This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer File: 7jE2ffbRhhBxySuucmUjMm9Fuio.cer (raw, json) Hash identifier: fvW/lN4zGFF/Zm7cfke4aHnPnITzfmUbppPmmywT5vw= Subject key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0D642E68F81FCC7B5553E6F515FDBF43 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 12:30:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.92.40.0/22 IP: 2a0e:1cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:64:2e:68:f8:1f:cc:7b:55:53:e6:f5:15:fd:bf:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 12:30:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee31367df6d1861071c92bae726523326f45ba2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c3:0a:db:5f:a8:82:aa:79:b3:35:5e:9f:77: d4:28:51:a8:66:9d:80:93:8f:73:97:d0:db:c9:aa: ec:8f:2b:88:eb:09:da:5b:87:03:4f:4e:79:34:39: b3:b2:f9:e8:8e:f3:b0:28:ab:0b:4c:f3:27:10:a3: 38:bc:8a:ad:63:0d:d2:33:db:01:bd:bf:53:be:06: f5:d6:66:22:be:53:57:ad:34:d1:b6:07:fc:1b:0b: 29:ba:8e:2b:a8:66:a5:c5:6c:76:ac:5d:6d:a2:c4: 23:3c:40:0f:66:9d:f3:cd:7c:94:a5:8e:d6:65:4c: 84:8d:66:ea:8e:21:aa:fe:8d:50:4f:dd:68:54:ab: 75:23:fd:d2:86:0d:db:22:44:16:41:b2:9b:0e:f3: 8f:b1:eb:13:3e:b0:8a:25:5b:06:03:c5:3b:68:56: 6a:04:c5:d6:96:df:ed:01:4f:ff:a3:19:8d:d8:b5: 7c:ef:7f:0c:8f:1d:08:6a:5e:7b:19:b5:d4:e1:6f: 66:42:ea:4c:17:bb:9b:75:d8:97:d6:f1:14:73:08: f2:58:ab:f5:bb:9a:a5:67:be:af:34:ba:39:4e:75: ef:83:78:d2:20:64:db:02:5c:d3:29:5d:a1:0d:ec: 4b:20:b7:04:c2:5e:8a:9c:a6:3d:a6:6a:f6:64:35: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.40.0/22 IPv6: 2a0e:1cc0::/29 Signature Algorithm: sha256WithRSAEncryption 69:f7:15:58:4c:d9:3e:3f:1e:d1:92:20:3d:41:e9:c9:cf:62: 96:f1:77:13:a6:90:ce:5e:9c:ca:ae:c8:a6:cd:ed:4d:7d:80: 2c:c7:65:a2:ee:2e:22:04:8a:82:5a:39:1c:f5:3f:8b:0e:fd: 30:2d:7c:bf:2b:5f:12:c0:fd:4e:24:2f:1b:ae:14:b1:17:d7: 4b:b9:2d:09:8e:26:9f:99:b1:45:35:a5:3f:16:c0:f5:fb:fb: 62:0b:fa:5c:3a:3b:33:f8:c8:dc:fc:74:bb:ca:af:72:0e:d3: 4b:16:bd:66:65:df:f3:ab:41:5f:62:85:dc:6c:f4:39:e4:6a: 33:3b:29:5f:b7:52:d6:79:7c:9f:d8:15:32:b1:8a:81:87:ac: dc:d2:3e:60:f9:28:ee:da:57:50:0c:5f:8d:17:ed:d2:40:db: c6:6d:ce:11:80:10:b1:42:8b:0d:f1:b9:21:f3:8c:8a:d8:43: 1c:1e:0d:62:f9:05:6a:a9:a7:f4:9e:1a:fd:e0:02:ee:24:0d: 27:9e:f1:b6:86:ec:d9:4b:e4:c4:1d:9f:96:69:da:0a:de:3a: ce:b8:7a:88:7b:5d:a1:e9:89:0e:84:ad:fd:97:f3:ef:c7:9b: 41:47:54:60:12:17:21:ab:4e:c1:6c:b7:d5:3d:2e:c5:66:37: c4:eb:49:3b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZsNZC5o+B/Me1VT5vUV/b9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMTIzMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTMxMzY3ZGY2ZDE4NjEwNzFjOTJiYWU3MjY1MjMzMjZmNDViYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sMK21+ogqp5szVen3fUKFGoZp2A k49zl9DbyarsjyuI6wnaW4cDT055NDmzsvnojvOwKKsLTPMnEKM4vIqtYw3SM9sB vb9Tvgb11mYivlNXrTTRtgf8Gwspuo4rqGalxWx2rF1tosQjPEAPZp3zzXyUpY7W ZUyEjWbqjiGq/o1QT91oVKt1I/3Shg3bIkQWQbKbDvOPsesTPrCKJVsGA8U7aFZq BMXWlt/tAU//oxmN2LV8738Mjx0Ial57GbXU4W9mQupMF7ubddiX1vEUcwjyWKv1 u5qlZ76vNLo5TnXvg3jSIGTbAlzTKV2hDexLILcEwl6KnKY9pmr2ZDVgdQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFO4xNn320YYQcckrrnJlIzJvRboqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzFiYjRk ZC1lOWM0LTRkM2QtOWEzYi0xMTU5ZGJmYmVkNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMWJiNGRk LWU5YzQtNGQzZC05YTNiLTExNTlkYmZiZWQ1NC8xLzdqRTJmZmJSaGhCeHlTdXVj bVVqTW05RnVpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVwoMA0EAgACMAcDBQMqDhzAMA0GCSqGSIb3 DQEBCwUAA4IBAQBp9xVYTNk+Px7RkiA9QenJz2KW8XcTppDOXpzKrsimze1NfYAs x2Wi7i4iBIqCWjkc9T+LDv0wLXy/K18SwP1OJC8brhSxF9dLuS0JjiafmbFFNaU/ FsD1+/tiC/pcOjsz+Mjc/HS7yq9yDtNLFr1mZd/zq0FfYoXcbPQ55GozOylft1LW eXyf2BUysYqBh6zc0j5g+Sju2ldQDF+NF+3SQNvGbc4RgBCxQosN8bkh84yK2EMc Hg1i+QVqqaf0nhr94ALuJA0nnvG2huzZS+TEHZ+WadoK3jrOuHqIe12h6YkOhK39 l/Pvx5tBR1RgEhchq07BbLfVPS7FZjfE60k7 -----END CERTIFICATE-----Generated at Sun Dec 14 12:24:43 2025 by rpki-client