This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer File: T7EQS7paPx3dLe67o0gZGfT5YaQ.cer (raw, json) Hash identifier: GWr45Bhr4HsElaiLswNZCjSiIxEqjXn7/dC3ykK8IDo= Subject key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3845DB53EEA338D6765B53D3BDA8FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35343 IP: 193.47.136.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:45:db:53:ee:a3:38:d6:76:5b:53:d3:bd:a8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:0d:27:0b:a3:66:2b:96:c1:f1:da:1e:ee: da:78:20:6b:a6:6b:7a:fc:47:b0:f3:d1:13:89:2a: 21:f8:87:65:d8:fe:a8:a5:4e:51:81:1d:4c:9f:cc: b7:3a:dc:07:e3:21:ff:5c:10:be:44:3a:ff:f4:ff: 94:5d:ee:00:44:b1:7d:77:9e:63:ba:4f:b7:a8:4b: d6:23:4f:11:57:55:b9:fd:a0:69:2f:ba:b1:dd:75: 23:5d:6c:90:95:3c:68:2d:ee:b9:21:e5:f6:fc:37: c1:1d:b1:cf:1a:c3:e0:a6:8d:82:61:da:65:47:be: be:3d:38:5c:0f:16:a3:3e:31:f2:aa:11:6b:9a:6b: 8c:64:dc:8e:15:84:1a:e8:37:a2:43:13:7f:73:e2: 64:50:fa:f4:9e:91:70:52:a1:9a:75:22:db:44:69: 10:b0:c1:30:6d:49:39:07:d2:31:c7:9e:68:fc:6b: 8f:ca:d9:8f:85:ac:16:17:a3:6c:9c:8c:90:fa:e2: d3:c7:60:b3:fa:53:99:ff:32:5d:fc:e1:27:54:4e: 25:69:4e:a2:82:22:a1:23:3b:a3:aa:8a:71:9e:c8: 66:2c:21:41:f9:57:71:ae:63:e6:c8:f1:ba:02:b2: ba:2f:74:5c:72:13:b8:7b:64:9d:bc:93:ae:aa:0a: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.136.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35343 Signature Algorithm: sha256WithRSAEncryption 67:c5:e2:16:5a:9e:61:b0:af:63:d7:98:fc:ad:77:59:f5:d1: 10:9c:1b:ca:8a:54:b2:f2:ea:0f:5e:e3:34:82:6a:3e:05:46: f1:88:fc:79:06:d5:e4:ff:a8:01:4f:d9:a9:2d:0e:79:67:a2: 61:28:5b:7e:0e:15:0f:d5:ab:92:f6:ff:94:bd:05:19:48:3d: a7:72:0d:27:6a:d0:db:da:62:da:a1:d4:14:5f:49:0f:3c:11: 27:9b:79:23:00:31:ad:ba:97:43:f9:77:83:19:ef:57:61:be: 10:3d:39:34:fe:84:ce:e5:1d:a9:54:8b:2a:8f:d4:84:a1:71: b3:4c:46:20:45:fa:fd:27:b3:8c:b1:75:a3:5b:00:b9:2a:56: ce:84:1e:0f:fc:47:58:57:1c:98:c6:fd:b3:73:d6:3d:4a:51: 50:e0:e6:ed:09:98:9d:64:94:c2:4d:88:0d:66:3d:8c:51:63: 14:c8:65:d3:b1:04:22:41:39:e2:46:da:59:6f:c1:c6:2c:b6: 96:44:c7:1c:13:3f:c2:cc:b2:fc:91:84:b9:83:1c:49:90:ed: 1a:d5:d7:6a:1c:7f:d2:b0:70:c9:5c:94:0a:4d:0f:a2:f9:2f: 8d:e2:c4:9f:7d:6b:25:a9:b6:6a:88:12:c7:87:f7:a3:71:9c: 57:68:84:58 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OEXbU+6jONZ2W1PTvaj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmIxMTA0YmJhNWEzZjFkZGQyZGVlYmJhMzQ4MTkxOWY0Zjk2MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GoNJwujZiuWwfHaHu7aeCBrpmt6 /Eew89ETiSoh+Idl2P6opU5RgR1Mn8y3OtwH4yH/XBC+RDr/9P+UXe4ARLF9d55j uk+3qEvWI08RV1W5/aBpL7qx3XUjXWyQlTxoLe65IeX2/DfBHbHPGsPgpo2CYdpl R76+PThcDxajPjHyqhFrmmuMZNyOFYQa6DeiQxN/c+JkUPr0npFwUqGadSLbRGkQ sMEwbUk5B9Ixx55o/GuPytmPhawWF6NsnIyQ+uLTx2Cz+lOZ/zJd/OEnVE4laU6i giKhIzujqopxnshmLCFB+VdxrmPmyPG6ArK6L3RcchO4e2SdvJOuqgpOzwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3Lzg5ZWU5 NC01MDEwLTQ0YWQtOWUxNy00MzZhYjRhZGUwYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvODllZTk0 LTUwMTAtNDRhZC05ZTE3LTQzNmFiNGFkZTBhNy8xL1Q3RVFTN3BhUHgzZExlNjdv MGdaR2ZUNVlhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwS+IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCKDzANBgkqhkiG9w0BAQsFAAOCAQEAZ8XiFlqeYbCvY9eY/K13WfXREJwbyopU svLqD17jNIJqPgVG8Yj8eQbV5P+oAU/ZqS0OeWeiYShbfg4VD9Wrkvb/lL0FGUg9 p3INJ2rQ29pi2qHUFF9JDzwRJ5t5IwAxrbqXQ/l3gxnvV2G+ED05NP6EzuUdqVSL Ko/UhKFxs0xGIEX6/SezjLF1o1sAuSpWzoQeD/xHWFccmMb9s3PWPUpRUODm7QmY nWSUwk2IDWY9jFFjFMhl07EEIkE54kbaWW/Bxiy2lkTHHBM/wsyy/JGEuYMcSZDt GtXXahx/0rBwyVyUCk0PovkvjeLEn31rJam2aogSx4f3o3GcV2iEWA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:12 2026 by rpki-client