This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer File: s7a21-XdDDKPbOr36enA0cuMHSI.cer (raw, json) Hash identifier: bMDmJHvxLDzqwWMSPCLSPLzEax1n7NYGGRN0IoqBITw= Subject key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364143694C2C87D942FB386EA6F6C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42079 IP: 193.109.52.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:41:43:69:4c:2c:87:d9:42:fb:38:6e:a6:f6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:4b:65:67:d0:4d:ed:ff:3d:ef:ff:2a:20: 98:02:ba:9e:b0:71:c5:16:85:c0:c1:71:c7:7e:26: c2:25:ff:db:db:ab:cd:f0:d0:aa:c1:f2:5d:d3:a9: a1:88:07:cc:80:c2:b9:68:4e:82:cd:3a:65:5d:d4: 90:0c:40:05:2b:de:32:e0:7d:07:cd:b8:48:e7:f6: 06:b2:80:03:da:47:f0:20:f7:8c:56:2e:cd:fb:29: c1:5d:12:9e:77:83:99:74:fc:ed:7d:a2:06:3d:f5: 22:aa:ed:e0:41:02:2e:92:04:67:30:26:03:1e:52: be:5d:97:99:6c:d4:e7:38:2b:6c:a9:9e:a2:4e:a2: a1:68:cb:ff:0d:23:45:77:6f:74:5b:5a:8e:69:08: 69:82:1f:b9:5a:55:10:0f:b9:79:ce:e0:0f:f0:6d: 83:40:e1:c3:34:54:8d:59:98:d3:47:49:62:38:5d: e5:7c:51:9e:84:b7:e9:88:72:0c:c8:33:a9:99:53: 56:b0:37:94:11:1c:10:4d:25:9a:25:61:15:a9:bc: ce:03:3b:44:e6:a0:3c:8b:b6:53:2e:e1:11:05:02: de:a6:c8:b5:68:8d:e2:18:b4:fe:1c:11:d9:34:7a: ac:a0:8b:8c:43:34:22:56:e9:c8:04:eb:b9:7f:41: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.52.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42079 Signature Algorithm: sha256WithRSAEncryption 20:7c:82:d4:ce:0c:49:31:cb:a5:41:ea:39:a4:f9:a6:c3:b2: fc:d9:8d:58:19:4e:79:a7:4b:6c:68:fd:7f:da:1f:3f:08:48: d8:fd:64:74:bd:16:ed:87:79:21:ca:3f:9d:9b:31:fb:aa:54: 77:e6:a6:0e:86:5d:4d:b3:37:dc:85:83:5a:bb:1b:73:d6:7b: d0:fc:8e:f3:cf:fa:c0:4b:50:be:24:9e:13:3a:79:ab:06:e1: f0:49:34:86:88:72:b7:7d:d1:38:bb:67:79:c6:c6:51:ce:0d: 7d:d1:54:86:5d:f2:1e:07:90:53:7a:b2:94:f3:06:96:6d:e1: 68:80:91:10:1d:6a:24:63:c1:40:1f:f0:1d:c5:3f:ba:0f:37: d8:56:78:64:9f:b5:8c:71:09:83:1b:70:8d:66:a8:bf:d3:0f: 66:d1:0d:51:c2:a0:5c:e9:4f:01:2b:b0:ec:0d:e9:39:d8:b1: 94:ee:11:dd:39:74:af:7f:de:52:78:97:82:77:8d:98:21:84: e8:2b:61:ba:f0:28:b3:7d:7e:c3:98:2b:c9:2c:5f:9d:f4:5f: 5b:4f:3f:64:68:56:39:6a:64:29:09:f8:5b:50:a3:c4:7d:89: 40:79:8e:cb:12:39:ae:64:70:88:32:68:b5:f1:8a:ef:13:f9: 76:48:1c:ee -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NkFDaUwsh9lC+zhupvbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I2YjZkN2U1ZGQwYzMyOGY2Y2VhZjdlOWU5YzBkMWNiOGMxZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIRLZWfQTe3/Pe//KiCYArqesHHF FoXAwXHHfibCJf/b26vN8NCqwfJd06mhiAfMgMK5aE6CzTplXdSQDEAFK94y4H0H zbhI5/YGsoAD2kfwIPeMVi7N+ynBXRKed4OZdPztfaIGPfUiqu3gQQIukgRnMCYD HlK+XZeZbNTnOCtsqZ6iTqKhaMv/DSNFd290W1qOaQhpgh+5WlUQD7l5zuAP8G2D QOHDNFSNWZjTR0liOF3lfFGehLfpiHIMyDOpmVNWsDeUERwQTSWaJWEVqbzOAztE 5qA8i7ZTLuERBQLepsi1aI3iGLT+HBHZNHqsoIuMQzQiVunIBOu5f0HDsQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLO2ttfl3Qwyj2zq9+npwNHLjB0iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzJkNzk0 Ni1kYjhiLTRhNTctYTcwYi0yMDcxNTQ2YjcwZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMmQ3OTQ2 LWRiOGItNGE1Ny1hNzBiLTIwNzE1NDZiNzBmOS8xL3M3YTIxLVhkRERLUGJPcjM2 ZW5BMGN1TUhTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwW00MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCkXzANBgkqhkiG9w0BAQsFAAOCAQEAIHyC1M4MSTHLpUHqOaT5psOy/NmNWBlO eadLbGj9f9ofPwhI2P1kdL0W7Yd5Ico/nZsx+6pUd+amDoZdTbM33IWDWrsbc9Z7 0PyO88/6wEtQviSeEzp5qwbh8Ek0hohyt33ROLtnecbGUc4NfdFUhl3yHgeQU3qy lPMGlm3haICREB1qJGPBQB/wHcU/ug832FZ4ZJ+1jHEJgxtwjWaov9MPZtENUcKg XOlPASuw7A3pOdixlO4R3Tl0r3/eUniXgneNmCGE6CthuvAos31+w5grySxfnfRf W08/ZGhWOWpkKQn4W1CjxH2JQHmOyxI5rmRwiDJotfGK7xP5dkgc7g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:14 2026 by rpki-client