This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer File: 7DpjPvLAglGlhgNWLlaqbvqT7CU.cer (raw, json) Hash identifier: JrybI7Pp469BssrGYkKmY0dxtu0BWYJU7Wzry52Eo64= Subject key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F853719A67159D26008C92C4FA484D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15975 AS: 25586 IP: 37.8.0.0/17 IP: 82.102.192.0/18 IP: 82.205.0.0/17 IP: 85.113.96.0/19 IP: 86.107.16.0/22 IP: 87.252.108.0/22 IP: 89.239.32.0/20 IP: 94.26.112.0/20 IP: 109.232.162.0/23 IP: 147.189.176.0/20 IP: 176.65.12.0/22 IP: 185.40.192.0/22 IP: 185.90.242.0/24 IP: 185.138.132.0/22 IP: 185.171.132.0/22 IP: 188.209.208.0/22 IP: 188.215.100.0/22 IP: 194.169.121.0 -- 194.169.123.255 IP: 199.204.215.0/24 IP: 199.250.128.0/19 IP: 212.33.96.0/19 IP: 212.106.64.0/19 IP: 217.21.0.0/20 IP: 217.66.224.0/19 IP: 217.78.48.0/20 IP: 2a01:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:37:19:a6:71:59:d2:60:08:c9:2c:4f:a4:84:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:8b:4d:90:79:87:02:ff:b4:bd:0c:d1:37: 83:ee:ea:97:c7:2d:8e:66:1d:b6:90:d8:1a:9b:c2: 2e:b3:4a:14:3c:d0:e4:bf:3f:06:e4:21:eb:60:23: bc:b5:a9:f0:a6:75:5b:82:98:bc:f1:d6:93:42:98: e0:89:bb:28:85:1b:ea:94:8b:51:27:7c:62:b0:33: 90:76:ef:b6:79:8c:33:3c:42:54:dc:cd:64:3f:0d: 0c:de:0e:6c:87:e6:88:63:87:05:a0:d3:4a:f0:17: 9e:b9:80:d2:0e:fe:5c:d6:43:87:14:1b:c6:6a:3c: 57:e4:55:3a:0e:47:06:ca:49:46:e7:26:c9:56:d6: ed:2a:5c:61:6d:6f:e5:4c:91:90:ae:d4:ed:7c:38: 8a:4d:d7:43:11:75:2e:ea:ac:5b:bb:33:57:26:fe: dc:02:93:aa:91:31:89:62:c2:45:db:fd:4e:ce:2e: eb:f8:3f:0b:bb:3f:94:f0:fc:d5:a5:c8:95:b1:01: d5:c3:65:6e:24:fc:75:22:12:f1:ba:a4:29:7e:ea: c0:53:47:ca:ce:ea:85:b1:56:54:6e:92:5b:16:07: 92:77:c3:4e:7e:d9:9c:18:a1:17:31:4a:12:f9:c0: 27:3d:05:f5:f0:19:59:ba:97:80:7c:41:2b:40:35: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.8.0.0/17 82.102.192.0/18 82.205.0.0/17 85.113.96.0/19 86.107.16.0/22 87.252.108.0/22 89.239.32.0/20 94.26.112.0/20 109.232.162.0/23 147.189.176.0/20 176.65.12.0/22 185.40.192.0/22 185.90.242.0/24 185.138.132.0/22 185.171.132.0/22 188.209.208.0/22 188.215.100.0/22 194.169.121.0-194.169.123.255 199.204.215.0/24 199.250.128.0/19 212.33.96.0/19 212.106.64.0/19 217.21.0.0/20 217.66.224.0/19 217.78.48.0/20 IPv6: 2a01:7f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15975 25586 Signature Algorithm: sha256WithRSAEncryption 0d:78:4d:90:7a:60:74:b9:12:b5:c3:a8:88:f1:b1:4b:09:f4: 8a:7e:9b:5b:25:cb:d7:17:1f:d3:d2:18:2b:4c:64:1f:ee:f3: 55:f9:44:3b:0b:ff:70:c2:32:4a:fa:0b:54:af:26:3f:f8:e5: 8a:46:8b:62:1d:e4:10:0d:4c:c7:65:94:75:e4:11:21:2d:09: cb:23:f9:df:e0:99:4d:7f:cc:f6:3a:e1:e3:a7:2c:fc:0d:ff: 94:cb:c0:34:fa:5c:65:63:b5:ad:46:bd:d9:5a:3d:c6:64:22: cf:83:b8:f5:b2:2a:39:e9:ef:95:55:8b:44:d9:2d:99:89:35: c4:51:8e:60:ac:88:11:fd:55:ae:3a:6b:e2:79:26:56:69:92: dd:a3:4c:cb:24:3e:82:ce:42:59:10:51:5f:5a:cf:12:00:c7: 12:eb:5c:1e:94:ef:2e:f4:44:99:c4:5e:a0:aa:63:0e:51:39: 93:a4:db:cb:f6:9d:f0:ef:45:fd:8b:e5:22:c4:00:ca:59:a9: 1d:c1:92:34:d0:c2:5a:68:7a:d5:5f:dc:80:06:4b:cc:57:35: d2:09:12:eb:41:18:61:94:1f:a0:65:a8:37:c8:16:5a:55:ca: 96:21:9f:32:60:51:44:ab:6e:24:15:41:a2:da:15:d5:77:96: 5b:14:94:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISAZt/hTcZpnFZ0mAIySxPpITTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNhNjMzZWYyYzA4MjUxYTU4NjAzNTYyZTU2YWE2ZWZhOTNlYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxCLTZB5hwL/tL0M0TeD7uqXxy2O Zh22kNgam8Ius0oUPNDkvz8G5CHrYCO8tanwpnVbgpi88daTQpjgibsohRvqlItR J3xisDOQdu+2eYwzPEJU3M1kPw0M3g5sh+aIY4cFoNNK8BeeuYDSDv5c1kOHFBvG ajxX5FU6DkcGyklG5ybJVtbtKlxhbW/lTJGQrtTtfDiKTddDEXUu6qxbuzNXJv7c ApOqkTGJYsJF2/1Ozi7r+D8Luz+U8PzVpciVsQHVw2VuJPx1IhLxuqQpfurAU0fK zuqFsVZUbpJbFgeSd8NOftmcGKEXMUoS+cAnPQX18BlZupeAfEErQDUuMQIDAQAB o4IDTzCCA0swHQYDVR0OBBYEFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2MxYjFm MC0yMzRmLTQ1ZDUtODU5NS1mN2MyYzJhOTFiYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvYzFiMWYw LTIzNGYtNDVkNS04NTk1LWY3YzJjMmE5MWJjMi8xLzdEcGpQdkxBZ2xHbGhnTldM bGFxYnZxVDdDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHKBggrBgEF BQcBBwEB/wSBujCBtzCBpQQCAAEwgZ4DBAclCAADBAZSZsADBAdSzQADBAVVcWAD BAJWaxADBAJX/GwDBARZ7yADBAReGnADBAFt6KIDBASTvbADBAKwQQwDBAK5KMAD BAC5WvIDBAK5ioQDBAK5q4QDBAK80dADBAK812QwDAMEAMKpeQMEAsKpeAMEAMfM 1wMEBcf6gAMEBdQhYAMEBdRqQAMEBNkVAAMEBdlC4AMEBNlOMDANBAIAAjAHAwUD KgF/gDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgI+ZwICY/IwDQYJKoZIhvcNAQEL BQADggEBAA14TZB6YHS5ErXDqIjxsUsJ9Ip+m1sly9cXH9PSGCtMZB/u81X5RDsL /3DCMkr6C1SvJj/45YpGi2Id5BANTMdllHXkESEtCcsj+d/gmU1/zPY64eOnLPwN /5TLwDT6XGVjta1GvdlaPcZkIs+DuPWyKjnp75VVi0TZLZmJNcRRjmCsiBH9Va46 a+J5JlZpkt2jTMskPoLOQlkQUV9azxIAxxLrXB6U7y70RJnEXqCqYw5ROZOk28v2 nfDvRf2L5SLEAMpZqR3BkjTQwlpoetVf3IAGS8xXNdIJEutBGGGUH6BlqDfIFlpV ypYhnzJgUUSrbiQVQaLaFdV3llsUlCE= -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:30 2026 by rpki-client