This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer File: 7uVzCEEAtB18weRHKVunHQGdUZI.cer (raw, json) Hash identifier: UtV1JPMjVpsoggOJoppt6jtYw24ejtbe+gU055CPEx4= Subject key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E632970DE81F7B2F248F22B9D22FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12637 AS: 20522 IP: 5.144.160.0/20 IP: 37.9.224.0/20 IP: 46.16.168.0/21 IP: 85.94.192.0/19 IP: 95.174.0.0/19 IP: 185.24.104.0/22 IP: 185.47.108.0/22 IP: 185.114.108.0/22 IP: 185.220.244.0/22 IP: 185.222.68.0/22 IP: 212.25.160.0/19 IP: 212.35.192.0/19 IP: 212.66.224.0/19 IP: 213.171.160.0/19 IP: 217.64.192.0/20 IP: 217.168.224.0/20 IP: 217.194.0.0/20 IP: 2001:4b78::/29 IP: 2a04:2700::/29 IP: 2a05:b6c0::/29 IP: 2a0b:fd40::/29 IP: 2a0d:b000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:63:29:70:de:81:f7:b2:f2:48:f2:2b:9d:22:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee573084100b41d7cc1e447295ba71d019d5192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:a0:56:06:53:65:65:b6:ae:4d:3d:a2:4d: 05:62:0d:a3:b9:5c:ce:40:00:34:5e:5d:5d:ff:9a: 48:0d:86:54:11:c7:1b:90:fc:b8:61:ec:41:5a:ce: 40:da:d5:03:dc:23:c9:6a:5b:3e:47:96:53:80:20: c0:72:c6:11:f5:95:6a:71:27:70:75:a6:ac:58:2e: f9:51:74:5e:5d:45:d3:69:62:26:19:2c:b1:7e:62: 59:dd:37:b0:53:c4:29:57:c0:a1:ef:20:1b:af:15: 15:27:b1:b1:7b:79:1e:f7:cc:8c:4c:d9:e7:98:f2: c7:e2:77:5e:f8:f5:09:35:92:ab:72:80:1b:54:b2: 11:0b:46:01:0f:ea:5f:f3:73:2d:50:6b:d6:23:40: 27:85:12:37:71:b0:73:fb:28:73:50:67:38:98:6b: 3a:f3:36:f5:10:fd:ff:77:a2:db:ba:1a:68:31:4c: 56:f3:88:19:66:3c:bb:dc:06:32:5a:7f:cf:ed:f3: d5:1b:da:40:73:4d:20:4b:d6:4e:78:b2:7d:4d:ae: 50:19:e0:cb:32:d3:67:86:ec:f7:e3:39:42:42:6b: f7:37:e6:e1:0e:13:06:45:ea:3f:cf:31:42:2b:30: c9:06:a0:9a:53:dd:3e:6e:7f:37:92:f4:da:de:ae: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.160.0/20 37.9.224.0/20 46.16.168.0/21 85.94.192.0/19 95.174.0.0/19 185.24.104.0/22 185.47.108.0/22 185.114.108.0/22 185.220.244.0/22 185.222.68.0/22 212.25.160.0/19 212.35.192.0/19 212.66.224.0/19 213.171.160.0/19 217.64.192.0/20 217.168.224.0/20 217.194.0.0/20 IPv6: 2001:4b78::/29 2a04:2700::/29 2a05:b6c0::/29 2a0b:fd40::/29 2a0d:b000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12637 20522 Signature Algorithm: sha256WithRSAEncryption 87:12:2b:f4:ef:b4:45:d3:22:f5:43:83:6c:5a:49:ae:a1:b0: 0c:65:4e:4d:b4:bd:6c:84:b4:6c:15:e5:5e:64:be:f0:e8:34: 4d:e8:d5:e0:af:cf:ba:ef:b3:ff:78:10:2e:fb:7f:0f:42:d9: 0e:b1:e5:bb:d1:a4:70:24:ac:88:e1:0f:bc:1c:7b:1a:0a:ce: be:cb:dd:7f:8b:f2:36:b8:3a:ce:e9:3c:f2:4d:05:0a:31:c8: cd:ca:9f:23:17:47:68:5a:d3:53:6f:a1:59:2e:55:85:9b:df: 98:71:2d:f1:20:af:b3:c9:3c:aa:7c:0a:d6:c2:ba:f2:2f:9b: 90:ce:f5:80:cb:7b:ef:d3:2a:35:14:13:64:b6:46:a0:7b:9d: 87:98:3b:fe:ad:6a:8b:5c:4e:5d:7e:a2:83:48:53:98:93:6b: 1c:a3:cb:3e:6e:65:94:9b:36:9d:40:a8:2b:2e:cb:b3:98:7f: 19:b0:39:75:d0:00:91:41:0e:e0:20:ce:4f:cd:51:a7:77:62: b1:7f:f8:0c:5a:15:ff:85:13:7a:34:d2:f0:52:16:dc:da:cc: 92:80:53:26:e4:14:df:52:7a:a6:3e:88:9f:8e:69:a4:6d:d2: 79:5a:1a:82:db:4d:78:44:95:95:d5:9f:e9:60:ab:2a:c3:9c: ff:75:e6:ff -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgISAZt5fmMpcN6B97LySPIrnSL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWU1NzMwODQxMDBiNDFkN2NjMWU0NDcyOTViYTcxZDAxOWQ1MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp6gVgZTZWW2rk09ok0FYg2juVzO QAA0Xl1d/5pIDYZUEccbkPy4YexBWs5A2tUD3CPJals+R5ZTgCDAcsYR9ZVqcSdw daasWC75UXReXUXTaWImGSyxfmJZ3TewU8QpV8Ch7yAbrxUVJ7Gxe3ke98yMTNnn mPLH4nde+PUJNZKrcoAbVLIRC0YBD+pf83MtUGvWI0AnhRI3cbBz+yhzUGc4mGs6 8zb1EP3/d6LbuhpoMUxW84gZZjy73AYyWn/P7fPVG9pAc00gS9ZOeLJ9Ta5QGeDL MtNnhuz34zlCQmv3N+bhDhMGReo/zzFCKzDJBqCaU90+bn83kvTa3q4BzQIDAQAB o4IDMTCCAy0wHQYDVR0OBBYEFO7lcwhBALQdfMHkRylbpx0BnVGSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzExYTg2 NC1kMWNiLTQwMDAtYjJiYy0xOWVlM2Q4YjU3N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMTFhODY0 LWQxY2ItNDAwMC1iMmJjLTE5ZWUzZDhiNTc3ZS8xLzd1VnpDRUVBdEIxOHdlUkhL VnVuSFFHZFVaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGsBggrBgEF BQcBBwEB/wSBnDCBmTBsBAIAATBmAwQEBZCgAwQEJQngAwQDLhCoAwQFVV7AAwQF X64AAwQCuRhoAwQCuS9sAwQCuXJsAwQCudz0AwQCud5EAwQF1BmgAwQF1CPAAwQF 1ELgAwQF1augAwQE2UDAAwQE2ajgAwQE2cIAMCkEAgACMCMDBQMgAUt4AwUDKgQn AAMFAyoFtsADBQMqC/1AAwUDKg2wADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIx XQICUCowDQYJKoZIhvcNAQELBQADggEBAIcSK/TvtEXTIvVDg2xaSa6hsAxlTk20 vWyEtGwV5V5kvvDoNE3o1eCvz7rvs/94EC77fw9C2Q6x5bvRpHAkrIjhD7wcexoK zr7L3X+L8ja4Os7pPPJNBQoxyM3KnyMXR2ha01NvoVkuVYWb35hxLfEgr7PJPKp8 CtbCuvIvm5DO9YDLe+/TKjUUE2S2RqB7nYeYO/6taotcTl1+ooNIU5iTaxyjyz5u ZZSbNp1AqCsuy7OYfxmwOXXQAJFBDuAgzk/NUad3YrF/+AxaFf+FE3o00vBSFtza zJKAUybkFN9SeqY+iJ+OaaRt0nlaGoLbTXhElZXVn+lgqyrDnP915v8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:00 2026 by rpki-client