This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer File: 7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer (raw, json) Hash identifier: 7IdwiUlJWDAgp7uLx6TFz0X0/T1hFEI2pNdiIhIrJk4= Subject key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A985725FB17A51FA1EC667D447078F413 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 18 Nov 2025 19:00:39 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.143.160.0/22 IP: 45.149.60.0/22 IP: 45.149.164.0/22 IP: 194.50.0.0/23 IP: 194.50.4.0/23 IP: 194.246.36.0/23 IP: 194.247.44.0/23 IP: 2a0f:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 19:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:57:25:fb:17:a5:1f:a1:ec:66:7d:44:70:78:f4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 18 19:00:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:3d:a2:1a:41:35:eb:36:06:63:90:7f:2a: 35:a8:11:87:2c:c4:c9:b9:75:02:f4:4e:44:8c:6f: 29:38:4e:e5:4d:8b:24:a0:98:df:71:bc:95:7d:0c: 9e:ea:a2:80:14:92:4b:79:e0:44:ae:4c:26:e7:e8: 29:b4:04:b9:4a:73:29:14:40:76:be:53:79:9b:60: cc:83:ea:03:fb:2c:56:0f:21:b9:a2:79:ec:64:a4: fc:c0:b5:45:49:c4:a0:66:49:06:f0:ec:4a:5a:5c: bd:d6:61:74:43:e9:1e:24:5f:ac:5d:8a:26:ac:7c: 0c:e2:05:0c:e7:4e:29:3d:dc:e8:36:a9:64:91:e7: 22:35:15:28:8e:66:ed:67:06:78:11:1a:be:d6:75: 71:e4:60:bd:b2:96:a9:fd:88:27:d5:49:8f:27:ad: aa:94:69:98:f5:71:b3:37:33:a2:7a:a3:6a:ed:c8: 5e:eb:f1:47:bb:00:87:e2:13:16:a0:c0:2b:3c:b4: 00:f7:65:92:6d:51:43:d0:a5:1a:b8:5f:b0:3b:2a: 38:d1:d2:cf:32:42:cf:f1:d9:16:25:3c:a5:b1:50: 64:02:18:ac:24:4e:cb:27:39:3b:bb:c8:93:64:3a: b9:43:e2:da:4a:d0:1b:37:91:34:1a:50:18:4a:3c: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.160.0/22 45.149.60.0/22 45.149.164.0/22 194.50.0.0/23 194.50.4.0/23 194.246.36.0/23 194.247.44.0/23 IPv6: 2a0f:a600::/29 Signature Algorithm: sha256WithRSAEncryption 7f:4b:39:3b:5c:b3:a0:53:e2:75:a3:f0:c8:50:a3:5d:6e:b8: 0d:a6:31:57:46:4c:b4:49:90:fd:ea:90:e4:af:38:f7:11:6f: fc:1a:b8:9c:df:1e:a0:5b:a8:56:8d:ae:38:50:fd:5b:45:d8: 93:92:dc:fc:d2:64:ee:ca:42:25:b4:c9:bc:7a:01:73:fc:99: f9:aa:ce:57:e7:c0:a5:1c:26:f6:ae:9d:d8:10:79:5c:2a:6e: bd:80:91:61:0d:0e:dd:19:4d:83:b7:01:3c:5b:74:a2:15:34: ca:16:6b:83:be:f8:28:20:bf:9e:3b:1f:dd:61:cb:31:a1:8e: 27:95:83:05:e7:81:b5:3d:d5:45:e1:31:3a:68:07:ed:98:21: 01:82:8b:b9:35:92:ae:28:74:bd:48:f6:55:79:07:cc:19:b8: 15:6e:03:f0:e1:49:16:6b:1d:1d:fe:b3:2e:37:9f:f9:74:82: fa:d9:d0:15:78:a4:84:03:7a:e7:57:28:9a:6e:7a:c8:4b:d1: 7b:e9:83:59:95:eb:c5:5a:fa:e1:f6:91:80:39:08:a3:35:59: be:0f:e0:ad:ac:59:87:23:d4:cf:6e:9c:7f:b8:5b:db:c1:2b: 02:b5:b4:c3:58:2f:15:24:b0:16:5b:98:75:49:5e:d0:18:ff: 03:fa:72:14 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZqYVyX7F6UfoexmfURwePQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE4MTkwMDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhmOWE3YzcxZDk0MDA3MzliYjhmYzk3MTZlNDM0MmZmNmQ2NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5k9ohpBNes2BmOQfyo1qBGHLMTJ uXUC9E5EjG8pOE7lTYskoJjfcbyVfQye6qKAFJJLeeBErkwm5+gptAS5SnMpFEB2 vlN5m2DMg+oD+yxWDyG5onnsZKT8wLVFScSgZkkG8OxKWly91mF0Q+keJF+sXYom rHwM4gUM504pPdzoNqlkkeciNRUojmbtZwZ4ERq+1nVx5GC9spap/Ygn1UmPJ62q lGmY9XGzNzOieqNq7che6/FHuwCH4hMWoMArPLQA92WSbVFD0KUauF+wOyo40dLP MkLP8dkWJTylsVBkAhisJE7LJzk7u8iTZDq5Q+LaStAbN5E0GlAYSjxGdQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFO2Pmnxx2UAHObuPyXFuQ0L/bWRbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcwMzA3 OWRlLTM4YTctNDVmMy1hYTgyLTU0MmVhZjM3Mzc2MC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAz MDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvRUQ4RjlBN0M3MUQ5 NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgME Ai2PoAMEAi2VPAMEAi2VpAMEAcIyAAMEAcIyBAMEAcL2JAMEAcL3LDANBAIAAjAH AwUDKg+mADANBgkqhkiG9w0BAQsFAAOCAQEAf0s5O1yzoFPidaPwyFCjXW64DaYx V0ZMtEmQ/eqQ5K849xFv/Bq4nN8eoFuoVo2uOFD9W0XYk5Lc/NJk7spCJbTJvHoB c/yZ+arOV+fApRwm9q6d2BB5XCpuvYCRYQ0O3RlNg7cBPFt0ohU0yhZrg774KCC/ njsf3WHLMaGOJ5WDBeeBtT3VReExOmgH7ZghAYKLuTWSrih0vUj2VXkHzBm4FW4D 8OFJFmsdHf6zLjef+XSC+tnQFXikhAN651comm56yEvRe+mDWZXrxVr64faRgDkI ozVZvg/graxZhyPUz26cf7hb28ErArW0w1gvFSSwFluYdUle0Bj/A/pyFA== -----END CERTIFICATE-----Generated at Sat Nov 22 22:14:44 2025 by rpki-client