This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer (raw, json) Hash identifier: uAWB+aURu4YgLQlnO5nqLfH+c+63zcY7rC+Mee+VeMA= Subject key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F158816673CDE62157A0DF17E1F010A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215472 IP: 2001:678:b74::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:16:67:3c:de:62:15:7a:0d:f1:7e:1f:01:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed900a55518b679edc78faa9883ec6e6035ae71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:35:2b:81:3d:56:83:08:b1:84:0a:a1:37: 1d:92:67:63:f0:02:7f:32:a3:8b:07:61:7b:66:22: ea:84:59:f9:ec:d4:4f:a9:f5:67:bc:a0:b6:cf:93: de:f2:57:d2:89:84:64:58:26:66:59:84:91:6d:dc: d1:a4:7e:22:1e:1b:21:16:c3:0c:75:d2:63:47:15: df:40:8e:e0:0a:6c:d9:19:e6:b3:ed:c4:aa:25:81: 48:07:5a:82:3a:8b:1c:6c:a5:e2:84:56:63:4e:94: f8:bf:da:0b:5a:69:3d:2c:3c:62:00:49:08:3a:21: fa:2c:ac:b3:ee:6f:c8:e9:63:bb:15:fa:cc:72:e1: 1f:be:ab:06:5c:99:13:0d:e7:69:a5:8b:ac:c7:bf: 31:d3:98:2e:f3:21:51:c3:f7:c8:da:69:e6:9d:56: 55:78:ae:9e:31:35:45:e5:da:1e:80:82:0b:ee:74: 49:c2:55:ad:5f:83:62:9b:bd:d3:9d:f5:dd:76:5f: 1e:7a:ca:65:09:62:cf:c2:f3:9b:7a:36:6c:e2:6c: 6c:16:5c:01:e8:33:20:3e:29:a7:1c:85:dc:7d:41: c0:8d:1d:d9:07:5a:3b:8d:7e:ae:00:86:91:67:32: 35:3c:99:9f:6b:82:3e:c4:47:5f:96:3e:e5:71:2b: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b74::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215472 Signature Algorithm: sha256WithRSAEncryption 19:1f:94:04:2b:9d:a4:5d:93:e4:00:58:5e:35:5d:1d:6e:53: a4:b7:d9:b4:53:47:f6:57:db:13:28:af:d5:5a:18:c4:24:aa: b6:33:d3:a3:b8:d9:34:bf:d5:b5:f7:f7:7e:58:93:fe:42:5b: 6e:83:fe:95:12:cc:95:d3:d4:b2:fc:7b:ee:a7:8e:10:24:54: 37:1e:98:81:f6:7c:47:f6:fa:c5:65:f6:3c:ae:fe:4d:58:c6: 27:dc:b1:7a:0f:90:64:1a:82:dd:d6:70:ee:f7:2a:37:fa:51: a5:c1:a9:9a:89:b9:2c:d0:54:ff:c1:de:80:73:7e:d2:08:70: b2:1f:ce:f6:a1:60:00:20:35:d9:ee:0a:f1:ab:83:f1:9a:24: 35:75:5b:9e:e3:8f:ca:1f:4d:63:43:f1:6b:93:1b:44:b6:ec: 9d:6c:76:1b:a2:c0:fa:66:37:ba:e5:fc:d2:48:73:5f:78:89: c6:84:33:4c:9d:da:e3:f9:cc:e3:f0:c4:df:6c:ca:c9:15:ea: c6:53:85:63:cb:30:99:dd:6e:08:81:60:1a:4b:ba:70:ea:cc: 28:71:63:b8:18:d8:59:d0:11:3d:7e:a0:25:6d:09:47:e3:8f: 52:78:33:15:2c:dd:4d:ce:bb:0d:21:ae:b1:3e:54:a5:81:1d: ab:6b:81:c2 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/FYgWZzzeYhV6DfF+HwEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDkwMGE1NTUxOGI2NzllZGM3OGZhYTk4ODNlYzZlNjAzNWFlNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs81K4E9VoMIsYQKoTcdkmdj8AJ/ MqOLB2F7ZiLqhFn57NRPqfVnvKC2z5Pe8lfSiYRkWCZmWYSRbdzRpH4iHhshFsMM ddJjRxXfQI7gCmzZGeaz7cSqJYFIB1qCOoscbKXihFZjTpT4v9oLWmk9LDxiAEkI OiH6LKyz7m/I6WO7FfrMcuEfvqsGXJkTDedppYusx78x05gu8yFRw/fI2mnmnVZV eK6eMTVF5doegIIL7nRJwlWtX4Nim73TnfXddl8eesplCWLPwvObejZs4mxsFlwB 6DMgPimnHIXcfUHAjR3ZB1o7jX6uAIaRZzI1PJmfa4I+xEdflj7lcSttAQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFO2QClVRi2ee3Hj6qYg+xuYDWuccMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2ZiZmFj Yy1hNGYwLTRiZGItYWJiYi0wZjczNjYxZDVmMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZmJmYWNj LWE0ZjAtNGJkYi1hYmJiLTBmNzM2NjFkNWYzNS8xLzdaQUtWVkdMWjU3Y2VQcXBp RDdHNWdOYTV4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAt0MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNJsDANBgkqhkiG9w0BAQsFAAOCAQEAGR+UBCudpF2T5ABYXjVdHW5TpLfZ tFNH9lfbEyiv1VoYxCSqtjPTo7jZNL/Vtff3fliT/kJbboP+lRLMldPUsvx77qeO ECRUNx6YgfZ8R/b6xWX2PK7+TVjGJ9yxeg+QZBqC3dZw7vcqN/pRpcGpmom5LNBU /8HegHN+0ghwsh/O9qFgACA12e4K8auD8ZokNXVbnuOPyh9NY0Pxa5MbRLbsnWx2 G6LA+mY3uuX80khzX3iJxoQzTJ3a4/nM4/DE32zKyRXqxlOFY8swmd1uCIFgGku6 cOrMKHFjuBjYWdARPX6gJW0JR+OPUngzFSzdTc67DSGusT5UpYEdq2uBwg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:53 2026 by rpki-client