This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.cer (raw, json) Hash identifier: mydI3+c7ORzKzR6jeoz7m98g2TgFNpWAw9s04UozDd8= Subject key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF5D11140F16AE292C90D0C9F0144 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16111 IP: 193.238.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f5:d1:11:40:f1:6a:e2:92:c9:0d:0c:9f:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eff65b700020e30d73d3b1df78271e543e308f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:38:a7:f3:15:e5:d2:8f:3c:73:2f:20:7b: f3:d1:d5:53:3b:df:63:69:2f:7d:ec:a0:39:2e:40: 19:79:99:9d:20:5e:e9:23:e2:89:1b:3b:6e:d1:5a: ef:62:3f:7a:36:73:aa:3e:d4:fd:e1:01:28:17:04: 19:9c:08:ee:aa:26:55:84:ee:1c:bb:95:e6:3f:7a: 93:ca:b1:d2:82:5c:db:04:88:b8:24:c7:24:75:94: 9f:70:27:12:92:83:71:ec:06:13:b8:fd:ec:b8:66: 71:71:e4:a1:89:e5:64:2e:af:e6:d1:8f:c3:51:17: bb:39:31:ac:6c:2f:84:78:bb:bd:54:0d:ba:bf:84: f1:91:22:41:9b:37:ec:2f:0d:44:99:cb:a2:36:f4: 48:5d:b2:91:c3:b1:5f:31:25:0a:85:53:a5:9e:4c: 05:9f:3f:d8:3d:0c:a8:1c:76:24:84:cb:84:d3:52: 42:8f:55:5e:6b:7a:5b:f8:69:6b:3f:3d:3e:62:fc: fb:50:d6:52:87:f8:d6:c7:aa:00:a0:11:b0:ef:34: da:81:73:14:36:e6:83:9d:f2:61:0e:04:36:9f:f1: 36:58:8d:33:29:ee:86:7d:bd:89:91:23:d1:c4:7f: 44:2e:cf:d2:9b:01:26:7a:7c:aa:62:d4:d8:dc:f3: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16111 Signature Algorithm: sha256WithRSAEncryption 83:77:54:d7:91:a9:32:f3:ba:23:7d:96:2b:fd:51:6c:7f:64: 2a:4c:60:21:e1:d7:cb:27:24:9a:7e:e1:8d:e7:73:8e:5a:3f: e7:ef:f0:9b:1a:86:6c:52:9f:0f:47:b9:24:5b:bf:05:60:42: e4:6e:75:4b:93:6c:1b:02:9b:6f:e5:bf:ad:e3:b4:6b:32:65: 15:e0:bf:81:74:a2:2b:ee:96:6e:99:21:61:95:72:53:b3:88: 8b:4c:58:18:37:02:f4:fd:82:07:84:5f:7c:78:62:ee:88:b7: 76:e1:e5:d9:8c:58:28:ad:c3:be:78:58:a1:87:c7:f7:f6:75: f5:41:76:fa:86:f6:5c:bd:09:25:e4:fd:02:12:51:bb:74:dd: 0a:cc:84:2b:73:96:5b:28:69:64:70:84:40:93:4b:4e:c5:f8: 94:ba:51:36:37:ac:d2:fb:20:cc:47:9d:c9:58:db:65:26:b0: 2f:5b:c6:62:73:a2:80:b2:a3:d6:1d:7f:2c:01:dd:76:3e:7b: bf:6c:16:ea:29:41:f0:50:33:8f:9f:be:b8:f6:94:b5:d6:e3: 69:0a:49:15:df:80:6d:5a:a7:18:24:ea:2f:72:5e:54:a3:17: db:87:4f:b0:92:de:48:67:4f:ef:4c:e2:2b:5b:b4:06:84:71: 3e:5a:85:f1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6WvXREUDxauKSyQ0MnwFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmY2NWI3MDAwMjBlMzBkNzNkM2IxZGY3ODI3MWU1NDNlMzA4ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3o4p/MV5dKPPHMvIHvz0dVTO99j aS997KA5LkAZeZmdIF7pI+KJGztu0VrvYj96NnOqPtT94QEoFwQZnAjuqiZVhO4c u5XmP3qTyrHSglzbBIi4JMckdZSfcCcSkoNx7AYTuP3suGZxceShieVkLq/m0Y/D URe7OTGsbC+EeLu9VA26v4TxkSJBmzfsLw1EmcuiNvRIXbKRw7FfMSUKhVOlnkwF nz/YPQyoHHYkhMuE01JCj1Vea3pb+GlrPz0+Yvz7UNZSh/jWx6oAoBGw7zTagXMU NuaDnfJhDgQ2n/E2WI0zKe6Gfb2JkSPRxH9ELs/SmwEmenyqYtTY3PMV+QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFO/2W3AAIOMNc9Ox33gnHlQ+MI86MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzIyYTQ2 NS0wMjVkLTQ4NDEtODg0Zi0xNGIyMGQ3NTMzNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMjJhNDY1 LTAyNWQtNDg0MS04ODRmLTE0YjIwZDc1MzM3Mi8xLzdfWmJjQUFnNHcxejA3SGZl Q2NlVkQ0d2p6by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwe6MMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj7vMA0GCSqGSIb3DQEBCwUAA4IBAQCDd1TXkaky87ojfZYr/VFsf2QqTGAh4dfL JySafuGN53OOWj/n7/CbGoZsUp8PR7kkW78FYELkbnVLk2wbAptv5b+t47RrMmUV 4L+BdKIr7pZumSFhlXJTs4iLTFgYNwL0/YIHhF98eGLuiLd24eXZjFgorcO+eFih h8f39nX1QXb6hvZcvQkl5P0CElG7dN0KzIQrc5ZbKGlkcIRAk0tOxfiUulE2N6zS +yDMR53JWNtlJrAvW8Zic6KAsqPWHX8sAd12Pnu/bBbqKUHwUDOPn7649pS11uNp CkkV34BtWqcYJOovcl5Uoxfbh0+wkt5IZ0/vTOIrW7QGhHE+WoXx -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:13 2026 by rpki-client