This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer File: 7gJORqdGvzs6897Agc5-vEQRAKM.cer (raw, json) Hash identifier: Bk6NkE6HNoZ8gZmv13VJOhEorDqZNfIYEDbVFUYrK1o= Subject key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6FB2D822CBA4C7F0C7E7C4EE9DEC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21385 IP: 81.92.160.0/20 IP: 86.110.64.0/19 IP: 185.55.120.0/22 IP: 193.110.24.0/22 IP: 212.82.160.0/19 IP: 217.151.80.0/20 IP: 2001:1b18::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:2d:82:2c:ba:4c:7f:0c:7e:7c:4e:e9:de:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:61:d7:a7:17:aa:7a:84:dd:c2:fb:2c:73: a7:27:25:46:ae:0f:df:c9:27:4c:3d:b9:9c:c7:82: 7f:65:6a:70:79:8b:18:69:ea:7d:64:3b:5b:c3:68: 8b:e3:02:de:22:37:d3:20:94:43:e7:a9:41:f8:da: fe:6c:83:cb:63:55:a0:4f:59:43:60:34:52:e7:df: ec:f3:f0:7b:d3:48:af:29:42:12:90:23:46:60:22: 7b:06:4e:d4:66:39:d5:08:31:87:33:17:75:21:49: bd:f3:70:ef:ab:25:ee:79:a3:52:1a:c5:37:ca:1d: b5:66:e2:cf:8f:07:33:d1:ac:fe:2f:26:c5:ad:87: 27:7d:19:06:ff:1c:25:4d:04:86:fa:84:1c:43:86: 4c:51:7c:ba:b7:24:82:68:92:47:09:ca:22:49:e3: 5b:a8:42:bd:c3:96:b0:cd:a6:74:df:88:c2:51:b8: cf:03:c6:95:38:d2:81:c3:ea:d1:c6:e6:8a:4d:95: bb:08:14:3e:be:e9:54:6a:c3:15:71:c3:31:7f:fe: 5e:13:86:57:59:2a:a4:04:a0:83:da:82:b3:cc:26: f5:80:e6:dd:06:c6:9a:06:4e:2e:12:ab:66:49:ac: fd:d6:10:c3:da:62:fa:98:0d:b1:1f:8a:cd:46:22: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.92.160.0/20 86.110.64.0/19 185.55.120.0/22 193.110.24.0/22 212.82.160.0/19 217.151.80.0/20 IPv6: 2001:1b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21385 Signature Algorithm: sha256WithRSAEncryption 1f:a9:ac:8c:ea:a0:5e:af:cc:5a:40:ab:e1:2c:56:c4:d2:52: e8:6e:b2:81:bc:95:c3:03:60:30:9a:54:44:bd:ab:eb:f9:b8: ce:a9:d6:ba:ab:ce:10:e4:29:3c:91:24:91:b3:d1:e7:f0:8a: 5b:cc:56:86:c0:02:75:d1:6d:9f:01:32:e5:a5:1a:5c:01:c3: 95:f0:8d:4a:3c:77:cd:76:67:ef:4a:77:72:94:ce:0e:db:30: 59:44:d3:6a:7e:88:a4:19:cf:5c:7a:e1:23:98:40:04:f7:84: 6f:21:3f:5c:f9:02:a8:d9:d8:9c:ce:61:b6:2c:85:f8:95:16: 54:6f:30:26:e0:f3:43:a9:fe:79:93:bf:40:2b:00:29:1d:39: 5b:30:ab:47:06:d1:ff:67:e0:ef:d3:0c:40:64:7d:d6:00:80: 02:45:c1:c3:c6:c1:3a:4a:64:17:eb:dd:bf:5d:6a:b3:6d:1c: 69:b4:4c:61:f3:f5:88:52:87:32:65:72:51:18:6d:ee:30:3e: 36:b6:94:e9:6e:f9:5a:a9:53:ae:3c:7f:67:b0:fd:ac:9c:13: ca:76:e6:12:d3:26:6a:cd:23:0c:c2:34:39:99:e4:de:d1:99: 94:7e:bb:aa:f3:13:89:f9:da:95:05:98:e3:51:77:eb:be:1a: a5:29:be:5f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt3xvstgiy6TH8MfnxO6d7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTAyNGU0NmE3NDZiZjNiM2FmM2RlYzA4MWNlN2ViYzQ0MTEwMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Nh16cXqnqE3cL7LHOnJyVGrg/f ySdMPbmcx4J/ZWpweYsYaep9ZDtbw2iL4wLeIjfTIJRD56lB+Nr+bIPLY1WgT1lD YDRS59/s8/B700ivKUISkCNGYCJ7Bk7UZjnVCDGHMxd1IUm983DvqyXueaNSGsU3 yh21ZuLPjwcz0az+LybFrYcnfRkG/xwlTQSG+oQcQ4ZMUXy6tySCaJJHCcoiSeNb qEK9w5awzaZ034jCUbjPA8aVONKBw+rRxuaKTZW7CBQ+vulUasMVccMxf/5eE4ZX WSqkBKCD2oKzzCb1gObdBsaaBk4uEqtmSaz91hDD2mL6mA2xH4rNRiKeCwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFO4CTkanRr87OvPewIHOfrxEEQCjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzA5NTRi My0yODBhLTRjYTYtYjg0ZC0zMTEzMDRhOWEyMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMDk1NGIz LTI4MGEtNGNhNi1iODRkLTMxMTMwNGE5YTIxMS8xLzdnSk9ScWRHdnpzNjg5N0Fn YzUtdkVRUkFLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQEUVygAwQFVm5AAwQCuTd4AwQCwW4YAwQF1FKg AwQE2ZdQMA0EAgACMAcDBQAgARsYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlOJ MA0GCSqGSIb3DQEBCwUAA4IBAQAfqayM6qBer8xaQKvhLFbE0lLobrKBvJXDA2Aw mlREvavr+bjOqda6q84Q5Ck8kSSRs9Hn8IpbzFaGwAJ10W2fATLlpRpcAcOV8I1K PHfNdmfvSndylM4O2zBZRNNqfoikGc9ceuEjmEAE94RvIT9c+QKo2diczmG2LIX4 lRZUbzAm4PNDqf55k79AKwApHTlbMKtHBtH/Z+Dv0wxAZH3WAIACRcHDxsE6SmQX 692/XWqzbRxptExh8/WIUocyZXJRGG3uMD42tpTpbvlaqVOuPH9nsP2snBPKduYS 0yZqzSMMwjQ5meTe0ZmUfruq8xOJ+dqVBZjjUXfrvhqlKb5f -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:54 2026 by rpki-client