This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer File: p-7aZdzUOH1yJwBcHhOgbUSHe28.cer (raw, json) Hash identifier: 8/9F4q2kSIqxsI2XBJbhsc1uDN8jaYGDIMBFcQ7G/Hw= Subject key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83DB162560E38C851395C276F54675 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.177.148.0/22 IP: 2a0a:3d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:db:16:25:60:e3:8c:85:13:95:c2:76:f5:46:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:71:8a:b0:98:2f:bb:b4:d9:b7:6b:17:86: 98:86:f4:06:07:06:d4:4f:14:c7:01:c4:6f:0d:04: 00:3d:62:49:2d:de:a6:95:02:6d:b2:ea:bf:52:07: 25:c6:c1:98:7c:d3:2b:f4:7d:ab:7c:fe:67:99:04: f5:cd:12:ea:ef:6d:0d:04:67:4c:f8:f7:13:ef:03: f2:69:c5:32:00:9a:f7:ef:35:78:15:73:2b:8a:d7: d0:7f:d5:b7:ea:b1:63:08:53:e8:9c:ce:7d:ef:1c: 8f:4a:49:c4:30:54:17:37:11:2f:1e:35:3d:9a:91: 5c:f7:89:d6:d1:dd:c7:ea:f7:a0:82:26:16:97:5f: 36:65:87:cb:49:4c:d9:96:bc:54:c3:65:14:40:21: b2:ce:a1:70:31:1b:f5:01:0a:a2:2d:61:ae:e6:be: 7c:43:4f:42:84:ed:22:1d:6f:20:a7:e1:9b:3d:15: cd:79:ab:20:63:c6:51:aa:0c:9f:24:d7:58:35:16: 49:21:6c:54:15:ce:d6:f4:d2:b8:27:c1:73:ec:c7: 85:56:3f:ed:b3:00:8d:fb:23:83:ed:69:b8:9c:aa: d6:d1:52:6a:c3:4e:b7:af:e3:dd:4f:3a:7e:ae:30: 62:7c:90:db:62:4e:28:d6:41:7b:f6:12:1d:4a:fb: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.148.0/22 IPv6: 2a0a:3d80::/29 Signature Algorithm: sha256WithRSAEncryption 6d:c7:9a:bc:3e:dc:b2:02:e9:75:68:2c:9d:6e:dc:d6:06:8f: 26:04:c0:ee:5b:c9:63:9f:21:64:4a:aa:02:ec:74:64:a1:d7: b5:60:f8:a0:5e:d7:7c:02:be:fe:4b:92:f5:03:a8:e5:f8:75: f3:a8:54:fe:22:04:88:62:27:4b:a1:10:91:05:a9:f2:84:6a: e8:ba:93:af:ee:31:a5:b9:e8:a4:aa:0f:15:67:f3:f4:85:43: c0:fd:05:0e:8a:ab:48:65:2d:d0:31:2c:17:6b:16:0d:23:4a: 3c:ed:a9:9f:06:83:c5:26:71:f0:f4:54:b3:f4:5f:21:10:6f: 3b:d7:07:9e:e4:3b:54:d2:55:db:a9:5f:30:a1:87:5e:2b:0d: 56:cf:8a:60:bc:a6:b6:2c:b3:57:4d:d6:1e:c0:dc:6b:6a:cf: 24:3e:0c:de:16:dd:eb:51:1b:74:e5:90:03:1d:54:6f:58:11: 90:d0:e1:5a:76:2e:bc:33:7b:43:fc:2f:80:e2:c2:f6:dd:28: 19:c0:73:18:e9:f0:1c:36:4f:88:fb:bd:4d:6b:fb:46:e4:1d: 44:b0:0a:7e:0e:be:72:4c:25:e4:ed:01:2d:65:32:24:ed:6e: 15:ee:ba:1a:56:5f:b1:ec:74:5c:91:8a:3a:a4:2d:1b:67:a0: c0:82:46:79 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/g9sWJWDjjIUTlcJ29UZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2VlZGE2NWRjZDQzODdkNzIyNzAwNWMxZTEzYTA2ZDQ0ODc3YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttRxirCYL7u02bdrF4aYhvQGBwbU TxTHAcRvDQQAPWJJLd6mlQJtsuq/UgclxsGYfNMr9H2rfP5nmQT1zRLq720NBGdM +PcT7wPyacUyAJr37zV4FXMritfQf9W36rFjCFPonM597xyPSknEMFQXNxEvHjU9 mpFc94nW0d3H6veggiYWl182ZYfLSUzZlrxUw2UUQCGyzqFwMRv1AQqiLWGu5r58 Q09ChO0iHW8gp+GbPRXNeasgY8ZRqgyfJNdYNRZJIWxUFc7W9NK4J8Fz7MeFVj/t swCN+yOD7Wm4nKrW0VJqw063r+PdTzp+rjBifJDbYk4o1kF79hIdSvtPVwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2U1OTE2 OC04MmQyLTQ1NWUtOGY4OC1jMTU1Zjk1NDM2ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvZTU5MTY4 LTgyZDItNDU1ZS04Zjg4LWMxNTVmOTU0MzZlMS8xL3AtN2FaZHpVT0gxeUp3QmNI aE9nYlVTSGUyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubGUMA0EAgACMAcDBQMqCj2AMA0GCSqGSIb3 DQEBCwUAA4IBAQBtx5q8PtyyAul1aCydbtzWBo8mBMDuW8ljnyFkSqoC7HRkode1 YPigXtd8Ar7+S5L1A6jl+HXzqFT+IgSIYidLoRCRBanyhGroupOv7jGlueikqg8V Z/P0hUPA/QUOiqtIZS3QMSwXaxYNI0o87amfBoPFJnHw9FSz9F8hEG871wee5DtU 0lXbqV8woYdeKw1Wz4pgvKa2LLNXTdYewNxras8kPgzeFt3rURt05ZADHVRvWBGQ 0OFadi68M3tD/C+A4sL23SgZwHMY6fAcNk+I+71Na/tG5B1EsAp+Dr5yTCXk7QEt ZTIk7W4V7roaVl+x7HRckYo6pC0bZ6DAgkZ5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:07 2026 by rpki-client