This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.cer (raw, json) Hash identifier: 6lKT3tjcwAkWWKOrJxEqtiNx6KT39S1GfXkPb+lQfvE= Subject key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A942787228808E47C1039C47C515C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34798 IP: 193.19.120.0/23 IP: 193.22.104.0/23 IP: 2a0f:c640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:94:27:87:22:88:08:e4:7c:10:39:c4:7c:51:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:b1:a0:d4:b5:fb:45:75:12:5d:9b:9c:37: ab:d4:b8:14:10:2f:e2:8a:c2:8b:75:29:a1:e5:30: 5a:53:b4:02:dc:85:f5:81:b2:ed:00:9b:00:97:70: 77:0d:d4:eb:e6:e0:d5:44:52:8a:d2:53:f9:ee:22: 89:52:96:ed:6d:e9:62:43:66:fd:77:a0:90:15:07: 01:52:f3:44:bf:f1:66:7f:5e:7e:18:6b:8a:a1:f0: 80:3f:90:46:6b:2b:47:14:88:15:09:ee:9b:e9:07: 9b:d5:f3:51:44:06:af:fb:6f:53:94:60:a9:82:13: 80:d7:69:aa:7d:dd:a6:c5:1d:74:46:fb:67:82:12: 8d:ec:bf:5a:55:ca:95:00:fe:4d:98:dd:76:8d:fa: ef:4a:0c:a6:52:94:cb:49:44:ac:09:c4:b7:14:74: 15:8a:1c:68:60:82:96:92:45:9d:7b:c2:89:1c:2d: ea:56:b5:ed:20:b4:1a:1e:a9:c1:ac:d8:71:c0:a4: 79:d8:b3:33:a1:8a:8a:2c:dc:a0:7b:26:c6:87:df: 0f:d0:07:72:a3:1e:76:fc:00:d5:d2:bd:1d:a0:4f: c6:72:e0:7f:c3:6d:73:9d:b4:3c:77:64:a1:45:8d: e7:a9:f4:ba:77:1e:21:55:65:30:49:c0:9f:80:04: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.120.0/23 193.22.104.0/23 IPv6: 2a0f:c640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34798 Signature Algorithm: sha256WithRSAEncryption 49:45:d8:1e:99:a5:40:66:dd:55:77:78:f5:fe:db:9c:ed:21: 63:ae:5d:96:e7:1c:d0:80:8e:c1:d1:e4:89:30:a8:2b:02:6a: 77:90:eb:7b:7b:9f:49:39:f5:5d:a6:f9:05:ef:db:fd:23:cc: dd:38:ce:74:80:5a:f3:c5:f2:d4:96:dc:4e:4a:34:76:a1:47: 8d:8a:d9:f7:14:45:60:2d:39:98:71:6a:61:e9:33:1d:5e:50: f5:20:71:05:fc:15:a3:df:f2:1b:78:b6:07:ed:68:24:84:f9: ad:21:c7:14:02:01:51:2c:57:be:97:f0:a2:cf:6e:82:f0:b9: 90:23:1f:2a:1c:c4:20:39:d3:41:b1:92:f5:65:3a:b8:30:a3: fe:38:d7:49:1a:28:d0:a6:6c:0c:62:53:d0:11:cf:16:f2:4d: 3c:a9:78:a2:b5:da:2d:54:fe:28:05:5b:83:0d:20:b8:2e:eb: 11:04:bf:fe:e2:ab:b7:29:8f:dc:41:30:a0:e2:b3:b7:97:a6: 6c:46:24:97:75:70:ad:c0:fb:0c:17:f6:02:4b:5c:4c:dc:d6: d6:06:7b:07:8a:4a:83:75:ac:9e:66:5d:a8:a7:c2:55:c1:e2: 71:2d:e3:70:e6:52:c2:ca:7c:d3:de:26:77:f5:f2:e2:7f:a7: 72:6a:d6:2e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WpQnhyKICOR8EDnEfFFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDQ1N2Y5NjljMGZlYzM1YjkyNmQwZjcyYTQ3ZGQ0NGI4YjMwMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOxoNS1+0V1El2bnDer1LgUEC/i isKLdSmh5TBaU7QC3IX1gbLtAJsAl3B3DdTr5uDVRFKK0lP57iKJUpbtbeliQ2b9 d6CQFQcBUvNEv/Fmf15+GGuKofCAP5BGaytHFIgVCe6b6Qeb1fNRRAav+29TlGCp ghOA12mqfd2mxR10RvtnghKN7L9aVcqVAP5NmN12jfrvSgymUpTLSUSsCcS3FHQV ihxoYIKWkkWde8KJHC3qVrXtILQaHqnBrNhxwKR52LMzoYqKLNygeybGh98P0Ady ox52/ADV0r0doE/GcuB/w21znbQ8d2ShRY3nqfS6dx4hVWUwScCfgAQG3wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFO1Ff5acD+w1uSbQ9ypH3US4swD1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzkyNjhi Zi0yNWU5LTRjMzgtYmFmNy1lNDdlYmVlMmMwMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTI2OGJm LTI1ZTktNGMzOC1iYWY3LWU0N2ViZWUyYzAyMC8xLzdVVl9scHdQN0RXNUp0RDNL a2ZkUkxpekFQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwRN4AwQBwRZoMA0EAgACMAcDBQMqD8ZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCH7jANBgkqhkiG9w0BAQsFAAOCAQEASUXY HpmlQGbdVXd49f7bnO0hY65dlucc0ICOwdHkiTCoKwJqd5Dre3ufSTn1Xab5Be/b /SPM3TjOdIBa88Xy1JbcTko0dqFHjYrZ9xRFYC05mHFqYekzHV5Q9SBxBfwVo9/y G3i2B+1oJIT5rSHHFAIBUSxXvpfwos9ugvC5kCMfKhzEIDnTQbGS9WU6uDCj/jjX SRoo0KZsDGJT0BHPFvJNPKl4orXaLVT+KAVbgw0guC7rEQS//uKrtymP3EEwoOKz t5embEYkl3VwrcD7DBf2AktcTNzW1gZ7B4pKg3WsnmZdqKfCVcHicS3jcOZSwsp8 094md/Xy4n+ncmrWLg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client