This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer File: 7f_7PGYeL3ileFvpWRYESwavUdI.cer (raw, json) Hash identifier: S9tNlf3V2R3UsJLA4VEoKeIF3Q0p5jHXsIy30BDm/T8= Subject key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA38A276ECEBEC66A59FA14AB73E26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57087 IP: 5.182.128.0/22 IP: 193.163.40.0 -- 193.163.44.255 IP: 2a13:8bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:38:a2:76:ec:eb:ec:66:a5:9f:a1:4a:b7:3e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edfffb3c661e2f78a5785be95916044b06af51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:dd:46:8a:29:73:ac:86:0b:4e:bc:d9:69: 92:d4:58:89:2c:31:0e:e8:84:d5:c0:7d:31:38:0d: b7:4e:cc:8b:c1:4e:5b:c4:e1:d6:4c:cc:02:f0:13: 0d:8f:bd:11:61:1f:2f:7b:f8:e8:69:72:60:b2:7a: 64:64:b8:18:f2:5b:e9:0e:13:3f:83:5f:eb:f1:c9: bb:82:4a:b0:f3:a2:54:0e:68:f1:63:d9:58:2b:a7: c6:26:ce:60:b3:57:08:5e:fe:c1:fb:f3:0b:7c:3d: 1c:76:0a:83:0c:46:56:20:9c:ad:87:d5:e2:09:d1: 34:9a:46:49:5b:eb:23:ce:58:d0:58:f9:b3:48:f9: 02:68:26:7b:c5:96:21:52:20:16:44:41:d3:ed:f7: 0e:ca:dd:00:e8:2a:82:ca:69:23:cb:a9:66:0b:2a: 4c:b4:7c:24:a4:06:3b:d6:c3:b9:76:7c:0b:06:e4: 6a:4d:31:fa:d4:09:c4:d9:75:ba:db:02:de:7f:66: b8:fd:79:6d:ff:4d:2c:6a:75:56:0e:e0:60:ff:7f: 49:1f:f9:24:a7:cd:b5:a2:bc:f4:8d:e1:9c:bf:7a: 2a:db:a6:f8:58:74:c3:72:6b:78:09:04:f6:d4:f7: e6:86:97:8f:b0:35:10:1c:91:46:8a:6d:5f:ab:63: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.128.0/22 193.163.40.0-193.163.44.255 IPv6: 2a13:8bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57087 Signature Algorithm: sha256WithRSAEncryption a9:00:ff:9c:1b:dc:ae:fd:37:71:6f:60:ac:7b:44:59:78:5e: ae:42:27:c6:52:be:f8:01:13:52:04:ed:85:92:c3:1e:8c:39: a4:9f:cd:9e:49:25:aa:60:3e:09:4d:cd:c9:ad:89:80:87:78: d9:92:ba:c2:3f:f9:7e:a1:91:83:ef:79:a5:d3:70:f0:b1:1a: ec:60:09:b5:68:56:bf:39:8b:4a:91:f3:f6:0a:70:80:e0:d4: d4:e2:f3:ee:e8:ed:f8:7b:60:b9:34:67:80:ec:96:75:ae:2f: c6:c5:d4:28:a0:cb:45:3b:71:e4:4d:ed:63:b1:ce:f4:b5:0a: 03:ec:e1:d0:0d:30:b6:52:21:4e:78:46:d9:1a:a0:73:5e:66: 9c:b4:c2:fa:48:ae:b2:87:d4:1b:16:ba:dc:6d:fa:91:c4:22: 4b:ed:76:2e:17:d2:d8:19:f0:ed:f1:cd:fb:26:1a:94:36:c3: 11:d5:e0:c7:d4:57:01:5c:00:18:5e:75:5b:99:c4:81:b6:bf: 2b:8f:c8:9f:ff:54:b3:f2:26:c6:67:f4:64:d2:8f:18:ce:4c: 55:8f:70:ce:bd:2a:23:18:92:31:41:a4:08:b3:cc:c2:44:27: 37:aa:d7:fc:50:65:52:6c:57:7f:e2:ef:7f:21:1a:3a:b8:3b: 06:a5:b7:6c -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt9yjiiduzr7Galn6FKtz4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGZmZmIzYzY2MWUyZjc4YTU3ODViZTk1OTE2MDQ0YjA2YWY1MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xfdRoopc6yGC0682WmS1FiJLDEO 6ITVwH0xOA23TsyLwU5bxOHWTMwC8BMNj70RYR8ve/joaXJgsnpkZLgY8lvpDhM/ g1/r8cm7gkqw86JUDmjxY9lYK6fGJs5gs1cIXv7B+/MLfD0cdgqDDEZWIJyth9Xi CdE0mkZJW+sjzljQWPmzSPkCaCZ7xZYhUiAWREHT7fcOyt0A6CqCymkjy6lmCypM tHwkpAY71sO5dnwLBuRqTTH61AnE2XW62wLef2a4/Xlt/00sanVWDuBg/39JH/kk p821orz0jeGcv3oq26b4WHTDcmt4CQT21PfmhpePsDUQHJFGim1fq2M2wQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFO3/+zxmHi94pXhb6VkWBEsGr1HSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2EzOGU0 Zi00ZDEwLTRiOWYtOGYyZi1hOTg5MzU0NWMzYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYTM4ZTRm LTRkMTAtNGI5Zi04ZjJmLWE5ODkzNTQ1YzNjNS8xLzdmXzdQR1llTDNpbGVGdnBX UllFU3dhdlVkSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCBbaAMAwDBAPBoygDBADBoywwDQQCAAIwBwMF AyoTi8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAN7/MA0GCSqGSIb3DQEBCwUA A4IBAQCpAP+cG9yu/Tdxb2Cse0RZeF6uQifGUr74ARNSBO2FksMejDmkn82eSSWq YD4JTc3JrYmAh3jZkrrCP/l+oZGD73ml03DwsRrsYAm1aFa/OYtKkfP2CnCA4NTU 4vPu6O34e2C5NGeA7JZ1ri/GxdQooMtFO3HkTe1jsc70tQoD7OHQDTC2UiFOeEbZ GqBzXmactML6SK6yh9QbFrrcbfqRxCJL7XYuF9LYGfDt8c37JhqUNsMR1eDH1FcB XAAYXnVbmcSBtr8rj8if/1Sz8ibGZ/Rk0o8YzkxVj3DOvSojGJIxQaQIs8zCRCc3 qtf8UGVSbFd/4u9/IRo6uDsGpbds -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:57 2026 by rpki-client