This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.cer (raw, json) Hash identifier: 198ILkXRRQC27zzlniE1ZbOVJk4cJqI72Z+34obrLC8= Subject key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E6BE90549474DD54F14C1EFBDAF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203536 IP: 185.63.8.0/22 IP: 188.116.42.0/23 IP: 2a03:920::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:be:90:54:94:74:dd:54:f1:4c:1e:fb:da:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:d9:a9:b7:8e:bb:65:2d:6c:e4:3a:41:31: 54:f1:de:2d:79:3d:20:2c:32:f0:ea:30:e3:c6:fc: ae:ca:82:04:f6:1e:b1:e8:14:5d:02:20:bd:3e:58: 38:b2:ae:1d:05:c4:2a:fe:a4:55:5a:4e:d0:e6:f3: 3a:03:5e:88:f5:fc:6b:2b:fc:4a:74:1e:ff:c2:cf: 16:ca:c8:cd:ea:0d:12:53:a0:aa:64:f3:19:1f:27: 6d:08:08:47:9e:e8:03:f0:f7:54:77:ea:a5:67:cc: 96:e2:c0:0d:6b:52:ce:ad:b8:1b:58:c0:dc:19:c2: 82:f7:b2:08:80:a0:f6:00:b6:98:90:e4:7d:65:ad: 08:8e:fe:ed:17:60:d1:2d:60:f0:7d:c0:be:3d:f3: 3a:a8:45:60:22:6e:26:06:9f:58:fd:59:c8:17:f5: 19:0b:b7:45:12:9a:ad:a9:31:87:b3:2c:49:18:54: 51:eb:ea:1a:81:32:93:0c:78:3f:d7:d6:c4:5a:d8: 87:9c:1c:4e:13:c5:3a:8b:b6:2e:99:f6:5e:cc:99: 86:cb:a9:95:cf:62:16:ce:93:20:13:78:10:58:9e: 7c:36:e9:32:c8:28:3c:03:ea:b2:51:a0:9b:a0:e4: 38:6f:1e:6b:be:fb:67:e2:3e:54:f1:36:61:09:58: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.8.0/22 188.116.42.0/23 IPv6: 2a03:920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203536 Signature Algorithm: sha256WithRSAEncryption 6a:86:53:f2:42:25:64:7a:00:0a:7e:aa:d3:f0:4f:4e:70:4b: c8:5a:cb:a6:de:66:e3:20:07:9b:9f:13:e4:d3:77:7b:89:46: 7d:99:62:02:9d:dc:d1:2e:25:64:24:cf:3b:e9:f4:33:90:4b: 28:64:93:1b:4c:01:26:c0:bd:42:c3:e8:56:d3:f6:46:44:f1: 9c:26:77:66:70:a0:83:4a:13:bb:43:75:e2:69:de:69:2e:3a: 49:bd:f1:73:5b:2b:f4:99:f8:26:28:ec:89:e8:6d:bf:47:2c: 7f:e5:21:04:02:6a:00:93:2b:8d:1f:9f:3a:aa:96:91:dd:22: 39:76:32:35:1c:8b:37:69:fb:65:0c:b2:a2:80:04:be:01:57: 79:b0:30:0a:41:ad:5c:e6:03:0f:08:bf:a6:e1:13:1e:c7:47: d0:20:28:ce:50:51:0f:ef:6f:67:3e:a1:ee:f6:53:6a:32:42: f6:0a:b9:bc:5c:eb:38:a7:e9:91:31:b5:1d:29:e2:22:49:60: 17:83:ca:0d:e0:5a:a8:c7:65:f3:d7:86:e4:90:cb:e4:fc:59: 0e:31:4f:ca:a0:ae:d5:c9:02:ec:dc:77:32:37:a5:ce:29:f8: 21:4d:84:bb:1d:ad:ec:ec:45:24:35:2d:b0:cc:b4:95:a1:91: 4e:fd:fd:ce -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OOa+kFSUdN1U8Uwe+9r3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTgzYmM0NThhMzY5NmQ2NTJmYmVmODYzZTVlZTQwZjAwOTZmMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGrZqbeOu2UtbOQ6QTFU8d4teT0g LDLw6jDjxvyuyoIE9h6x6BRdAiC9Plg4sq4dBcQq/qRVWk7Q5vM6A16I9fxrK/xK dB7/ws8WysjN6g0SU6CqZPMZHydtCAhHnugD8PdUd+qlZ8yW4sANa1LOrbgbWMDc GcKC97IIgKD2ALaYkOR9Za0Ijv7tF2DRLWDwfcC+PfM6qEVgIm4mBp9Y/VnIF/UZ C7dFEpqtqTGHsyxJGFRR6+oagTKTDHg/19bEWtiHnBxOE8U6i7YumfZezJmGy6mV z2IWzpMgE3gQWJ58NukyyCg8A+qyUaCboOQ4bx5rvvtn4j5U8TZhCVhe1wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFO6DvEWKNpbWUvvvhj5e5A8AlvGXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzI3NGY1 Yy1hN2JjLTQ2NGQtOTY2Ni03YzI4MWQwN2UxNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMjc0ZjVj LWE3YmMtNDY0ZC05NjY2LTdjMjgxZDA3ZTE1NS8xLzdvTzhSWW8ybHRaUy0tLUdQ bDdrRHdDVzhaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuT8IAwQBvHQqMA0EAgACMAcDBQAqAwkgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbEDANBgkqhkiG9w0BAQsFAAOCAQEAaoZT 8kIlZHoACn6q0/BPTnBLyFrLpt5m4yAHm58T5NN3e4lGfZliAp3c0S4lZCTPO+n0 M5BLKGSTG0wBJsC9QsPoVtP2RkTxnCZ3ZnCgg0oTu0N14mneaS46Sb3xc1sr9Jn4 Jijsiehtv0csf+UhBAJqAJMrjR+fOqqWkd0iOXYyNRyLN2n7ZQyyooAEvgFXebAw CkGtXOYDDwi/puETHsdH0CAozlBRD+9vZz6h7vZTajJC9gq5vFzrOKfpkTG1HSni IklgF4PKDeBaqMdl89eG5JDL5PxZDjFPyqCu1ckC7Nx3Mjelzin4IU2Eux2t7OxF JDUtsMy0laGRTv39zg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:46 2026 by rpki-client