This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.cer (raw, json) Hash identifier: zY1Zbk9+Sn+CdcfKK8VeIk8xUNc6w81h6NUcm+U8QwQ= Subject key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7EA1CE4D07594A4ED68C5CC94303 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211402 IP: 5.182.172.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7e:a1:ce:4d:07:59:4a:4e:d6:8c:5c:c9:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:be:93:cc:22:b2:64:04:8a:61:e8:3d:c1: e8:22:a7:fd:e3:d9:2c:af:b7:6a:8b:9f:0a:15:24: 4e:c0:93:38:0f:82:03:7c:f3:a3:d8:b8:11:db:4e: c4:44:9d:4b:04:ff:83:27:69:5c:ae:e9:6a:92:ae: 8d:b1:42:13:20:4b:5f:c3:22:20:67:d0:7a:72:00: b7:7f:cb:26:8c:b6:6f:f5:6b:07:c1:40:34:27:1e: 72:87:15:b5:4c:04:fa:30:57:a9:bb:c9:ee:46:5a: b9:81:97:d4:46:79:1e:df:11:52:38:f3:1e:36:df: 48:db:b7:f4:93:a8:63:7b:f3:0d:bb:f6:94:00:e6: ff:af:40:5c:9a:7a:83:60:da:4b:5e:20:fd:a1:62: ca:6c:3c:67:e6:bf:62:9b:90:31:9b:7f:57:98:10: 5f:4a:38:bb:fb:5a:f0:28:48:d6:f8:52:f4:11:e8: 49:f8:42:ba:45:c2:7a:19:61:76:de:bb:78:8e:0e: 67:4b:03:ec:bc:12:12:e8:8f:5a:89:17:41:f1:9f: 74:71:40:d6:50:ce:3b:a9:22:14:cd:f4:a9:96:f0: 0c:22:48:c6:ec:d2:ae:e4:ca:43:87:22:c3:0f:4d: fe:35:75:79:69:5b:0a:0a:6f:15:bf:40:7f:77:ed: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211402 Signature Algorithm: sha256WithRSAEncryption 9e:08:9d:d0:f3:76:41:b2:dc:65:9a:37:ef:7c:71:4c:ab:dd: 47:fa:f8:21:33:01:4f:26:c8:2d:e7:58:a9:48:a3:f6:d7:c1: 9f:40:07:91:10:f3:9e:23:19:09:da:0f:79:d5:d4:ff:05:ba: a2:e2:9d:0b:ea:55:e2:c8:22:be:9a:e4:a8:a3:52:cc:d3:e3: f1:45:35:6c:a1:2a:b6:4c:8f:67:be:18:59:70:8f:c2:04:fc: d5:85:3b:99:07:ff:07:8b:3b:51:74:28:7a:dd:99:ea:93:a4: ad:8e:08:31:42:e2:16:e2:52:ac:dd:ca:b8:9b:af:85:61:21: 90:0e:d1:5f:79:5e:6d:46:cb:79:fb:8c:1f:04:75:17:25:21: 0c:e3:f3:33:ac:f4:c0:48:26:fc:85:4f:84:6e:3f:93:0e:0f: f6:5a:11:b0:2b:85:ef:fd:7f:80:37:66:f2:8f:eb:0e:47:01: b8:34:11:04:a8:5b:a9:e5:3e:a1:33:b7:11:2d:51:4e:4b:1a: 33:11:e3:30:d6:d8:a3:49:81:80:bc:dd:dc:88:66:df:ba:c0: f1:4e:2e:9a:95:55:c4:88:59:6a:33:88:54:08:fc:90:e6:7f: 39:d4:93:e9:07:64:d3:75:65:26:f0:4b:84:cb:17:5f:3d:b1: 04:e6:aa:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fn6hzk0HWUpO1oxcyUMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTc0NTBiMjMwMTcyZTNlOGFkMzUyODgxMTBlZjhhYmQyNGZmOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEa+k8wismQEimHoPcHoIqf949ks r7dqi58KFSROwJM4D4IDfPOj2LgR207ERJ1LBP+DJ2lcrulqkq6NsUITIEtfwyIg Z9B6cgC3f8smjLZv9WsHwUA0Jx5yhxW1TAT6MFepu8nuRlq5gZfURnke3xFSOPMe Nt9I27f0k6hje/MNu/aUAOb/r0BcmnqDYNpLXiD9oWLKbDxn5r9im5Axm39XmBBf Sji7+1rwKEjW+FL0EehJ+EK6RcJ6GWF23rt4jg5nSwPsvBIS6I9aiRdB8Z90cUDW UM47qSIUzfSplvAMIkjG7NKu5MpDhyLDD03+NXV5aVsKCm8Vv0B/d+1kJQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO50ULIwFy4+itNSiBEO+KvST/ktMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzJlMjU3 ZS1kZjY0LTQ2NjgtODYzYi1mNGRlYTg2OTI5YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMmUyNTdl LWRmNjQtNDY2OC04NjNiLWY0ZGVhODY5MjlhZS8xLzduUlFzakFYTGo2SzAxS0lF UTc0cTlKUC1TMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCBbasMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM5yjANBgkqhkiG9w0BAQsFAAOCAQEAngid0PN2QbLcZZo373xxTKvdR/r4ITMB TybILedYqUij9tfBn0AHkRDzniMZCdoPedXU/wW6ouKdC+pV4sgivprkqKNSzNPj 8UU1bKEqtkyPZ74YWXCPwgT81YU7mQf/B4s7UXQoet2Z6pOkrY4IMULiFuJSrN3K uJuvhWEhkA7RX3lebUbLefuMHwR1FyUhDOPzM6z0wEgm/IVPhG4/kw4P9loRsCuF 7/1/gDdm8o/rDkcBuDQRBKhbqeU+oTO3ES1RTksaMxHjMNbYo0mBgLzd3Ihm37rA 8U4umpVVxIhZajOIVAj8kOZ/OdST6Qdk03VlJvBLhMsXXz2xBOaq/A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:15 2026 by rpki-client