This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer File: IS7ROxq32gkK7kL2rt3f27FWpfg.cer (raw, json) Hash identifier: giT5xTCcQTZLpQkXE8dzrVVoZSbNJ6tSXp0fGoniQ60= Subject key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC24EE52214850D52D55ED3BCF4273 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48626 IP: 193.34.52.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:24:ee:52:21:48:50:d5:2d:55:ed:3b:cf:42:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:dd:eb:06:f0:67:fb:4a:4a:f1:2d:f0:c7: d2:9a:5e:1f:f2:ec:e5:4c:87:4e:76:e4:85:57:ab: a7:b1:d9:eb:34:0c:6a:f7:2e:07:8a:a5:ed:0f:bd: 2f:ff:31:54:f9:38:ba:b1:b1:89:34:5e:36:5a:97: 6f:d1:6a:af:93:49:88:11:64:fa:e9:35:8f:19:fb: fd:67:e4:df:80:75:9c:1a:0b:5e:d6:97:e4:da:71: 7d:c5:44:ef:94:da:6d:48:05:a4:27:3e:9a:9a:4a: 66:de:4f:f3:0d:05:d9:82:6b:d3:fa:a0:9b:dc:06: 31:7b:df:a3:56:26:6c:28:d0:ab:a5:6b:50:59:55: f0:5a:68:7a:15:39:55:fa:51:81:e9:7c:8d:3b:3f: 53:51:50:43:3e:55:48:16:6e:52:6e:bb:1a:c0:8d: 94:d8:5e:44:0e:1a:99:d1:7c:e4:b1:4e:83:fe:45: 8d:c8:b1:46:86:c1:5b:74:c8:cf:1b:27:f4:ac:ca: 47:ff:48:7b:82:0e:18:33:c5:1b:38:84:db:4a:d6: 7b:10:77:8c:1f:e9:72:41:58:b4:e7:59:47:22:a8: 72:6c:00:4a:25:8a:6f:3b:50:f2:21:4a:22:85:42: b8:09:88:10:ea:af:9c:ee:6a:d8:13:28:9f:78:29: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48626 Signature Algorithm: sha256WithRSAEncryption 21:d8:9d:c4:e3:34:5b:42:1f:d0:a7:58:c2:d9:5c:64:98:c4: b4:0c:99:07:4f:7b:e7:de:7a:f8:db:c4:80:3d:5a:24:83:fc: bd:0c:91:19:31:07:4f:ba:0d:22:8b:d2:fe:21:35:aa:d6:e6: f5:52:77:fc:96:ed:03:e9:02:21:ef:88:09:c4:f1:90:11:68: bc:73:21:99:72:f0:19:da:0a:9b:db:10:42:8f:33:fc:7f:f3: 5a:dc:95:37:57:df:88:61:d8:ad:a3:ea:ef:cc:97:3e:c2:03: 4c:33:09:d2:98:5f:0d:88:bb:72:ba:81:bc:89:72:76:4e:9c: a9:2e:85:5d:83:ce:46:f6:4d:e0:2c:38:67:e7:76:d1:67:22: 57:f7:5a:8f:62:52:49:dd:a8:87:3b:15:d9:b6:f4:ce:d3:3d: dc:c8:d7:55:c1:74:45:e1:d4:e3:dc:a1:88:36:c8:32:c5:8a: 32:69:5e:cc:88:10:4f:56:be:e0:71:9e:92:b4:a6:14:99:03: a9:ea:07:f1:81:a8:64:77:a6:5b:98:1f:0f:47:c8:17:82:ad: 0d:66:50:7e:e6:49:2b:c2:2f:2a:84:25:27:fe:26:05:79:b8: 83:30:1f:4a:2f:01:d3:d1:bc:e1:42:db:aa:05:56:aa:b7:ed: 4a:69:52:d8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57CTuUiFIUNUtVe07z0JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTJlZDEzYjFhYjdkYTA5MGFlZTQyZjZhZWRkZGZkYmIxNTZhNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsDd6wbwZ/tKSvEt8MfSml4f8uzl TIdOduSFV6unsdnrNAxq9y4HiqXtD70v/zFU+Ti6sbGJNF42Wpdv0Wqvk0mIEWT6 6TWPGfv9Z+TfgHWcGgte1pfk2nF9xUTvlNptSAWkJz6amkpm3k/zDQXZgmvT+qCb 3AYxe9+jViZsKNCrpWtQWVXwWmh6FTlV+lGB6XyNOz9TUVBDPlVIFm5SbrsawI2U 2F5EDhqZ0XzksU6D/kWNyLFGhsFbdMjPGyf0rMpH/0h7gg4YM8UbOITbStZ7EHeM H+lyQVi051lHIqhybABKJYpvO1DyIUoihUK4CYgQ6q+c7mrYEyifeCn3PwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCEu0Tsat9oJCu5C9q7d39uxVqX4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzcyNjg2 OS1iZDUzLTRkNzUtYjdlMi0zNDM0OTMzMWQxMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzI2ODY5 LWJkNTMtNGQ3NS1iN2UyLTM0MzQ5MzMxZDEwNC8xL0lTN1JPeHEzMmdrSzdrTDJy dDNmMjdGV3BmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwSI0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC98jANBgkqhkiG9w0BAQsFAAOCAQEAIdidxOM0W0If0KdYwtlcZJjEtAyZB097 5956+NvEgD1aJIP8vQyRGTEHT7oNIovS/iE1qtbm9VJ3/JbtA+kCIe+ICcTxkBFo vHMhmXLwGdoKm9sQQo8z/H/zWtyVN1ffiGHYraPq78yXPsIDTDMJ0phfDYi7crqB vIlydk6cqS6FXYPORvZN4Cw4Z+d20WciV/daj2JSSd2ohzsV2bb0ztM93MjXVcF0 ReHU49yhiDbIMsWKMmlezIgQT1a+4HGekrSmFJkDqeoH8YGoZHemW5gfD0fIF4Kt DWZQfuZJK8IvKoQlJ/4mBXm4gzAfSi8B09G84ULbqgVWqrftSmlS2A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:56 2026 by rpki-client