This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer File: 7fVL4bXtX9WS-spGjfERAJXz6go.cer (raw, json) Hash identifier: kaREZHnqxod0feeE4iBD+lbvGEL3dvUm8y5/Pq0h5sc= Subject key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE53A2EBA5A08ADA30369FD9E8DBFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208550 IP: 45.129.52.0/22 IP: 2a0e:4440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:a2:eb:a5:a0:8a:da:30:36:9f:d9:e8:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:a6:ec:a1:f9:45:ca:e4:d3:da:f1:f0:09: 4f:15:61:47:24:b8:2c:5a:0d:db:ea:54:9e:c3:b7: f4:c5:35:9e:39:ef:c2:10:7a:3d:98:ad:50:64:91: f4:62:e5:38:bb:95:d9:a6:29:cd:9c:49:b9:76:5e: 45:5e:e2:3b:d8:6f:9d:e0:df:07:35:21:08:9f:22: d7:91:e2:74:a2:5c:19:aa:93:cf:db:34:62:22:fb: 86:13:eb:13:95:f2:8b:fa:c3:9a:35:cf:47:f2:f8: 4e:de:26:78:bf:cb:f2:22:61:e8:78:16:12:d5:19: bd:f9:34:3a:34:9e:83:fd:7d:cf:06:f7:86:78:51: c2:7e:b7:66:2c:28:77:85:5f:81:09:2f:98:e3:42: ab:fb:df:3d:dd:cd:9e:55:58:df:2e:28:6d:08:0f: ad:3f:cc:d2:86:a0:06:6c:a6:16:98:06:f6:8b:2b: db:21:36:24:23:49:8f:d6:34:31:e5:29:37:b3:0d: e4:e2:72:2f:99:c9:ef:e1:93:b1:85:7d:17:2e:06: 89:b6:02:ce:b6:65:e1:fb:b7:87:bc:68:82:a9:a6: 2b:50:57:95:b7:40:a2:88:e5:ba:aa:c5:bb:07:55: 63:c9:df:ca:63:da:a6:55:93:08:2c:cf:78:0b:f9: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.52.0/22 IPv6: 2a0e:4440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208550 Signature Algorithm: sha256WithRSAEncryption 91:02:41:81:eb:1d:9b:ca:1a:f5:9c:bb:e6:f6:e7:3e:a5:c5: 95:0f:ca:01:4a:aa:9b:10:68:fc:b5:59:55:6a:0e:4b:89:b6: d0:fb:75:b9:03:4f:c6:22:04:64:60:c8:ce:f2:bc:0b:77:85: bf:6a:a1:7a:15:1e:1d:9f:d6:8d:41:67:be:73:4d:2c:28:cd: f7:d5:58:de:92:82:9f:a2:32:3f:03:55:8a:44:af:fc:ee:10: 42:58:23:e9:78:bf:f0:5d:8f:8b:5c:3e:4a:47:f9:58:a8:8b: 01:a5:2a:cb:93:9e:96:84:22:65:bb:b8:c7:6b:d8:5b:7b:40: b9:dd:64:79:93:10:e2:f4:68:6c:c8:e4:72:e2:1c:b7:66:39: 22:a7:a8:63:74:2a:dd:b0:1f:0e:c9:fd:43:be:a3:a0:e9:05: 96:d7:86:cf:25:a5:3a:93:23:a2:8a:89:32:f1:08:09:13:c1: f9:66:86:4e:b2:ce:9c:19:5f:80:d8:c2:8e:91:d5:7b:cc:c1: 02:21:6c:6d:5c:e2:cc:d7:9f:56:b6:78:d0:07:20:bb:ee:54: bb:f1:ec:da:4c:71:c0:03:1b:c7:08:10:7e:39:e6:76:02:bf: 9e:af:64:fc:f3:e5:70:6b:dd:f1:8d:0e:63:8c:f7:83:38:04: a8:20:e1:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87lOi66WgitowNp/Z6Nv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGY1NGJlMWI1ZWQ1ZmQ1OTJmYWNhNDY4ZGYxMTEwMDk1ZjNlYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSSm7KH5Rcrk09rx8AlPFWFHJLgs Wg3b6lSew7f0xTWeOe/CEHo9mK1QZJH0YuU4u5XZpinNnEm5dl5FXuI72G+d4N8H NSEInyLXkeJ0olwZqpPP2zRiIvuGE+sTlfKL+sOaNc9H8vhO3iZ4v8vyImHoeBYS 1Rm9+TQ6NJ6D/X3PBveGeFHCfrdmLCh3hV+BCS+Y40Kr+9893c2eVVjfLihtCA+t P8zShqAGbKYWmAb2iyvbITYkI0mP1jQx5Sk3sw3k4nIvmcnv4ZOxhX0XLgaJtgLO tmXh+7eHvGiCqaYrUFeVt0CiiOW6qsW7B1Vjyd/KY9qmVZMILM94C/lkKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO31S+G17V/VkvrKRo3xEQCV8+oKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzQwZDg5 My1lMDk5LTQxNDgtYjI4ZS05ZTYxNGY0NDY2YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNDBkODkz LWUwOTktNDE0OC1iMjhlLTllNjE0ZjQ0NjZjNS8xLzdmVkw0Ylh0WDlXUy1zcEdq ZkVSQUpYejZnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYE0MA0EAgACMAcDBQMqDkRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMupjANBgkqhkiG9w0BAQsFAAOCAQEAkQJBgesdm8oa 9Zy75vbnPqXFlQ/KAUqqmxBo/LVZVWoOS4m20Pt1uQNPxiIEZGDIzvK8C3eFv2qh ehUeHZ/WjUFnvnNNLCjN99VY3pKCn6IyPwNVikSv/O4QQlgj6Xi/8F2Pi1w+Skf5 WKiLAaUqy5OeloQiZbu4x2vYW3tAud1keZMQ4vRobMjkcuIct2Y5IqeoY3Qq3bAf Dsn9Q76joOkFlteGzyWlOpMjooqJMvEICRPB+WaGTrLOnBlfgNjCjpHVe8zBAiFs bVzizNefVrZ40Acgu+5Uu/Hs2kxxwAMbxwgQfjnmdgK/nq9k/PPlcGvd8Y0OY4z3 gzgEqCDhiA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:38 2026 by rpki-client