This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer (raw, json) Hash identifier: MWVi3YRTkowJnnl47Kf9Cphhkh+M63IVEE/nN6OYYdI= Subject key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A0BD93317815A978E4E6B06DBCBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31438 IP: 83.137.64.0/21 IP: 212.89.192.0/19 IP: 2a0d:5f00::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a0:bd:93:31:78:15:a9:78:e4:e6:b0:6d:bc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:8e:c7:52:db:0c:91:15:c0:9b:70:9d:d6: 84:bd:9a:83:db:aa:18:bc:c2:39:20:f7:72:7a:8b: 4c:87:5f:f9:70:e8:c2:a8:c0:7c:e3:3b:ed:c3:20: cc:0e:5c:ea:e7:06:3b:43:41:b6:95:81:0a:cb:c0: 29:49:60:f7:e6:b8:70:72:4c:20:1c:bf:8d:19:58: 6a:ed:9d:60:21:e7:45:40:30:06:32:36:ca:3a:fd: 90:30:ba:d4:5b:31:fb:a0:3e:60:b0:ad:8e:05:9d: 6b:5f:ba:93:77:5a:b5:cc:53:4c:2f:71:21:8a:c0: a0:58:e3:b3:9b:bb:c2:c0:1e:7d:48:fd:4b:e9:f3: 65:c4:03:c8:57:46:87:c5:d1:bc:a6:61:23:ce:bc: cd:54:db:33:8b:1b:4b:29:f2:af:10:76:27:02:16: ef:2e:14:da:38:d6:6d:60:0b:62:0d:d1:79:7a:7c: 21:81:b4:f6:a6:8d:8c:72:c3:51:9e:17:e2:2c:a6: bd:31:6c:71:c1:14:04:52:f8:6a:af:c9:db:15:5f: 91:03:6d:aa:52:15:06:c8:2b:6c:34:b9:ce:78:e4: 8b:f0:b5:14:27:46:43:4a:fa:75:a1:53:c7:bc:99: 11:52:dc:09:8e:bb:ed:53:49:18:78:54:2a:0f:47: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.64.0/21 212.89.192.0/19 IPv6: 2a0d:5f00::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31438 Signature Algorithm: sha256WithRSAEncryption 45:33:67:6c:87:eb:58:d6:09:4d:13:1a:2b:51:23:85:f8:35: 26:56:8b:92:44:a9:8b:9b:bb:4b:65:c9:0b:aa:35:2c:ba:70: eb:a0:f3:a0:db:df:ae:a2:e1:50:20:0c:7e:74:07:5c:44:c0: 16:b5:b4:01:18:db:67:d5:6f:8a:32:20:99:65:5b:51:1f:a4: b6:f2:75:f6:55:47:45:90:1e:95:82:d7:fa:dd:66:fd:e5:35: 1d:8a:a0:ea:f0:b5:43:95:94:ec:87:fa:57:32:d5:2d:54:ec: 78:a7:32:3d:9e:39:c5:8f:3a:af:51:98:47:50:e0:56:82:68: 8c:b4:b5:22:b1:d3:3d:24:21:b5:a3:65:d3:ef:cd:09:67:42: 97:31:80:64:25:36:61:c2:ad:a8:7a:58:0b:2d:be:8f:fb:ed: 4b:59:fe:3b:61:4a:ce:47:07:9d:14:30:97:91:12:ad:5f:e7: 97:77:ef:8f:d6:bd:8b:bb:47:60:c5:aa:d5:e2:93:28:49:3d: e3:2c:25:ba:bd:b5:ac:9b:18:18:d8:35:6b:b4:1f:9c:62:d2: 2a:7d:80:3d:e6:02:9c:a1:7d:87:69:75:69:f6:df:1d:d3:eb: 9b:47:0d:ad:18:8d:97:6b:90:c0:4f:ee:35:6c:23:54:1f:6c: 22:e9:1d:7a -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/8qC9kzF4Fal45Oawbby+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2JjZDc3MGY4ZWEzZDQ4ZWNiYjRjM2VhYjg5NWY0MjJmZmFjOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimGOx1LbDJEVwJtwndaEvZqD26oY vMI5IPdyeotMh1/5cOjCqMB84zvtwyDMDlzq5wY7Q0G2lYEKy8ApSWD35rhwckwg HL+NGVhq7Z1gIedFQDAGMjbKOv2QMLrUWzH7oD5gsK2OBZ1rX7qTd1q1zFNML3Eh isCgWOOzm7vCwB59SP1L6fNlxAPIV0aHxdG8pmEjzrzNVNszixtLKfKvEHYnAhbv LhTaONZtYAtiDdF5enwhgbT2po2McsNRnhfiLKa9MWxxwRQEUvhqr8nbFV+RA22q UhUGyCtsNLnOeOSL8LUUJ0ZDSvp1oVPHvJkRUtwJjrvtU0kYeFQqD0cQGQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFEe813D46j1I7LtMPquJX0Iv+skNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzk3YTVj OS02YjI4LTRjNjEtOTZlMS1hNmQwMDAyMDNmYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTdhNWM5 LTZiMjgtNGM2MS05NmUxLWE2ZDAwMDIwM2ZiNS8xL1I3elhjUGpxUFVqc3Uwdy1x NGxmUWlfNnlRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDU4lAAwQF1FnAMA0EAgACMAcDBQIqDV8AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnrOMA0GCSqGSIb3DQEBCwUAA4IBAQBFM2ds h+tY1glNExorUSOF+DUmVouSRKmLm7tLZckLqjUsunDroPOg29+uouFQIAx+dAdc RMAWtbQBGNtn1W+KMiCZZVtRH6S28nX2VUdFkB6Vgtf63Wb95TUdiqDq8LVDlZTs h/pXMtUtVOx4pzI9njnFjzqvUZhHUOBWgmiMtLUisdM9JCG1o2XT780JZ0KXMYBk JTZhwq2oelgLLb6P++1LWf47YUrORwedFDCXkRKtX+eXd++P1r2Lu0dgxarV4pMo ST3jLCW6vbWsmxgY2DVrtB+cYtIqfYA95gKcoX2HaXVp9t8d0+ubRw2tGI2Xa5DA T+41bCNUH2wi6R16 -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:57 2026 by rpki-client