This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer File: C7rRuSXg5WPbhdQdJwcF1xhApYg.cer (raw, json) Hash identifier: AM3fapwF3V19saWOfsy2g5otMWWfgmeWS1gPGB4oJmM= Subject key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CD0B4D2AAA2309BCB3E16240F320D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49490 IP: 213.217.8.0/24 IP: 2a12:d980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d0:b4:d2:aa:a2:30:9b:cb:3e:16:24:0f:32:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bbad1b925e0e563db85d41d270705d71840a588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:7f:32:9d:9d:d7:33:98:db:cf:29:db:87: 17:2b:c2:bf:c2:b5:fe:ae:be:6a:ce:58:ee:63:ea: 19:84:bf:dc:60:a4:35:57:82:a3:00:53:b1:d7:c5: 18:80:0c:66:0e:99:67:ab:75:32:18:f2:9c:34:bd: 6a:53:68:66:da:2a:bf:87:99:6d:83:cd:45:b1:df: 8b:4e:17:61:da:43:ca:75:6d:dd:7f:fb:da:89:6a: 7a:3c:ac:c4:54:f3:a4:f6:b1:2d:01:d1:ff:4c:15: 40:d3:d8:95:96:18:e7:78:e1:22:c1:25:d7:01:d9: ab:11:41:b2:e9:e9:ad:c0:06:d0:81:12:fe:36:c4: 89:52:50:f5:e2:d8:c3:7e:5b:c2:66:85:0f:38:60: eb:28:ea:e9:1d:a1:e1:40:fd:50:4b:63:9f:18:68: c3:37:01:fa:00:25:ac:cb:7d:19:57:7e:ec:8b:7a: 3b:d0:61:cc:f9:73:75:c5:43:08:7a:85:0f:04:1e: 3e:5e:1f:a3:c6:9b:ee:9a:0b:fb:c0:18:2a:ad:e4: c1:a9:bc:c7:a4:bb:01:b8:94:6d:aa:12:20:24:57: a8:7e:39:cc:e9:06:c7:18:ea:84:af:7f:26:2e:3c: 1f:b6:cf:a0:fb:26:25:e6:22:61:20:43:7f:bd:6d: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.217.8.0/24 IPv6: 2a12:d980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49490 Signature Algorithm: sha256WithRSAEncryption 9c:cd:97:1f:8a:47:76:7b:c7:60:06:ba:66:eb:3b:20:1b:ad: 80:cb:0d:db:f7:a0:13:76:91:13:dd:0e:76:44:c5:58:35:a2: 81:e4:07:2c:38:29:2b:5c:cc:78:cc:ba:00:0c:6f:4a:d8:d4: e0:b9:fa:72:13:4f:ca:ac:01:45:ec:52:ee:e3:74:c5:62:59: 38:06:58:9b:07:e1:11:4e:60:ca:e4:3b:3b:4d:3f:a6:d9:31: 37:65:85:ec:d0:62:e6:29:68:28:7a:1f:34:ae:5d:ec:9f:1d: ca:76:cf:72:a3:86:b6:80:3e:ec:64:ca:11:ff:dc:2b:82:98: 49:69:58:ca:92:09:34:4a:e8:80:40:e4:ae:63:a6:c4:ad:4d: de:28:05:23:0b:8c:d9:0c:be:a0:6a:f2:e8:a8:8b:05:00:c8: 92:5d:d1:96:84:03:30:dd:8d:74:66:3b:fb:3b:42:1a:64:a9: f8:a8:66:17:78:39:e4:bc:a5:29:81:fe:3f:5a:99:30:58:a7: b7:7e:51:05:e2:2d:4c:39:96:01:63:83:f5:fd:c3:79:78:bf: 93:56:80:18:0a:63:20:bb:29:43:f4:c4:16:07:9c:20:90:a8: c5:9c:2b:67:71:db:d0:be:d1:ff:f5:20:94:15:40:0d:b1:64: 17:4e:e4:01 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XNC00qqiMJvLPhYkDzINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmJhZDFiOTI1ZTBlNTYzZGI4NWQ0MWQyNzA3MDVkNzE4NDBhNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv9/Mp2d1zOY288p24cXK8K/wrX+ rr5qzljuY+oZhL/cYKQ1V4KjAFOx18UYgAxmDplnq3UyGPKcNL1qU2hm2iq/h5lt g81Fsd+LThdh2kPKdW3df/vaiWp6PKzEVPOk9rEtAdH/TBVA09iVlhjneOEiwSXX AdmrEUGy6emtwAbQgRL+NsSJUlD14tjDflvCZoUPOGDrKOrpHaHhQP1QS2OfGGjD NwH6ACWsy30ZV37si3o70GHM+XN1xUMIeoUPBB4+Xh+jxpvumgv7wBgqreTBqbzH pLsBuJRtqhIgJFeofjnM6QbHGOqEr38mLjwfts+g+yYl5iJhIEN/vW26zwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAu60bkl4OVj24XUHScHBdcYQKWIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzIyZDli My1mYTBiLTRjZjAtOTc0MC0yZjdmZDFmMGU5YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMjJkOWIz LWZhMGItNGNmMC05NzQwLTJmN2ZkMWYwZTljMy8xL0M3clJ1U1hnNVdQYmhkUWRK d2NGMXhoQXBZZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1dkIMA0EAgACMAcDBQMqEtmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDBUjANBgkqhkiG9w0BAQsFAAOCAQEAnM2XH4pHdnvH YAa6Zus7IButgMsN2/egE3aRE90OdkTFWDWigeQHLDgpK1zMeMy6AAxvStjU4Ln6 chNPyqwBRexS7uN0xWJZOAZYmwfhEU5gyuQ7O00/ptkxN2WF7NBi5iloKHofNK5d 7J8dynbPcqOGtoA+7GTKEf/cK4KYSWlYypIJNErogEDkrmOmxK1N3igFIwuM2Qy+ oGry6KiLBQDIkl3RloQDMN2NdGY7+ztCGmSp+KhmF3g55LylKYH+P1qZMFint35R BeItTDmWAWOD9f3DeXi/k1aAGApjILspQ/TEFgecIJCoxZwrZ3Hb0L7R//UglBVA DbFkF07kAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:03 2026 by rpki-client