This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.cer (raw, json) Hash identifier: FbdD3FMrm45fG7G79JkVnqffLN2UmgY9o6yrZxvd5E0= Subject key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834AF5307D24EC1BD68ED6B1B78E465 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39142 AS: 51262 IP: 185.147.8.0/22 IP: 193.17.24.0/24 IP: 193.17.26.0/24 IP: 193.17.55.0/24 IP: 193.17.64.0/24 IP: 193.84.120.0/22 IP: 195.191.240.0/23 IP: 2a0a:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:af:53:07:d2:4e:c1:bd:68:ed:6b:1b:78:e4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:97:b8:71:ec:96:4a:f6:a6:25:31:49:e1: 15:00:0d:2a:a8:e4:21:bb:b4:b2:8a:d5:3e:74:a5: 04:d2:e1:19:4e:e2:c0:cd:ac:13:bb:4b:ca:f3:cf: 0a:18:ea:1c:cc:f2:00:b2:d9:48:db:4c:35:5c:bd: f5:b3:91:20:6e:08:4d:93:87:26:3c:1e:c9:98:0e: 6e:b0:83:cc:6f:97:54:6b:8e:14:90:a5:c6:e8:fc: a1:71:fc:48:8b:59:ec:f1:83:e9:49:58:34:7f:b3: e9:fd:3d:81:96:9e:21:a2:8e:19:37:f2:72:3a:62: e5:b8:c5:5d:39:fa:c2:9a:36:87:d6:1b:2c:6d:c1: 42:62:ae:ff:b2:c1:a4:32:a3:51:ae:1b:e3:ce:2b: 10:39:2d:d3:58:d9:2f:a7:61:67:5a:e0:20:e4:ff: 02:7b:e7:57:06:c3:3a:b5:47:c0:bd:0b:9d:d0:02: 5d:67:40:69:f8:85:66:0a:2e:88:f6:e0:6e:dc:e1: ed:9d:16:64:b8:ac:4e:bc:79:fb:c4:7c:8a:91:5f: a3:88:aa:fd:cf:a6:24:d5:6f:67:3d:61:da:a0:42: 5c:29:94:ca:f2:80:89:bb:54:63:80:c5:ec:1a:58: 18:1a:ee:72:e8:aa:25:f8:7e:26:c2:7c:dd:d0:5c: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.8.0/22 193.17.24.0/24 193.17.26.0/24 193.17.55.0/24 193.17.64.0/24 193.84.120.0/22 195.191.240.0/23 IPv6: 2a0a:dc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39142 51262 Signature Algorithm: sha256WithRSAEncryption 13:43:c5:ae:a7:1d:b1:aa:99:1f:e7:93:d6:8c:14:a8:b2:ef: 70:64:57:d7:82:83:73:7c:31:29:c1:c2:26:84:f1:bd:30:07: 6f:c5:e3:75:52:26:32:17:94:bd:8f:63:b8:89:6e:6b:d8:f5: e1:8d:af:43:40:b8:2b:7e:f5:fa:68:5e:c3:71:48:03:6c:4c: dd:67:ef:fe:7e:2a:69:10:c2:ab:51:83:c2:30:11:43:8e:61: 72:2f:18:43:b2:90:b5:6e:99:4a:c6:2e:3f:82:50:ec:ae:c4: cb:ef:93:e8:e4:aa:5c:65:51:d7:24:9e:41:bb:d3:46:03:19: 54:04:8e:22:cb:76:c6:ee:2e:23:9d:5c:0d:a3:4d:6a:b8:00: 21:31:41:50:7b:9a:d5:dd:9b:ca:83:ff:22:5e:d8:1e:66:13: da:51:53:8e:b5:73:cf:4d:62:3c:f1:ed:d7:d0:8d:d5:4f:7e: bb:d8:e3:dd:00:7a:71:1c:a5:0e:5a:c0:cc:0c:c1:29:51:31: 79:a5:5c:00:1d:69:d1:e4:c0:71:f4:de:bc:47:1c:3e:a2:99: f1:cd:53:32:a6:c2:3e:f4:5f:a2:f6:cb:c7:53:db:7b:e2:93: 8a:ac:7a:f3:6c:5b:47:6b:83:ed:28:33:3f:dd:02:56:f2:dd: 9b:17:10:96 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt4NK9TB9JOwb1o7WsbeORlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmU2OTE0MjdjNmU0MTgwNmY2Y2ViMWUyMThhN2RjNjMyMGZkZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWXuHHslkr2piUxSeEVAA0qqOQh u7SyitU+dKUE0uEZTuLAzawTu0vK888KGOoczPIAstlI20w1XL31s5EgbghNk4cm PB7JmA5usIPMb5dUa44UkKXG6PyhcfxIi1ns8YPpSVg0f7Pp/T2Blp4hoo4ZN/Jy OmLluMVdOfrCmjaH1hssbcFCYq7/ssGkMqNRrhvjzisQOS3TWNkvp2FnWuAg5P8C e+dXBsM6tUfAvQud0AJdZ0Bp+IVmCi6I9uBu3OHtnRZkuKxOvHn7xHyKkV+jiKr9 z6Yk1W9nPWHaoEJcKZTK8oCJu1RjgMXsGlgYGu5y6Kol+H4mwnzd0Fwl0wIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFO/mkUJ8bkGAb2zrHiGKfcYyD97tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzA1OTk3 NS1lZjkwLTQyMWItOGFmMy0zODE0YzU3ZmU5YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMDU5OTc1 LWVmOTAtNDIxYi04YWYzLTM4MTRjNTdmZTliYi8xLzctYVJRbnh1UVlCdmJPc2VJ WXA5eGpJUDN1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCuZMIAwQAwREYAwQAwREaAwQAwRE3AwQAwRFA AwQCwVR4AwQBw7/wMA0EAgACMAcDBQMqCtwAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwCY5gIDAMg+MA0GCSqGSIb3DQEBCwUAA4IBAQATQ8Wupx2xqpkf55PWjBSo su9wZFfXgoNzfDEpwcImhPG9MAdvxeN1UiYyF5S9j2O4iW5r2PXhja9DQLgrfvX6 aF7DcUgDbEzdZ+/+fippEMKrUYPCMBFDjmFyLxhDspC1bplKxi4/glDsrsTL75Po 5KpcZVHXJJ5Bu9NGAxlUBI4iy3bG7i4jnVwNo01quAAhMUFQe5rV3ZvKg/8iXtge ZhPaUVOOtXPPTWI88e3X0I3VT3672OPdAHpxHKUOWsDMDMEpUTF5pVwAHWnR5MBx 9N68Rxw+opnxzVMypsI+9F+i9svHU9t74pOKrHrzbFtHa4PtKDM/3QJW8t2bFxCW -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:06 2026 by rpki-client