This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.cer (raw, json) Hash identifier: n8SVGisTI1nD4jAxJAz78E75SdRjrThO9BIDTfxcyvg= Subject key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8EA35316C65B8163B55F54E171CF656D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 14:50:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208824 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:a3:53:16:c6:5b:81:63:b5:5f:54:e1:71:cf:65:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 14:50:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:1e:48:58:e7:15:11:f3:50:43:a1:65:e0: 8f:77:6a:7c:46:42:6e:93:fa:42:0e:85:4b:c9:17: 25:c2:3e:3c:9f:7a:38:70:0e:28:e6:3d:3b:32:34: 40:7a:d7:f4:72:2f:19:68:f9:b5:d2:f5:05:ad:cc: 5e:fd:e6:eb:5b:6c:74:8b:a5:f2:a9:0d:a9:9b:d4: b3:b5:e8:ca:82:cb:07:1f:7f:7b:b5:38:f8:0b:37: 4d:30:30:e7:2e:e0:f0:e8:90:41:be:0f:16:99:cf: 19:cd:3a:6f:73:3b:c6:2a:19:27:0e:72:dd:c2:57: a6:39:38:95:1e:a8:76:65:96:2c:26:0d:fd:ea:97: b3:e9:9e:67:33:8c:05:0f:05:61:6d:d8:a0:8a:62: ac:73:63:fe:93:10:8e:6e:7a:e0:0a:93:13:0d:ec: 02:15:4d:3d:11:7a:93:13:2f:a8:21:05:02:7d:22: f3:0d:88:ad:24:cb:7b:b4:91:9b:73:3e:e4:12:39: 65:47:89:64:01:a0:cb:78:e0:98:03:06:ea:d3:f9: fb:ce:6d:25:9c:ff:f7:30:3e:58:ce:2f:53:aa:03: 85:46:90:bd:47:85:16:7b:c4:42:5d:84:4d:b5:66: e2:de:9a:e4:4d:47:95:17:5f:9e:6b:fc:00:41:86: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208824 Signature Algorithm: sha256WithRSAEncryption 46:22:9f:f0:84:10:9e:e8:61:11:4b:51:73:be:f6:48:54:92: 48:3f:64:5f:cc:b3:02:de:68:cd:be:d9:e2:e6:3d:3d:0e:54: 0f:32:2b:9f:66:5c:d4:69:68:37:f2:e7:5a:ac:06:de:66:1f: 20:6c:4e:b6:b4:10:14:c7:e4:03:75:03:29:e6:3f:93:45:cd: 29:2b:8a:b9:62:7f:2b:c0:ea:4a:b5:12:67:06:15:8e:54:16: 63:92:5d:36:c9:40:3d:ea:0f:2a:97:7c:6a:a1:33:f8:60:64: 82:af:11:d5:8d:9b:aa:53:78:d6:be:df:97:cc:fa:fe:16:32: 5c:64:c8:9b:d8:d7:eb:ef:dc:7e:d6:8d:bc:84:38:22:39:6c: a8:5a:9a:29:b2:6e:07:b1:f8:ee:f2:ad:d1:a9:c8:22:30:ee: 2b:55:e8:a0:41:7b:17:04:8d:47:0b:b0:bf:3c:ef:4b:1d:ae: 42:51:2e:3c:26:dc:df:8c:4c:bb:db:b4:48:b2:68:88:29:32: fe:0f:ef:89:52:82:f6:58:6c:75:bc:b8:17:c3:56:42:87:11: 4b:8d:70:3a:39:16:3d:45:2a:f5:13:8e:ff:4f:32:c3:41:e5: 9d:d1:95:40:65:63:ad:01:44:64:9e:b1:cb:d8:7e:52:69:a4: 8c:f9:a7:5a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZuOo1MWxluBY7VfVOFxz2VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTQ1MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRlMTNiOTdhN2M3NzhhZDgwMTNmYWZmYTJiMWJiNjQ4NzYyY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEYeSFjnFRHzUEOhZeCPd2p8RkJu k/pCDoVLyRclwj48n3o4cA4o5j07MjRAetf0ci8ZaPm10vUFrcxe/ebrW2x0i6Xy qQ2pm9SztejKgssHH397tTj4CzdNMDDnLuDw6JBBvg8Wmc8ZzTpvczvGKhknDnLd wlemOTiVHqh2ZZYsJg396pez6Z5nM4wFDwVhbdigimKsc2P+kxCObnrgCpMTDewC FU09EXqTEy+oIQUCfSLzDYitJMt7tJGbcz7kEjllR4lkAaDLeOCYAwbq0/n7zm0l nP/3MD5Yzi9TqgOFRpC9R4UWe8RCXYRNtWbi3prkTUeVF1+ea/wAQYa50QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFO7eE7l6fHeK2AE/r/orG7ZIdiz8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzA5MmMx Yy0yMmZiLTQ4YWItYmU5Yy1hNTIwZGU3NTlhNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvMDkyYzFj LTIyZmItNDhhYi1iZTljLWE1MjBkZTc1OWE1MC8xLzd0NFR1WHA4ZDRyWUFULXYt aXNidGtoMkxQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvuDANBgkqhkiG9w0BAQsFAAOCAQEARiKf8IQQnuhh EUtRc772SFSSSD9kX8yzAt5ozb7Z4uY9PQ5UDzIrn2Zc1GloN/LnWqwG3mYfIGxO trQQFMfkA3UDKeY/k0XNKSuKuWJ/K8DqSrUSZwYVjlQWY5JdNslAPeoPKpd8aqEz +GBkgq8R1Y2bqlN41r7fl8z6/hYyXGTIm9jX6+/cftaNvIQ4IjlsqFqaKbJuB7H4 7vKt0anIIjDuK1XooEF7FwSNRwuwvzzvSx2uQlEuPCbc34xMu9u0SLJoiCky/g/v iVKC9lhsdby4F8NWQocRS41wOjkWPUUq9ROO/08yw0HlndGVQGVjrQFEZJ6xy9h+ UmmkjPmnWg== -----END CERTIFICATE-----Generated at Tue Jan 20 02:13:43 2026 by rpki-client