This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer (raw, json) Hash identifier: U+3X/8XEBWYPnNtAsEKYbEOmgfp1S5+9dCTPkQ8R7MM= Subject key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4D145213AD25763A5D906ED55987A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57242 IP: 81.163.208.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:45:21:3a:d2:57:63:a5:d9:06:ed:55:98:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:b6:78:d0:d3:40:ad:4a:50:b5:25:4a:e3: 39:80:6e:0f:e8:c4:6d:24:69:df:8c:e9:1a:de:ab: c7:4e:98:9b:06:40:f5:7f:06:c8:62:8d:ef:4d:6b: 2b:a7:41:55:ad:bf:26:8a:a2:46:ab:d9:ed:bd:8b: b1:d1:51:72:65:cd:0a:4e:66:f4:4a:80:04:60:1d: 26:b4:ea:87:d8:c1:ac:b6:f3:9d:f5:54:1b:f0:f3: c6:50:a3:64:68:5e:e6:36:19:f7:b8:2a:99:de:31: a2:20:44:b7:83:de:f2:f7:1a:1a:48:02:f0:e9:c7: c1:66:8f:20:ba:e8:d5:1d:90:db:18:f6:16:67:5e: e4:02:fc:ab:82:f9:8b:53:c2:2b:9f:19:76:99:1a: 93:78:45:43:dd:55:67:40:a2:8c:fa:f3:9d:ec:67: ba:47:7f:b4:46:dd:c2:3d:b7:90:63:2c:0a:c4:d8: a3:c1:dd:86:a5:0b:b7:22:df:82:12:11:48:54:09: 4e:3f:b3:f8:0d:3a:b5:5d:91:a8:ac:5e:3a:3e:63: e0:73:7c:22:a1:32:e7:d9:74:c6:e1:9c:15:fb:e0: d3:6b:bf:14:a8:44:f5:c0:b2:5f:08:dd:d7:10:07: 4d:76:7f:f0:6e:ee:f6:8d:10:5c:77:60:ea:a0:41: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57242 Signature Algorithm: sha256WithRSAEncryption 98:a1:80:4d:ff:4d:93:30:0a:15:d3:08:c7:9b:ac:0a:d7:bc: 66:16:ca:2d:63:77:21:cd:9e:67:54:67:25:b7:ca:d9:f3:a6: d7:86:4e:ad:45:e0:9f:72:e4:09:5b:f2:93:bb:9b:fb:9c:97: 52:75:e2:f9:0c:b8:44:21:68:42:7e:7e:73:23:e9:df:8f:93: 2f:35:ab:7e:02:34:5e:96:5f:f1:b4:6a:aa:b3:b1:9a:2e:59: 3e:d1:f1:97:ae:c8:5a:6c:5e:27:1f:62:98:59:b3:53:93:80: 13:11:a8:d9:ee:15:b4:56:06:c2:40:f4:7b:61:17:ba:62:b8: 57:65:23:4b:27:83:cd:11:37:53:4e:5e:8f:c8:49:1a:32:c7: 82:06:08:30:1b:a9:89:d1:3e:ca:a3:49:b6:32:8b:9d:d4:8a: 68:1e:c8:62:e7:c6:31:83:bb:fa:40:13:a7:27:71:d8:f0:d5: f4:c9:7b:ff:18:3e:77:a9:fd:1f:d8:4f:70:6f:5f:84:a4:4f: b0:59:09:42:6c:69:47:06:ef:bf:5e:16:39:7d:c2:79:87:55: 7d:de:ea:e3:42:ed:a1:e9:0f:cd:f5:55:20:7f:89:c9:7e:1d: 32:ee:8a:c8:bc:7d:d0:52:72:bb:e3:31:fb:7e:10:02:f9:71: 81:41:84:ba -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pNFFITrSV2Ol2QbtVZh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmI0ZTA0YTBlZDM0NDExMmMxODUzY2FiMDlmNTJlMWNkOWFiYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNa2eNDTQK1KULUlSuM5gG4P6MRt JGnfjOka3qvHTpibBkD1fwbIYo3vTWsrp0FVrb8miqJGq9ntvYux0VFyZc0KTmb0 SoAEYB0mtOqH2MGstvOd9VQb8PPGUKNkaF7mNhn3uCqZ3jGiIES3g97y9xoaSALw 6cfBZo8guujVHZDbGPYWZ17kAvyrgvmLU8Irnxl2mRqTeEVD3VVnQKKM+vOd7Ge6 R3+0Rt3CPbeQYywKxNijwd2GpQu3It+CEhFIVAlOP7P4DTq1XZGorF46PmPgc3wi oTLn2XTG4ZwV++DTa78UqET1wLJfCN3XEAdNdn/wbu72jRBcd2DqoEGIewIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK+04EoO00QRLBhTyrCfUuHNmrryMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzE5ZjJl Ni0xYmYzLTRmN2EtODgxNy04MDk1ZjMyOTcxNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvMTlmMmU2 LTFiZjMtNGY3YS04ODE3LTgwOTVmMzI5NzE3OS8xL3I3VGdTZzdUUkJFc0dGUEtz SjlTNGMyYXV2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEUaPQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDfmjANBgkqhkiG9w0BAQsFAAOCAQEAmKGATf9NkzAKFdMIx5usCte8ZhbKLWN3 Ic2eZ1RnJbfK2fOm14ZOrUXgn3LkCVvyk7ub+5yXUnXi+Qy4RCFoQn5+cyPp34+T LzWrfgI0XpZf8bRqqrOxmi5ZPtHxl67IWmxeJx9imFmzU5OAExGo2e4VtFYGwkD0 e2EXumK4V2UjSyeDzRE3U05ej8hJGjLHggYIMBupidE+yqNJtjKLndSKaB7IYufG MYO7+kATpydx2PDV9Ml7/xg+d6n9H9hPcG9fhKRPsFkJQmxpRwbvv14WOX3CeYdV fd7q40LtoekPzfVVIH+JyX4dMu6KyLx90FJyu+Mx+34QAvlxgUGEug== -----END CERTIFICATE-----Generated at Mon Jan 26 01:28:58 2026 by rpki-client