This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer File: 7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer (raw, json) Hash identifier: qePfTMNkpegE5BNYA3bWjiAizWpBzFqLgwQ7E8mlNsw= Subject key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783558F6A4A309C7706327F73C2D6DD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39758 IP: 46.102.232.0/23 IP: 77.81.137.0 -- 77.81.138.255 IP: 89.42.110.0/23 IP: 93.113.25.0/24 IP: 93.113.212.0/24 IP: 193.203.204.0/23 IP: 2a06:4a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:f6:a4:a3:09:c7:70:63:27:f7:3c:2d:6d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:44:46:ab:26:f0:8c:c6:22:ca:14:4f:7e: ae:cd:ed:a4:80:c5:2e:02:ab:f3:7b:d2:5d:82:98: d0:5b:d4:6d:82:18:36:91:21:7a:59:9a:aa:1e:9d: 4f:f4:14:14:2c:5b:26:c1:1c:c3:33:de:70:23:74: dd:b0:cd:e7:26:f9:2e:7b:17:17:b5:f5:23:eb:1f: 49:52:b9:57:25:82:0e:69:61:25:77:57:27:df:8b: 68:99:1e:51:17:fb:3a:6b:61:74:15:e3:55:3e:0e: 81:fb:3d:9f:75:2f:1f:3a:ed:32:9b:bd:9c:28:be: 2c:dc:41:bf:d6:96:be:73:d2:cc:03:bf:b6:d9:f6: a9:77:58:6f:d0:e8:89:92:f1:e9:fb:68:09:83:6b: e4:53:71:49:e5:14:ef:18:e2:ba:83:14:64:ac:49: 4a:6a:4b:88:d8:41:1e:4d:0a:02:89:57:1e:76:16: f8:ca:b6:85:f1:df:de:d4:7f:ba:4c:ef:11:52:57: d9:62:08:15:ae:5c:89:a3:f4:ad:97:3f:00:67:76: 9a:52:b8:a3:7a:19:7f:8a:8f:e3:9d:85:14:a0:02: df:37:b4:e3:75:5d:25:13:75:66:b8:cf:8e:c1:4c: 09:75:5f:d9:5b:58:db:e5:19:7f:a4:6b:55:12:a6: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.232.0/23 77.81.137.0-77.81.138.255 89.42.110.0/23 93.113.25.0/24 93.113.212.0/24 193.203.204.0/23 IPv6: 2a06:4a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39758 Signature Algorithm: sha256WithRSAEncryption 20:a1:eb:6e:8c:9c:49:e5:bf:6d:a9:7a:2e:5c:05:8b:de:43: 01:b7:ba:9f:f3:b9:d3:45:84:70:a3:f7:c0:ea:38:e0:f7:80: dd:a7:05:a3:4a:35:65:57:b5:e4:3b:36:5f:14:28:92:5b:0f: cf:92:1e:ab:64:e6:6a:e7:59:d1:7a:dd:92:61:8e:25:81:79: 8f:96:0d:94:4d:38:60:b4:93:b0:c9:05:ab:3f:41:02:f2:fe: a6:5f:4b:0b:1c:e5:1e:04:c3:26:23:95:21:b1:2d:5d:df:3e: 84:aa:03:c2:f8:e8:16:12:70:cb:a3:77:12:f3:8f:16:81:08: 49:b6:13:42:a4:b6:2a:61:3a:e8:96:98:6b:b6:92:70:b3:c4: f8:9b:f7:2d:2f:4a:4a:0f:89:2c:f8:66:92:53:13:76:26:56: aa:9c:8f:8e:90:e9:42:93:68:15:73:c9:c4:86:e4:8a:b4:7e: 3e:ba:81:18:6e:bf:ad:bc:08:95:db:8a:98:93:2c:c8:6f:55: d8:92:14:79:8a:b1:b1:d5:15:d1:47:6b:fc:1f:85:a1:77:d6: 3a:08:46:5f:21:cd:5e:1b:ec:85:85:c4:c1:7f:65:69:99:e8: 58:c3:f8:d6:3c:ee:a0:33:ff:e6:00:bb:07:3e:a4:52:1e:30: 05:4c:6f:31 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt4NVj2pKMJx3BjJ/c8LW3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDllZGIyYTE1ODcxNzg1ZmJhZTM4ZTIzYzM4ODIwZGJmYTJjY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1tERqsm8IzGIsoUT36uze2kgMUu Aqvze9JdgpjQW9Rtghg2kSF6WZqqHp1P9BQULFsmwRzDM95wI3TdsM3nJvkuexcX tfUj6x9JUrlXJYIOaWEld1cn34tomR5RF/s6a2F0FeNVPg6B+z2fdS8fOu0ym72c KL4s3EG/1pa+c9LMA7+22fapd1hv0OiJkvHp+2gJg2vkU3FJ5RTvGOK6gxRkrElK akuI2EEeTQoCiVcedhb4yraF8d/e1H+6TO8RUlfZYggVrlyJo/Stlz8AZ3aaUrij ehl/io/jnYUUoALfN7TjdV0lE3VmuM+OwUwJdV/ZW1jb5Rl/pGtVEqZfZwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFO2e2yoVhxeF+6444jw4gg2/osykMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2VhMGRl OTdmLTdlZTgtNGNlMC1iMDQ1LWVmYWM4YzI0M2M3OS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEw ZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvRUQ5RURCMkExNTg3 MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRFMEMwMgQCAAEwLAME AS5m6DAMAwQATVGJAwQATVGKAwQBWSpuAwQAXXEZAwQAXXHUAwQBwcvMMA0EAgAC MAcDBQMqBkpAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbTjANBgkqhkiG9w0B AQsFAAOCAQEAIKHrboycSeW/bal6LlwFi95DAbe6n/O500WEcKP3wOo44PeA3acF o0o1ZVe15Ds2XxQoklsPz5Ieq2TmaudZ0XrdkmGOJYF5j5YNlE04YLSTsMkFqz9B AvL+pl9LCxzlHgTDJiOVIbEtXd8+hKoDwvjoFhJwy6N3EvOPFoEISbYTQqS2KmE6 6JaYa7aScLPE+Jv3LS9KSg+JLPhmklMTdiZWqpyPjpDpQpNoFXPJxIbkirR+PrqB GG6/rbwIlduKmJMsyG9V2JIUeYqxsdUV0Udr/B+FoXfWOghGXyHNXhvshYXEwX9l aZnoWMP41jzuoDP/5gC7Bz6kUh4wBUxvMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:16 2026 by rpki-client