This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer File: 7VKTzUpieoRq7WDKf7XVqQGarlE.cer (raw, json) Hash identifier: viBC5iKK6ShIQZX0taX4vivYRzcSegimJYJ9ll5Gvis= Subject key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15995972AE6C82038FB92F6825B73D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 157.27.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:99:59:72:ae:6c:82:03:8f:b9:2f:68:25:b7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:17:97:2f:bd:d0:b9:ea:b5:ed:9d:dc:4a: 7f:25:0b:eb:fa:5e:45:dd:c6:a4:75:01:5f:b2:91: 72:f6:14:20:f2:93:89:1a:24:48:74:21:9b:99:8e: 6a:0c:ce:33:c6:cf:ef:b9:f6:e1:6b:dc:36:45:58: 5e:4c:dc:58:7a:cf:62:68:88:20:9e:2d:50:38:8f: 9c:09:8d:8e:64:2d:b4:34:da:ad:80:46:ca:58:a6: f2:89:2d:c3:4c:b5:b3:3d:fa:0b:ee:7b:8e:ba:bb: 46:d2:fa:6f:08:d8:7b:73:9b:f9:74:f2:6c:75:d3: ea:ac:f4:f5:dc:e3:93:5c:a9:b3:5e:39:d6:2d:36: 77:5d:d8:15:1a:f8:94:4c:9d:90:1e:d7:cb:a4:dd: 3e:66:dc:95:a6:df:c7:20:6a:d9:8d:94:27:de:1f: 9a:eb:ea:de:d6:1e:0b:49:2b:37:c5:3e:7f:9f:20: a8:48:6d:a2:bf:56:2b:e1:c6:d5:86:b3:d4:3a:b2: 4e:a0:a1:9d:aa:e4:6a:cf:b3:f1:01:1b:e1:f3:88: d1:da:5c:72:f1:05:41:2b:bf:8d:66:59:60:22:26: 8b:ef:95:5e:f2:d9:c0:c1:b0:a3:f0:c5:38:6a:93: 54:d3:a4:9d:28:ec:65:76:c3:78:89:5c:4e:b3:7c: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:6d:73:2c:22:6c:f6:04:1a:a5:30:90:a7:00:fa:df:33:5a: 21:33:d6:7b:ed:f4:5e:f7:2c:e9:3e:52:4d:ce:c1:3f:fe:c7: 6d:51:e6:b0:c1:14:d8:60:ad:70:5a:cf:41:37:d5:19:1d:5a: eb:1d:e5:44:bc:7f:12:96:16:6d:4a:f7:14:89:fa:a1:b7:38: ee:d5:e7:3c:da:a6:d1:c4:10:f1:12:6d:41:b4:a2:80:b2:9e: 7d:40:ae:7e:72:be:0d:72:9c:c1:9f:43:ed:3a:78:9f:25:02: 8b:e1:c6:9f:99:3e:03:de:ad:3b:21:64:a3:b8:ce:aa:e9:cf: 95:16:62:b1:31:8a:b6:b0:32:2b:15:76:65:9e:a4:bb:d2:2e: cd:ff:d3:03:5b:5f:46:8d:d6:c0:c9:1b:89:ac:8c:63:c7:f3: 42:74:ea:f4:59:2d:bb:bd:49:ee:30:d8:17:67:c3:40:b2:0f: 10:bc:c9:a0:1a:cd:e8:89:64:61:90:ca:7f:d4:56:ae:77:3f: dd:76:ae:95:a9:ba:c9:cd:41:c4:40:c9:23:e3:da:d2:30:46: 4b:32:65:62:e5:e2:b0:f6:25:e6:6c:11:75:03:a1:09:b5:47: 7a:71:5b:e1:15:3e:d7:cd:af:07:a6:da:6f:63:16:d0:69:4d: 90:d3:52:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt/FZlZcq5sggOPuS9oJbc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDUyOTNjZDRhNjI3YTg0NmFlZDYwY2E3ZmI1ZDVhOTAxOWFhZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EXly+90Lnqte2d3Ep/JQvr+l5F 3cakdQFfspFy9hQg8pOJGiRIdCGbmY5qDM4zxs/vufbha9w2RVheTNxYes9iaIgg ni1QOI+cCY2OZC20NNqtgEbKWKbyiS3DTLWzPfoL7nuOurtG0vpvCNh7c5v5dPJs ddPqrPT13OOTXKmzXjnWLTZ3XdgVGviUTJ2QHtfLpN0+ZtyVpt/HIGrZjZQn3h+a 6+re1h4LSSs3xT5/nyCoSG2iv1Yr4cbVhrPUOrJOoKGdquRqz7PxARvh84jR2lxy 8QVBK7+NZllgIiaL75Ve8tnAwbCj8MU4apNU06SdKOxldsN4iVxOs3xT5wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFO1Sk81KYnqEau1gyn+11akBmq5RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzIwMjlh OS00Mzk2LTQ3MTctYWIwNS1lMjQzMzZlYzhhMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMjAyOWE5 LTQzOTYtNDcxNy1hYjA1LWUyNDMzNmVjOGEwOC8xLzdWS1R6VXBpZW9ScTdXREtm N1hWcVFHYXJsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnRswDQYJKoZIhvcNAQELBQADggEBAA1tcywi bPYEGqUwkKcA+t8zWiEz1nvt9F73LOk+Uk3OwT/+x21R5rDBFNhgrXBaz0E31Rkd Wusd5US8fxKWFm1K9xSJ+qG3OO7V5zzaptHEEPESbUG0ooCynn1Arn5yvg1ynMGf Q+06eJ8lAovhxp+ZPgPerTshZKO4zqrpz5UWYrExirawMisVdmWepLvSLs3/0wNb X0aN1sDJG4msjGPH80J06vRZLbu9Se4w2Bdnw0CyDxC8yaAazeiJZGGQyn/UVq53 P912rpWpusnNQcRAySPj2tIwRksyZWLl4rD2JeZsEXUDoQm1R3pxW+EVPtfNrwem 2m9jFtBpTZDTUgs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:44 2026 by rpki-client