This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.cer (raw, json) Hash identifier: OT1t3TNWp++nB9foeqKW4LR7sQfZWypAu/0nXbNldJI= Subject key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4BC79AA76ADFC17E1F07C5A3B9870F22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 15:15:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203860 IP: 158.94.174.0/24 IP: 2001:67c:a0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:c7:9a:a7:6a:df:c1:7e:1f:07:c5:a3:b9:87:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 15:15:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:b6:92:63:37:8f:b3:03:ee:93:43:26:a1: 4e:11:3c:84:ec:41:c0:53:8d:b1:86:d6:4a:50:b6: 83:75:e3:f1:bb:95:14:73:f8:15:9a:17:f0:67:64: ae:39:9e:4e:f2:76:19:64:cf:de:64:a4:0e:78:c1: 97:95:12:14:54:b5:b9:eb:43:c1:95:db:46:0c:ba: 87:1f:07:02:52:ae:ce:fe:7f:74:0b:59:44:80:30: 88:f8:d0:89:92:cd:0b:04:2a:96:b1:47:1d:c7:9a: 72:6f:76:94:9e:9e:97:0e:03:d8:d6:cf:a9:36:3f: 38:c2:6e:33:b4:89:0f:b3:2b:66:c8:50:2a:8a:48: b1:d2:13:b1:7c:54:b5:30:39:f2:e8:da:5e:75:b1: 86:5d:cd:df:31:92:ce:09:17:7b:64:db:c9:c2:65: a9:0f:94:4a:e8:21:65:be:1f:98:e2:b5:2f:ed:39: a3:89:f6:96:34:91:13:2d:5b:8d:44:cc:c9:aa:62: 05:6b:dc:e4:fa:c0:47:af:2f:31:91:83:6f:65:74: 0d:3f:9f:37:fd:9b:9c:b7:77:3c:16:be:97:ed:e3: b8:66:27:b2:05:c0:ae:fa:7e:87:29:4a:12:5c:97: cf:78:21:e2:ac:95:e4:dd:a6:de:44:b4:17:7d:ac: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.174.0/24 IPv6: 2001:67c:a0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203860 Signature Algorithm: sha256WithRSAEncryption 86:d7:48:9c:96:f6:38:96:17:4d:b7:1b:dc:93:2e:60:f2:5d: 3a:db:74:5b:94:51:86:22:31:c4:de:8e:6c:08:be:c8:8a:b1: 72:68:30:17:65:7e:83:3e:4f:b2:a9:b4:5b:f4:ea:e3:ec:ed: 63:89:c4:a5:db:51:3c:9b:23:9b:47:04:ed:d4:c4:79:5a:c3: ee:b3:f3:cc:58:a2:4a:2c:0f:47:8d:97:4f:8c:8b:39:f1:0d: 83:75:7f:c2:e3:f5:08:9a:7d:66:17:ed:1d:3b:6a:8b:1d:b6: cb:d1:c8:1c:39:81:8b:4f:72:98:8e:3c:48:66:ec:e9:b6:79: e7:49:54:63:c1:53:a2:5e:26:2a:b1:ca:ab:54:fb:02:cd:97: 4e:3d:f3:40:cf:86:22:99:3e:a6:11:8f:6b:bf:91:58:89:78: 3d:15:50:32:21:f3:95:a4:32:74:ba:46:da:78:78:00:3e:80: 29:90:94:14:52:f6:11:93:57:97:34:78:3c:b2:12:1c:43:df: 94:20:1c:e9:3c:a0:7a:83:70:04:b8:cb:97:13:aa:07:3a:f6: fc:64:90:73:f5:6d:3d:ea:f3:b1:00:86:4e:b0:4b:b4:ca:b3: d4:54:9d:4f:29:00:07:37:62:55:8a:c7:7b:25:72:95:1b:01: b8:5a:67:08 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZtLx5qnat/Bfh8HxaO5hw8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTUxNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDIxYTNmMzEyYTQ5ZjNlOWQ4YzZjNDRjOWRlMTMzYTllZDg3N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwO2kmM3j7MD7pNDJqFOETyE7EHA U42xhtZKULaDdePxu5UUc/gVmhfwZ2SuOZ5O8nYZZM/eZKQOeMGXlRIUVLW560PB ldtGDLqHHwcCUq7O/n90C1lEgDCI+NCJks0LBCqWsUcdx5pyb3aUnp6XDgPY1s+p Nj84wm4ztIkPsytmyFAqikix0hOxfFS1MDny6NpedbGGXc3fMZLOCRd7ZNvJwmWp D5RK6CFlvh+Y4rUv7TmjifaWNJETLVuNRMzJqmIFa9zk+sBHry8xkYNvZXQNP583 /Zuct3c8Fr6X7eO4ZieyBcCu+n6HKUoSXJfPeCHirJXk3abeRLQXfaxqQQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFO0ho/MSpJ8+nYxsRMneEzqe2HfqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2NiMzUw YS03Zjc0LTRhNmItYmE1Ny1kZjEzNGYyYTJlNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvY2IzNTBh LTdmNzQtNGE2Yi1iYTU3LWRmMTM0ZjJhMmU2Yy8xLzdTR2o4eEtrbno2ZGpHeEV5 ZDRUT3A3WWQtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAnl6uMA8EAgACMAkDBwAgAQZ8AKAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxxUMA0GCSqGSIb3DQEBCwUAA4IBAQCG10iclvY4 lhdNtxvcky5g8l0623RblFGGIjHE3o5sCL7IirFyaDAXZX6DPk+yqbRb9Orj7O1j icSl21E8myObRwTt1MR5WsPus/PMWKJKLA9HjZdPjIs58Q2DdX/C4/UImn1mF+0d O2qLHbbL0cgcOYGLT3KYjjxIZuzptnnnSVRjwVOiXiYqscqrVPsCzZdOPfNAz4Yi mT6mEY9rv5FYiXg9FVAyIfOVpDJ0ukbaeHgAPoApkJQUUvYRk1eXNHg8shIcQ9+U IBzpPKB6g3AEuMuXE6oHOvb8ZJBz9W096vOxAIZOsEu0yrPUVJ1PKQAHN2JVisd7 JXKVGwG4WmcI -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:43 2025 by rpki-client