This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer (raw, json) Hash identifier: AHFsqbcgabIjNGcKmOi1XcBH0Hm8YEirE2lsPupSSSU= Subject key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F27629040D02DE5F8E84500A5EE7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57834 IP: 185.197.124.0/22 IP: 2a0a:7940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:62:90:40:d0:2d:e5:f8:e8:45:00:a5:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:7f:29:93:2a:94:8e:0b:b7:d4:b1:59:fd: 41:46:01:7c:84:96:2f:26:04:4b:c0:2f:e0:92:ed: 66:e4:1d:dd:44:78:e8:e4:94:6b:fc:79:68:e6:23: 6d:d1:24:c2:d0:05:73:22:e6:6d:95:c8:c4:b1:2c: 24:a4:10:70:a2:cc:6b:a9:fb:58:05:6e:bb:c6:b8: f5:e3:28:8d:d4:e7:e6:aa:17:ab:51:9a:f8:72:d2: df:e8:68:fc:77:b2:b9:d6:18:66:cd:55:f7:3a:1a: 04:d7:85:00:05:b2:43:37:44:5f:ad:6d:0e:af:12: 98:b9:b4:f9:1a:f4:0c:c0:a9:9e:43:21:50:a9:82: 2b:a2:7c:d5:82:92:c4:f3:49:43:b2:92:8e:25:6d: 40:7f:4f:45:e4:1d:22:55:4f:98:d7:0a:71:ee:e1: a6:f0:14:3f:31:7a:a6:c6:2a:db:60:85:5c:60:49: 46:f4:da:4d:aa:82:47:cd:04:0e:d9:cd:f8:41:47: 9f:c4:9f:01:a3:cf:d1:14:bf:e3:45:d0:5d:2d:99: 2d:22:ab:da:40:6c:f1:f0:85:59:a3:b5:0a:b8:f9: ff:fa:6d:ab:3b:19:fa:f7:27:d3:07:fd:2d:fd:34: f6:ad:32:25:de:d6:be:e9:a8:65:59:97:2a:06:ef: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.124.0/22 IPv6: 2a0a:7940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57834 Signature Algorithm: sha256WithRSAEncryption 90:27:a7:9a:e2:c0:d4:e4:4a:b4:fa:60:ad:19:e6:9c:dd:8a: 4b:c3:b4:e2:13:39:e0:9f:92:70:bc:37:5d:8f:96:ef:5f:0e: 77:f6:f5:a7:bc:89:f3:b2:3b:24:bb:0c:48:17:e4:8e:58:89: 98:3e:2b:fa:c6:cd:e7:a6:69:2a:c8:b3:8f:ca:a6:8d:b9:a6: bb:19:0c:9a:0c:a2:d5:25:a5:f8:70:34:5a:b4:4f:32:ee:eb: ab:78:18:82:7f:84:dd:4e:d8:5a:d4:7e:10:f6:62:bb:57:96: 22:fc:88:78:9d:e1:7f:0f:c3:88:63:cd:fe:4a:a5:d6:e2:a7: ba:14:54:04:5e:10:c0:64:e7:01:d8:c4:ed:eb:72:61:29:95: 42:77:f6:6c:18:7d:ed:b0:ca:54:d7:7c:b7:fb:70:38:61:21: 26:83:07:a8:ec:14:03:23:21:a4:ad:a1:86:67:87:38:47:9e: 29:5e:5b:72:5b:6c:fc:86:1f:8c:7a:28:ab:7b:06:50:7f:b1: 77:56:2c:f2:c2:d0:51:50:40:8c:6e:d1:ee:b0:06:ac:96:14: db:fa:32:b3:77:3a:ea:28:3e:fd:6a:27:52:be:74:ca:a8:ad: 9d:cb:6b:d3:b5:86:f7:d4:57:c6:9a:cc:10:08:a2:21:06:ea: 4f:27:fe:19 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fydikEDQLeX46EUApe58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmJhMDQzZTFjNGI1MjQ0N2E4ZTM2N2JiYzEzMDc1MTlmYTVmYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzF/KZMqlI4Lt9SxWf1BRgF8hJYv JgRLwC/gku1m5B3dRHjo5JRr/Hlo5iNt0STC0AVzIuZtlcjEsSwkpBBwosxrqftY BW67xrj14yiN1OfmqherUZr4ctLf6Gj8d7K51hhmzVX3OhoE14UABbJDN0RfrW0O rxKYubT5GvQMwKmeQyFQqYIronzVgpLE80lDspKOJW1Af09F5B0iVU+Y1wpx7uGm 8BQ/MXqmxirbYIVcYElG9NpNqoJHzQQO2c34QUefxJ8Bo8/RFL/jRdBdLZktIqva QGzx8IVZo7UKuPn/+m2rOxn69yfTB/0t/TT2rTIl3ta+6ahlWZcqBu/SJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFM+6BD4cS1JEeo42e7wTB1GfpfrgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzNmMzNk OC1jY2ViLTQ1MDYtYTJlZi1jMGNhODBhMDVlMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvM2YzM2Q4 LWNjZWItNDUwNi1hMmVmLWMwY2E4MGEwNWUyYS8xL3o3b0VQaHhMVWtSNmpqWjd2 Qk1IVVotbC11QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucV8MA0EAgACMAcDBQAqCnlAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDh6jANBgkqhkiG9w0BAQsFAAOCAQEAkCenmuLA1ORK tPpgrRnmnN2KS8O04hM54J+ScLw3XY+W718Od/b1p7yJ87I7JLsMSBfkjliJmD4r +sbN56ZpKsizj8qmjbmmuxkMmgyi1SWl+HA0WrRPMu7rq3gYgn+E3U7YWtR+EPZi u1eWIvyIeJ3hfw/DiGPN/kql1uKnuhRUBF4QwGTnAdjE7etyYSmVQnf2bBh97bDK VNd8t/twOGEhJoMHqOwUAyMhpK2hhmeHOEeeKV5bclts/IYfjHooq3sGUH+xd1Ys 8sLQUVBAjG7R7rAGrJYU2/oys3c66ig+/WonUr50yqitnctr07WG99RXxprMEAii IQbqTyf+GQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:43 2026 by rpki-client