This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer File: 7512O0ngJKe2oZ6vffuYkRqclMg.cer (raw, json) Hash identifier: Y9CKZFgYsR68EoJvXwnCAUei2brD/EIrOYpbTfOac4o= Subject key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38ABE26DA869BAA2D94887C9091F91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212798 IP: 5.182.20.0/22 IP: 2a0e:b800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ab:e2:6d:a8:69:ba:a2:d9:48:87:c9:09:1f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:99:c0:16:74:c9:5d:3d:7c:08:24:28:8b: ae:c0:94:20:25:16:10:32:fa:88:4e:1a:b6:2c:5b: dd:a0:c1:cc:69:5e:0e:fb:9d:64:b1:d9:0e:29:45: e1:3e:10:88:eb:da:01:fd:e7:5a:1e:db:d3:a0:e3: 1f:5f:d9:2a:6e:ba:b3:73:8e:19:6d:9f:50:31:b3: 63:d4:b6:fa:5f:53:93:eb:c4:42:a2:c4:67:63:ed: 16:9e:83:de:cc:87:62:34:29:f2:9c:d2:d4:f0:04: c4:3b:71:0b:c7:9b:87:dc:fd:eb:6e:6a:28:61:05: 53:a6:f9:c1:83:8c:1a:f1:0c:e7:12:39:9d:11:80: ef:12:7c:48:0d:ab:af:e5:b4:22:bd:5c:f7:cc:10: b1:25:43:1a:a5:49:80:89:c3:3e:0d:b6:6a:da:5e: cd:94:49:5c:09:88:71:4e:cd:f2:b9:5c:99:8a:7c: f2:f6:42:1e:97:68:2a:f6:31:26:a3:44:63:ef:40: d1:2e:87:0d:74:a8:1d:2a:a9:1b:a5:65:92:8e:96: 86:b9:7c:ac:a8:ee:1a:be:a6:ab:c0:6b:ab:6d:fd: a2:2f:75:6f:63:89:ac:3e:40:c8:99:31:b5:9e:5c: cf:61:83:45:69:e8:72:83:a4:18:3b:ab:70:3f:c6: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.20.0/22 IPv6: 2a0e:b800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212798 Signature Algorithm: sha256WithRSAEncryption 43:93:95:4f:a2:53:67:4f:40:11:42:4e:9b:50:20:e8:ed:30: 90:4f:2a:f6:cd:e0:39:fd:7d:57:3b:41:99:65:1c:eb:7c:0b: 79:94:c5:be:75:10:31:b4:1f:96:25:d5:b7:a4:0b:af:c9:a8: 9e:7f:78:03:85:80:60:26:36:9d:cc:ec:b2:f5:cb:78:5b:63: 3a:93:ab:4d:73:18:64:4e:75:d6:c4:63:98:50:73:51:4f:ac: bc:24:d9:30:80:02:57:ed:83:e3:08:1c:07:ce:07:bf:0b:26: b4:dd:09:2f:4d:ee:9b:83:f9:3d:78:be:04:fd:b0:82:32:1e: 1f:b6:67:c7:17:47:e0:37:bb:89:26:d0:e0:41:34:51:cb:c6: d9:b2:ab:0b:01:eb:31:c0:1b:b2:ce:e7:88:05:95:30:bd:1d: 07:63:52:bc:d4:6d:42:e6:f3:b7:71:be:b2:b9:c9:c4:c0:76: cd:a2:6b:92:62:a2:08:29:b0:98:56:15:24:94:b9:2c:3b:88: 7a:a9:ed:79:ce:07:3a:93:82:36:2e:12:15:91:a8:c5:0d:79: 80:f7:e9:ec:77:c5:82:6d:94:7c:e2:64:46:fa:91:61:ea:2d: 9b:da:14:ec:a9:3e:78:d9:90:fc:76:9d:5e:7c:58:96:93:6d: 28:56:e8:3b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OKvibahpuqLZSIfJCR+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjlkNzYzYjQ5ZTAyNGE3YjZhMTllYWY3ZGZiOTg5MTFhOWM5NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uZwBZ0yV09fAgkKIuuwJQgJRYQ MvqIThq2LFvdoMHMaV4O+51ksdkOKUXhPhCI69oB/edaHtvToOMfX9kqbrqzc44Z bZ9QMbNj1Lb6X1OT68RCosRnY+0WnoPezIdiNCnynNLU8ATEO3ELx5uH3P3rbmoo YQVTpvnBg4wa8QznEjmdEYDvEnxIDauv5bQivVz3zBCxJUMapUmAicM+DbZq2l7N lElcCYhxTs3yuVyZinzy9kIel2gq9jEmo0Rj70DRLocNdKgdKqkbpWWSjpaGuXys qO4avqarwGurbf2iL3VvY4msPkDImTG1nlzPYYNFaehyg6QYO6twP8Yx/wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO+ddjtJ4CSntqGer337mJEanJTIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzU5Y2Y4 ZS1kYzY3LTQzZmItYmQzNy0wODcwZTY1OTY0NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNTljZjhl LWRjNjctNDNmYi1iZDM3LTA4NzBlNjU5NjQ1Yi8xLzc1MTJPMG5nSktlMm9aNnZm ZnVZa1JxY2xNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbYUMA0EAgACMAcDBQMqDrgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/PjANBgkqhkiG9w0BAQsFAAOCAQEAQ5OVT6JTZ09A EUJOm1Ag6O0wkE8q9s3gOf19VztBmWUc63wLeZTFvnUQMbQfliXVt6QLr8monn94 A4WAYCY2nczssvXLeFtjOpOrTXMYZE511sRjmFBzUU+svCTZMIACV+2D4wgcB84H vwsmtN0JL03um4P5PXi+BP2wgjIeH7ZnxxdH4De7iSbQ4EE0UcvG2bKrCwHrMcAb ss7niAWVML0dB2NSvNRtQubzt3G+srnJxMB2zaJrkmKiCCmwmFYVJJS5LDuIeqnt ec4HOpOCNi4SFZGoxQ15gPfp7HfFgm2UfOJkRvqRYeotm9oU7Kk+eNmQ/HadXnxY lpNtKFboOw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:52:25 2026 by rpki-client