This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer File: 7w7IG5xlO440BQj_hI2wZuNncrA.cer (raw, json) Hash identifier: ojeN9PwWlEDXhLVbzW2QSKTgVJc1F6ELVkxKe97qLjA= Subject key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F5FA5D00A18F38079F5A87F1A079 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203641 IP: 5.182.160.0/22 IP: 185.107.160.0/22 IP: 185.218.252.0/22 IP: 193.111.170.0/23 IP: 193.111.196.0/23 IP: 2a0b:dc40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:fa:5d:00:a1:8f:38:07:9f:5a:87:f1:a0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:4a:1e:a6:db:8e:4e:8a:06:1e:87:e2:43: ea:81:48:72:cd:cd:d9:d5:cf:22:2a:aa:8e:49:28: 8e:56:cd:d3:e0:73:6d:9b:7c:ee:f5:1f:54:a0:05: ad:88:8a:ad:92:b3:ed:92:89:ca:d1:ef:ae:7a:b2: 63:3a:4c:bd:01:d8:58:5b:ee:0b:e5:78:e2:20:e3: ff:8e:d9:6f:bf:85:21:ad:c6:72:76:6a:15:0a:86: 57:85:c9:5e:09:29:a7:bf:63:4b:b0:bb:0b:8d:9c: f1:c4:d9:dd:b4:21:cb:37:0b:4d:2c:03:68:3a:78: 7c:b6:2d:f3:47:49:f9:cd:9a:cc:0d:d7:be:95:3a: b1:3b:b1:90:15:4f:2d:7a:0f:a4:b7:4e:2f:56:c0: d0:17:23:bc:29:a4:e5:fa:ba:f4:27:b7:9b:15:e2: 42:aa:0b:c7:2c:d5:86:20:ba:f7:2c:8d:c6:f6:da: a9:41:ea:9c:00:30:15:ea:a3:a9:ca:74:c7:61:1e: eb:f1:7b:a1:80:20:e7:76:72:d2:82:6a:1f:d1:07: 15:a4:47:de:a9:99:49:49:60:e7:e9:c1:09:a7:7e: e7:8e:e6:0e:ac:b4:e2:a1:67:cc:7e:72:aa:fd:85: b3:7a:62:c5:2a:56:4c:54:e2:af:3d:38:ce:31:cf: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.160.0/22 185.107.160.0/22 185.218.252.0/22 193.111.170.0/23 193.111.196.0/23 IPv6: 2a0b:dc40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203641 Signature Algorithm: sha256WithRSAEncryption 75:7f:2c:f1:8f:4f:bd:56:b1:57:32:25:27:b6:e4:11:f5:28: e2:1f:8c:e9:c9:78:c6:a7:06:13:d9:af:33:c7:7a:8b:c9:3e: 56:ba:29:b8:bf:9b:7c:c4:e0:0d:bd:40:3c:a7:d0:ea:59:28: 74:fc:4b:2d:6f:c5:8d:a7:54:53:67:ec:07:0d:eb:d6:19:55: 78:26:ba:cb:e3:02:77:0d:e7:d0:ea:b3:e9:05:9b:02:61:83: c8:2e:7b:6f:f1:ef:5e:5f:99:8d:63:76:c2:36:13:48:45:84: b3:dc:ae:09:5f:87:94:25:29:ff:15:90:95:2d:fc:38:9f:b3: 17:e2:c4:a3:f9:57:44:66:36:ae:7c:69:75:ed:94:d1:02:cb: 8e:e7:d3:31:4a:f4:f3:00:c2:9a:7e:16:7e:2f:60:ce:e6:a5: c8:92:04:27:60:32:a9:48:79:29:1c:e1:66:f5:29:62:f8:af: df:23:77:4a:9c:23:21:e7:2a:6b:8c:3f:e0:d2:b2:1f:86:ea: 8b:42:fd:7a:51:2f:90:09:fd:ca:6b:6a:ba:e3:6b:aa:31:a6: 6f:82:fd:ff:05:13:fc:46:d3:5f:2a:47:f8:9f:6a:51:05:f6: fc:50:ab:e9:c3:ff:71:39:ab:f6:04:2e:77:a2:65:93:d8:a1: 1e:d1:c1:ae -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4ovX6XQChjzgHn1qH8aB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjBlYzgxYjljNjUzYjhlMzQwNTA4ZmY4NDhkYjA2NmUzNjc3MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrtKHqbbjk6KBh6H4kPqgUhyzc3Z 1c8iKqqOSSiOVs3T4HNtm3zu9R9UoAWtiIqtkrPtkonK0e+uerJjOky9AdhYW+4L 5XjiIOP/jtlvv4UhrcZydmoVCoZXhcleCSmnv2NLsLsLjZzxxNndtCHLNwtNLANo Onh8ti3zR0n5zZrMDde+lTqxO7GQFU8teg+kt04vVsDQFyO8KaTl+rr0J7ebFeJC qgvHLNWGILr3LI3G9tqpQeqcADAV6qOpynTHYR7r8XuhgCDndnLSgmof0QcVpEfe qZlJSWDn6cEJp37njuYOrLTioWfMfnKq/YWzemLFKlZMVOKvPTjOMc+N0wIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFO8OyBucZTuONAUI/4SNsGbjZ3KwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzRmMTA4 Ny0yZjFiLTRhYjUtYWU3MS0yNmNkYzU1NjQ0ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNGYxMDg3 LTJmMWItNGFiNS1hZTcxLTI2Y2RjNTU2NDRkNC8xLzd3N0lHNXhsTzQ0MEJRal9o STJ3WnVObmNyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCBbagAwQCuWugAwQCudr8AwQBwW+qAwQBwW/E MA0EAgACMAcDBQMqC9xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbeTANBgkq hkiG9w0BAQsFAAOCAQEAdX8s8Y9PvVaxVzIlJ7bkEfUo4h+M6cl4xqcGE9mvM8d6 i8k+VropuL+bfMTgDb1APKfQ6lkodPxLLW/FjadUU2fsBw3r1hlVeCa6y+MCdw3n 0Oqz6QWbAmGDyC57b/HvXl+ZjWN2wjYTSEWEs9yuCV+HlCUp/xWQlS38OJ+zF+LE o/lXRGY2rnxpde2U0QLLjufTMUr08wDCmn4Wfi9gzualyJIEJ2AyqUh5KRzhZvUp Yviv3yN3SpwjIecqa4w/4NKyH4bqi0L9elEvkAn9ymtquuNrqjGmb4L9/wUT/EbT XypH+J9qUQX2/FCr6cP/cTmr9gQud6Jlk9ihHtHBrg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:29 2026 by rpki-client