:33:fa:e3:23:2f: 9c:bb:7a:bb:6c:e2:18:de:09:32:11:17:24:f2:b7:22:ea:0b: 3e:57:88:48:e2:d8:f8:82:95:54:16:ee:3b:0b:8a:2a:cb:f0: 74:02:2b:31:9c:a1:c1:56:c9:e3:ad:fd:2a:2c:ba:35:5b:51: cb:6f:b4:ce:58:67:16:ed:40:63:5d:1c:53:c1:6f:b5:d8:07: 81:04:11:86 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt5EO7WV9s7IlBs3nXAQQQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDZkYTllNDE2ODZkMjFjMTI3OTljOGU4NGIyNzRhYTgyNDE1MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLIVnewX0pZIKOI+N7w6V77QM5Ke WvwHWAmeyQyLwVatc8rJTeo8GqivY8UAzqAGPmkD2RNDBJYiJh1F2ECoDswe+ZqA DgRqVnd4Lax7xtLpcy9Tmm8sQCbm+pHCf4F97b0TeAIIPkssNjtJKL4/OvrZuNJx 0v9MyksfUzznHGy9JZcto2LPCTJGIUPpOCslH2W7B4fD5YFttIQBwu3eGcd1a5eK JhieHCyGmJU2Jq0IaRbm+PSDisEoQJS/agK8Ae1zpdL7v4PgXzpOjGxnWtxgmt7+ kmaugqmtw7YHbvU8aK2lnPlsZMwMLThSiTHys//TeLkU+U2BFUSXt7fKYwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFO1tqeQWhtIcEnmcjoSydKqCQVCMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2FjMDE3 Yy1mZjI5LTQzY2YtYTNkNi0yOWYxYmViMmYyODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYWMwMTdj LWZmMjktNDNjZi1hM2Q2LTI5ZjFiZWIyZjI4Mi8xLzdXMnA1QmFHMGh3U2VaeU9o TEowcW9KQlVJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGLo/AAwQCuVTcMA0EAgACMAcDBQMqBaOAMCQG CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDKuQIDAOA9AgMA7lAwDQYJKoZIhvcNAQEL BQADggEBAJR1U3ey83a43DYT0TGfDZ2A0qpw/e/hjCInIUwOyw8v4MCSvoEJjpn8 MF2t9R5BZLpmBNKsGiWF/HQafDEszcbn4Ny+smmZPRxbyeyfV90BTNGQgXHn7Q7E aCdR7yxE8Cr7XWUsDm76onw4iHopTBVkKnw8Aii9RijqLurdR3NA6tshhfhsJhOO BKFPdXYWGfF3z15VHbvv9FKllD7BxhNEOL4os2qAayoU0hCVdSwz+uMjL5y7erts 4hjeCTIRFyTytyLqCz5XiEji2PiClVQW7jsLiirL8HQCKzGcocFWyeOt/SosujVb UctvtM5YZxbtQGNdHFPBb7XYB4EEEYY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:50 2026 by rpki-client