This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer File: 7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer (raw, json) Hash identifier: je16XRAUDSMFwHlbpLGICyyDJ0WgJOv0XagmciWpqnA= Subject key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32F7A38D9BE94DD4C9B665C35991A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.160.0/22 IP: 45.149.60.0/22 IP: 45.149.164.0/22 IP: 194.50.0.0/23 IP: 194.50.4.0/23 IP: 194.246.36.0/23 IP: 194.247.44.0/23 IP: 2a0f:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2f:7a:38:d9:be:94:dd:4c:9b:66:5c:35:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:3d:a2:1a:41:35:eb:36:06:63:90:7f:2a: 35:a8:11:87:2c:c4:c9:b9:75:02:f4:4e:44:8c:6f: 29:38:4e:e5:4d:8b:24:a0:98:df:71:bc:95:7d:0c: 9e:ea:a2:80:14:92:4b:79:e0:44:ae:4c:26:e7:e8: 29:b4:04:b9:4a:73:29:14:40:76:be:53:79:9b:60: cc:83:ea:03:fb:2c:56:0f:21:b9:a2:79:ec:64:a4: fc:c0:b5:45:49:c4:a0:66:49:06:f0:ec:4a:5a:5c: bd:d6:61:74:43:e9:1e:24:5f:ac:5d:8a:26:ac:7c: 0c:e2:05:0c:e7:4e:29:3d:dc:e8:36:a9:64:91:e7: 22:35:15:28:8e:66:ed:67:06:78:11:1a:be:d6:75: 71:e4:60:bd:b2:96:a9:fd:88:27:d5:49:8f:27:ad: aa:94:69:98:f5:71:b3:37:33:a2:7a:a3:6a:ed:c8: 5e:eb:f1:47:bb:00:87:e2:13:16:a0:c0:2b:3c:b4: 00:f7:65:92:6d:51:43:d0:a5:1a:b8:5f:b0:3b:2a: 38:d1:d2:cf:32:42:cf:f1:d9:16:25:3c:a5:b1:50: 64:02:18:ac:24:4e:cb:27:39:3b:bb:c8:93:64:3a: b9:43:e2:da:4a:d0:1b:37:91:34:1a:50:18:4a:3c: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.160.0/22 45.149.60.0/22 45.149.164.0/22 194.50.0.0/23 194.50.4.0/23 194.246.36.0/23 194.247.44.0/23 IPv6: 2a0f:a600::/29 Signature Algorithm: sha256WithRSAEncryption 4f:46:88:e9:73:2b:8b:5e:11:cb:88:fb:aa:98:86:83:9c:ee: b1:c6:2c:3c:99:90:06:75:e6:17:b0:4a:60:26:85:f8:73:84: 73:9f:7b:bd:95:8b:bd:da:d1:f3:3b:ef:e6:cf:eb:fe:1a:1f: 8c:3a:6c:e1:f2:bc:84:14:bc:7d:93:fa:6b:d1:cf:33:dd:eb: 15:2e:70:28:36:12:77:a3:87:76:3b:20:c3:e8:0d:15:4d:50: 9f:4a:ff:3e:db:5a:da:c2:c5:13:01:9a:6e:f4:2b:8e:8c:b2: 63:f4:06:79:20:8a:66:d2:4a:4d:68:6e:30:5e:7f:33:94:52: 7e:00:7b:e8:96:5c:f4:c5:38:f0:1e:5b:43:a1:3d:ab:76:a3: ad:3b:1c:85:a4:38:0a:34:89:23:b5:59:d4:f2:21:05:1f:0a: 79:47:12:d3:1c:b5:be:be:02:1e:62:92:c5:23:0b:1f:47:7e: 12:78:b6:0c:0e:69:dd:61:f2:30:53:d8:97:8e:ed:c6:ac:e2: e2:5d:69:c5:89:f1:f9:0a:16:8f:70:0a:f7:8b:4e:b4:78:60: 51:35:bd:3b:24:c6:10:0d:3a:9d:f5:07:d0:4c:46:25:c8:c9: ab:c0:3b:39:96:cd:05:ec:1a:47:cc:9c:76:4b:06:f3:ee:1c: 96:25:90:d6 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt4oy96ONm+lN1Mm2ZcNZkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhmOWE3YzcxZDk0MDA3MzliYjhmYzk3MTZlNDM0MmZmNmQ2NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5k9ohpBNes2BmOQfyo1qBGHLMTJ uXUC9E5EjG8pOE7lTYskoJjfcbyVfQye6qKAFJJLeeBErkwm5+gptAS5SnMpFEB2 vlN5m2DMg+oD+yxWDyG5onnsZKT8wLVFScSgZkkG8OxKWly91mF0Q+keJF+sXYom rHwM4gUM504pPdzoNqlkkeciNRUojmbtZwZ4ERq+1nVx5GC9spap/Ygn1UmPJ62q lGmY9XGzNzOieqNq7che6/FHuwCH4hMWoMArPLQA92WSbVFD0KUauF+wOyo40dLP MkLP8dkWJTylsVBkAhisJE7LJzk7u8iTZDq5Q+LaStAbN5E0GlAYSjxGdQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFO2Pmnxx2UAHObuPyXFuQ0L/bWRbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcwMzA3 OWRlLTM4YTctNDVmMy1hYTgyLTU0MmVhZjM3Mzc2MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAz MDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvRUQ4RjlBN0M3MUQ5 NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgME Ai2PoAMEAi2VPAMEAi2VpAMEAcIyAAMEAcIyBAMEAcL2JAMEAcL3LDANBAIAAjAH AwUDKg+mADANBgkqhkiG9w0BAQsFAAOCAQEAT0aI6XMri14Ry4j7qpiGg5zuscYs PJmQBnXmF7BKYCaF+HOEc597vZWLvdrR8zvv5s/r/hofjDps4fK8hBS8fZP6a9HP M93rFS5wKDYSd6OHdjsgw+gNFU1Qn0r/Ptta2sLFEwGabvQrjoyyY/QGeSCKZtJK TWhuMF5/M5RSfgB76JZc9MU48B5bQ6E9q3ajrTschaQ4CjSJI7VZ1PIhBR8KeUcS 0xy1vr4CHmKSxSMLH0d+Eni2DA5p3WHyMFPYl47txqzi4l1pxYnx+QoWj3AK94tO tHhgUTW9OyTGEA06nfUH0ExGJcjJq8A7OZbNBewaR8ycdksG8+4cliWQ1g== -----END CERTIFICATE-----Generated at Thu Jan 8 18:20:03 2026 by rpki-client