This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer File: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer (raw, json) Hash identifier: mq8KToDqt0i8I2L8cENDKDNsUTSdVwtsOmu8uxTVAl0= Subject key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9B8344C894519562192F399C2E15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212579 IP: 185.19.224.0/22 IP: 185.243.16.0/22 IP: 2a04:1280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9b:83:44:c8:94:51:95:62:19:2f:39:9c:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3be768d28668f490afb74e9aefe41e03495d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:fd:12:2a:8e:19:34:43:c7:9d:dd:98:95: d7:24:16:1b:82:79:7a:c7:2a:a5:63:7b:f4:09:70: 1a:ed:46:34:97:2d:c0:fd:70:a5:af:89:30:a4:d0: 9c:34:25:0c:fb:2c:e4:71:28:78:25:bb:ce:c2:8f: e1:14:db:31:f1:dd:91:e5:16:e9:c0:08:06:04:f9: 40:c9:3c:be:62:8d:45:84:a2:55:92:99:eb:46:37: af:d9:37:3a:fe:08:c9:ac:0b:19:48:e1:e4:86:de: 47:32:a7:b6:db:e3:06:3e:12:28:bf:0a:37:00:d8: 66:6b:16:42:97:a6:31:81:8e:7b:d0:75:da:60:78: f1:f9:b3:e5:2d:4b:b4:30:dd:ca:d0:25:fa:61:62: c4:45:2d:72:1d:f2:8d:e3:81:44:70:c6:f5:e2:6e: 51:94:06:91:19:b8:0e:cf:06:92:60:0c:dc:0b:64: 79:35:b1:92:f4:eb:64:01:60:36:e2:5e:75:9a:41: bc:dd:13:54:1e:8b:8d:66:e0:c3:87:9b:a2:f7:be: f6:14:ec:ff:32:79:5f:e5:fe:2b:f5:81:b4:27:b8: 2f:82:32:24:7e:08:d1:30:c8:a7:d4:9c:69:c9:b5: f6:ca:1b:f2:29:45:96:30:e0:1a:64:eb:25:d3:6d: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.224.0/22 185.243.16.0/22 IPv6: 2a04:1280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212579 Signature Algorithm: sha256WithRSAEncryption 49:2c:3c:fe:ba:7c:19:cf:b1:92:0f:5d:46:58:da:a5:1a:f9: f1:06:88:bb:87:82:e1:18:90:d6:b1:bb:80:08:50:bd:2a:4e: a5:e5:be:57:0e:d4:64:f9:dc:7f:5f:3e:d3:cf:ee:ff:e2:2a: 49:70:37:17:b3:53:3e:b1:a1:c9:51:cb:c9:88:09:7c:29:b2: 7f:3f:31:13:dd:cc:a1:39:6b:9e:60:2a:f2:19:e4:9a:80:79: 20:83:33:91:e2:1a:b4:f2:8c:01:00:88:6f:f4:d8:c1:18:a6: d5:51:15:81:45:4b:39:31:56:00:ed:a0:ff:5d:2c:45:b1:de: ae:fe:8f:b9:02:50:c6:8a:fc:8a:a3:65:77:58:71:17:5b:69: fe:41:b2:ef:00:19:0e:85:78:24:0a:46:ae:e3:9d:3b:4f:e8: c6:09:9d:14:b0:2d:e3:1b:ea:2f:f0:d7:31:dc:d4:58:6c:62: 89:e8:d1:5f:48:91:8e:7b:71:6b:b3:4f:3c:d5:d3:df:17:bb: 89:3e:db:d9:bc:97:f7:12:da:bc:ee:93:96:eb:1d:9d:d1:ec: df:c0:3a:96:4e:98:d4:ab:ff:75:90:a7:b8:96:0c:09:d1:42: c8:9f:c6:ce:f1:03:67:40:2a:5c:c9:31:62:14:80:40:97:78: bc:17:4d:5c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fpuDRMiUUZViGS85nC4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNiZTc2OGQyODY2OGY0OTBhZmI3NGU5YWVmZTQxZTAzNDk1ZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW/9EiqOGTRDx53dmJXXJBYbgnl6 xyqlY3v0CXAa7UY0ly3A/XClr4kwpNCcNCUM+yzkcSh4JbvOwo/hFNsx8d2R5Rbp wAgGBPlAyTy+Yo1FhKJVkpnrRjev2Tc6/gjJrAsZSOHkht5HMqe22+MGPhIovwo3 ANhmaxZCl6YxgY570HXaYHjx+bPlLUu0MN3K0CX6YWLERS1yHfKN44FEcMb14m5R lAaRGbgOzwaSYAzcC2R5NbGS9OtkAWA24l51mkG83RNUHouNZuDDh5ui9772FOz/ Mnlf5f4r9YG0J7gvgjIkfgjRMMin1JxpybX2yhvyKUWWMOAaZOsl021k4QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFO4752jShmj0kK+3Tprv5B4DSV16MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzc0NzRl MS00ZDY1LTQzYjQtOGJiMS1mZWVmMTA1ZjBhNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvNzQ3NGUx LTRkNjUtNDNiNC04YmIxLWZlZWYxMDVmMGE3Ny8xLzdqdm5hTktHYVBTUXI3ZE9t dV9rSGdOSlhYby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRPgAwQCufMQMA0EAgACMAcDBQMqBBKAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+YzANBgkqhkiG9w0BAQsFAAOCAQEASSw8 /rp8Gc+xkg9dRljapRr58QaIu4eC4RiQ1rG7gAhQvSpOpeW+Vw7UZPncf18+08/u /+IqSXA3F7NTPrGhyVHLyYgJfCmyfz8xE93MoTlrnmAq8hnkmoB5IIMzkeIatPKM AQCIb/TYwRim1VEVgUVLOTFWAO2g/10sRbHerv6PuQJQxor8iqNld1hxF1tp/kGy 7wAZDoV4JApGruOdO0/oxgmdFLAt4xvqL/DXMdzUWGxiiejRX0iRjntxa7NPPNXT 3xe7iT7b2byX9xLavO6TlusdndHs38A6lk6Y1Kv/dZCnuJYMCdFCyJ/GzvEDZ0Aq XMkxYhSAQJd4vBdNXA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:30 2026 by rpki-client