This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer (raw, json) Hash identifier: zeGxhmySJgSII/PRl66xC+ug048e+niOGKjpiRmkLlQ= Subject key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC844D769989A0334C6305811DF5707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8253 IP: 192.108.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:44:d7:69:98:9a:03:34:c6:30:58:11:df:57:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee82395001b03c663509909979dfb78445b3d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:9c:7a:bc:a3:f2:fb:dd:d6:fb:64:7d:16: c5:4c:7a:e6:e0:e6:9b:b7:f1:c9:3b:4b:19:85:16: c7:9c:0d:e1:2b:6c:59:2c:c3:62:1a:59:f5:a7:ed: 4c:05:cf:f3:e9:0a:81:2b:c2:c7:00:93:05:8f:97: e6:d9:f8:7f:16:e9:12:a2:50:ea:e1:cd:70:59:7f: 66:a3:c2:3e:7a:ed:13:88:d3:c2:a0:e0:bb:bd:68: 04:23:a4:3e:82:fc:ac:72:79:8f:03:87:7f:ec:33: b8:72:82:95:4d:5a:c3:c8:a6:76:ea:62:b9:a9:b2: 45:20:48:71:08:eb:ad:6e:5a:16:d0:c5:92:2c:04: 0a:88:b7:d7:77:a7:71:cf:ff:6d:bb:7d:d9:95:1a: 01:83:8b:6d:4b:59:ea:12:57:5f:a9:3a:5b:6a:a3: c3:bf:87:67:14:7d:58:93:a0:cd:89:ad:b4:f8:68: d8:d2:c3:88:22:be:1c:b3:bb:ce:34:fb:4b:60:17: 30:f4:7d:03:f4:1c:5f:be:8a:f8:9b:a5:4f:12:54: b1:6a:45:93:ea:e8:05:8e:54:68:e4:93:99:b8:66: 43:96:b4:21:15:99:09:60:9b:d0:70:a2:e8:f5:8a: ed:da:b9:f6:77:e8:a5:88:b7:c0:07:45:0b:4d:e3: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.114.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8253 Signature Algorithm: sha256WithRSAEncryption 05:62:e2:8c:53:4b:a3:8e:04:e8:74:a6:43:01:90:4f:a3:3c: e8:4d:f8:eb:07:1b:9a:42:43:61:2f:e3:d4:85:97:fe:07:27: cf:84:53:aa:18:27:86:be:51:9b:d6:0a:a0:d7:64:f4:20:17: 31:16:11:94:fd:fa:2b:10:35:7d:09:d3:0d:e4:f7:e9:6c:fe: aa:1f:c2:45:50:57:fb:4f:f3:73:c2:7d:d8:a6:aa:25:59:68: cf:d4:a1:c1:e6:56:e8:b4:6b:d4:3b:18:a4:e0:b3:cc:5f:d4: e8:07:9d:a8:b1:56:1e:35:d3:d9:52:0d:a6:6a:b8:3d:0e:31: ee:ce:46:8d:d5:74:16:61:ed:d4:09:0c:7a:8c:7f:f9:e6:c5: 78:f6:85:c4:93:eb:66:5e:5f:1a:e0:86:15:63:98:55:3b:e0: 34:37:36:a1:79:87:32:af:92:22:59:78:a2:0e:b8:65:bd:cb: aa:52:4d:9d:99:eb:d9:12:54:e5:98:27:db:18:17:14:41:5d: 1a:20:fc:cb:87:9d:da:1e:0b:f7:08:24:fb:da:b7:0d:c3:51: 7b:45:d5:d7:c2:a5:36:c8:5b:68:64:68:14:bf:6b:c3:70:df: fe:7d:4b:24:f4:b0:51:4f:4e:2e:2d:3e:f9:79:6f:71:2b:68: 4d:dc:47:8e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6yETXaZiaAzTGMFgR31cHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTgyMzk1MDAxYjAzYzY2MzUwOTkwOTk3OWRmYjc4NDQ1YjNkOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjGceryj8vvd1vtkfRbFTHrm4Oab t/HJO0sZhRbHnA3hK2xZLMNiGln1p+1MBc/z6QqBK8LHAJMFj5fm2fh/FukSolDq 4c1wWX9mo8I+eu0TiNPCoOC7vWgEI6Q+gvyscnmPA4d/7DO4coKVTVrDyKZ26mK5 qbJFIEhxCOutbloW0MWSLAQKiLfXd6dxz/9tu33ZlRoBg4ttS1nqEldfqTpbaqPD v4dnFH1Yk6DNia20+GjY0sOIIr4cs7vONPtLYBcw9H0D9Bxfvor4m6VPElSxakWT 6ugFjlRo5JOZuGZDlrQhFZkJYJvQcKLo9Yrt2rn2d+iliLfAB0ULTeOD/wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFO6COVABsDxmNQmQmXnft4RFs9nEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2VmMmEw MS1kOGNhLTRiOTQtOGY2Ny03OGVhODNkMjEyNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvZWYyYTAx LWQ4Y2EtNGI5NC04ZjY3LTc4ZWE4M2QyMTI0OS8xLzdvSTVVQUd3UEdZMUNaQ1pl ZC0zaEVXejJjUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwGxyMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiA9MA0GCSqGSIb3DQEBCwUAA4IBAQAFYuKMU0ujjgTodKZDAZBPozzoTfjrBxua QkNhL+PUhZf+ByfPhFOqGCeGvlGb1gqg12T0IBcxFhGU/forEDV9CdMN5PfpbP6q H8JFUFf7T/Nzwn3YpqolWWjP1KHB5lbotGvUOxik4LPMX9ToB52osVYeNdPZUg2m arg9DjHuzkaN1XQWYe3UCQx6jH/55sV49oXEk+tmXl8a4IYVY5hVO+A0NzaheYcy r5IiWXiiDrhlvcuqUk2dmevZElTlmCfbGBcUQV0aIPzLh53aHgv3CCT72rcNw1F7 RdXXwqU2yFtoZGgUv2vDcN/+fUsk9LBRT04uLT75eW9xK2hN3EeO -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:14 2026 by rpki-client