This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer (raw, json) Hash identifier: 8oEWUPBqMgvtbr7fyEi3NwJ6qrfpz2T/AHi2+JZBQdw= Subject key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30FB3666EC4916CE4DB3A8E8C55A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206926 IP: 46.228.112.0/20 IP: 194.1.145.0/24 IP: 2a12:afc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:b3:66:6e:c4:91:6c:e4:db:3a:8e:8c:55:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:d0:63:62:f3:e7:6e:05:2c:d3:d9:6a:54: 86:4d:00:f4:f5:c3:db:e1:ff:d4:21:02:30:ec:9c: 4a:0e:7f:47:09:f9:27:9d:01:2b:a5:99:ae:3b:21: c7:00:ea:63:31:ff:90:17:be:b5:6c:7d:33:8d:07: 89:f1:3f:bf:a3:a9:1a:b9:48:83:cf:85:60:b5:97: 41:9d:ad:06:4e:8b:fa:75:ad:ec:74:bf:0d:0f:b2: 25:d0:7b:32:4b:39:35:4d:ef:eb:23:79:14:09:8a: fe:69:f0:2d:1c:35:5f:99:95:5c:ce:a8:ba:ce:53: 2a:b3:55:84:25:7e:ca:a0:3f:bc:b7:82:91:36:e6: 76:c1:6f:87:f7:a0:4e:54:40:cf:94:74:1f:75:be: 18:fa:7d:db:c6:ff:44:83:01:dc:5f:c2:8d:9b:4c: 20:32:63:b2:79:12:51:a7:fd:f8:f4:10:57:17:96: 62:0d:ea:43:f9:52:fa:4c:cc:94:84:c6:19:0f:93: 3e:c4:c9:fc:d8:e8:6c:e9:38:f1:fc:21:b7:18:32: ae:65:7b:ac:b7:b5:0d:86:fd:1e:9e:a5:1a:60:63: 08:a6:49:c6:2e:98:14:c0:de:f7:7b:61:59:2a:4b: f8:f3:8b:a4:7f:7f:6f:c2:d1:5f:14:0a:7a:c1:f3: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.112.0/20 194.1.145.0/24 IPv6: 2a12:afc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206926 Signature Algorithm: sha256WithRSAEncryption ab:96:c6:49:ee:79:73:a2:79:3e:a3:7d:6b:11:34:89:42:5f: ca:14:31:21:5e:73:40:92:2a:46:25:75:8b:72:cf:e8:d2:83: 88:35:8f:e4:db:59:12:dd:84:07:07:f3:7f:90:bf:02:0c:cb: 6b:40:06:86:3c:0e:29:4d:cd:7d:0e:33:83:e4:d5:38:d5:93: 8e:5b:a1:6a:ce:b3:6c:3a:ff:a7:ad:e5:a0:ee:f2:20:43:c2: d9:96:08:ae:bf:7f:5b:06:10:77:e1:2c:fe:61:a8:7d:b7:87: 5f:b2:45:3c:32:ca:c2:65:2a:8c:8c:5e:c0:d0:65:5e:cd:e3: 33:d1:33:24:ce:ac:11:da:89:d0:8e:f4:22:fa:9c:a8:76:b2: d6:de:15:64:96:90:40:83:6d:f6:49:24:3c:62:46:21:64:7f: a0:3b:40:c6:21:18:7c:b6:57:d8:52:ad:ed:6c:0f:1a:a1:c2: 6d:0c:4f:99:70:7e:9e:51:3b:79:8d:2d:af:83:a6:50:23:c4: dd:0c:f7:cd:dd:aa:0f:c3:b7:31:e7:23:7e:30:04:f5:f8:fc: 1f:a9:e8:9f:b9:ff:2a:fd:39:f3:2e:38:4d:5d:75:14:80:d1: 0f:5b:06:1c:ef:99:72:bc:19:51:b7:39:29:91:a6:40:14:48: f6:5c:3a:44 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4ow+zZm7EkWzk2zqOjFWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmUxNTM0MWQyYWZjNmE4NTdhNTg0MTk5ZmM3ZmIwN2MxNzAxZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjajQY2Lz524FLNPZalSGTQD09cPb 4f/UIQIw7JxKDn9HCfknnQErpZmuOyHHAOpjMf+QF761bH0zjQeJ8T+/o6kauUiD z4VgtZdBna0GTov6da3sdL8ND7Il0HsySzk1Te/rI3kUCYr+afAtHDVfmZVczqi6 zlMqs1WEJX7KoD+8t4KRNuZ2wW+H96BOVEDPlHQfdb4Y+n3bxv9EgwHcX8KNm0wg MmOyeRJRp/349BBXF5ZiDepD+VL6TMyUhMYZD5M+xMn82Ohs6Tjx/CG3GDKuZXus t7UNhv0enqUaYGMIpknGLpgUwN73e2FZKkv484ukf39vwtFfFAp6wfMtdQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFO/hU0HSr8aoV6WEGZ/H+wfBcB/GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzgxZTk0 NS03Njk2LTQxNmYtYWYyZi02NWIwNzMzZmVkZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvODFlOTQ1 LTc2OTYtNDE2Zi1hZjJmLTY1YjA3MzNmZWRkMy8xLzctRlRRZEt2eHFoWHBZUVpu OGY3QjhGd0g4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQELuRwAwQAwgGRMA0EAgACMAcDBQMqEq/AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoTjANBgkqhkiG9w0BAQsFAAOCAQEAq5bG Se55c6J5PqN9axE0iUJfyhQxIV5zQJIqRiV1i3LP6NKDiDWP5NtZEt2EBwfzf5C/ AgzLa0AGhjwOKU3NfQ4zg+TVONWTjluhas6zbDr/p63loO7yIEPC2ZYIrr9/WwYQ d+Es/mGofbeHX7JFPDLKwmUqjIxewNBlXs3jM9EzJM6sEdqJ0I70IvqcqHay1t4V ZJaQQINt9kkkPGJGIWR/oDtAxiEYfLZX2FKt7WwPGqHCbQxPmXB+nlE7eY0tr4Om UCPE3Qz3zd2qD8O3MecjfjAE9fj8H6non7n/Kv058y44TV11FIDRD1sGHO+ZcrwZ Ubc5KZGmQBRI9lw6RA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:43:56 2026 by rpki-client