This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer File: p7He9pWIXq3lzMi0vioCuxYHnpw.cer (raw, json) Hash identifier: gsP5Lshug2VQU9TrWDC4VJpB9SDFWF7vkXJzpZSi4gM= Subject key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354671E8E25580941EE1480DB3EA48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204648 IP: 173.255.144.0/21 IP: 193.17.36.0/22 IP: 2a07:ee40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:46:71:e8:e2:55:80:94:1e:e1:48:0d:b3:ea:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:8b:65:9f:51:c7:05:1a:de:99:f6:1c:76: 11:16:a0:75:9d:dd:1c:7e:64:d2:49:47:2e:67:7c: e9:92:39:db:ab:c6:0f:6f:7a:74:31:dd:6c:b6:65: 70:6a:8c:3b:d6:e5:06:e9:7f:bb:4c:94:59:12:5d: 57:fe:5b:37:3d:7b:d4:e0:2f:16:43:fd:fd:8a:8a: f5:db:a3:94:bd:d9:f8:7f:a5:ac:5d:39:b3:5d:cf: a2:5a:1d:09:db:46:2e:4c:f0:9e:e6:f2:93:e8:3d: b6:fe:0b:34:e7:91:61:25:ee:19:7d:a5:63:5e:b6: 97:d1:ed:ca:1f:93:8b:10:58:7f:83:c5:2c:c3:cc: 8a:54:69:2e:a1:ae:72:e4:31:09:6d:4e:bd:9b:e9: 06:6f:a9:01:1b:aa:11:0a:c9:f2:c4:9c:91:d5:c0: 4e:48:c7:8f:78:2d:fd:1d:56:7b:39:ff:9a:c0:94: fb:22:59:2d:64:b0:82:10:7f:63:3d:d3:b4:e3:9d: 97:88:5b:66:7e:7d:ee:63:7e:9d:88:a9:e7:d7:01: 1b:76:2e:80:3e:ea:08:09:99:2b:a4:81:20:ad:46: 66:06:b9:b0:b4:2c:c3:6a:97:a2:a8:65:86:ef:84: a9:50:40:61:a6:96:c5:cd:df:49:5a:e9:66:c0:2c: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.255.144.0/21 193.17.36.0/22 IPv6: 2a07:ee40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204648 Signature Algorithm: sha256WithRSAEncryption b0:12:6e:2f:51:7b:c5:27:a6:01:39:5b:0c:dd:58:87:e8:7f: 5d:6e:4b:e8:20:e0:76:48:61:63:e3:a1:f9:ce:57:65:40:2c: 48:90:5f:10:41:ba:cb:0c:68:8d:d9:b1:b1:00:c6:65:a8:cf: f6:28:d9:cd:45:e2:b1:a4:66:74:ae:c8:49:00:5d:da:e2:ed: 4c:60:fb:03:2f:ad:4b:d2:98:18:ea:a8:c3:b1:ce:e1:1f:5d: c4:db:ed:03:ce:04:4a:79:e6:2a:1c:8e:dd:e3:67:ac:1e:05: 2b:61:79:40:ee:f5:75:22:02:89:84:ae:d8:90:9f:d3:c1:22: b6:08:c1:1e:d4:27:40:b5:06:69:48:8c:9c:3e:3b:2a:01:5a: 73:ac:df:fd:d6:48:5e:53:7f:70:8f:03:d7:77:4e:dd:64:b2: 8a:58:c2:bc:9a:be:07:8d:1b:44:96:af:9c:92:b6:a9:0e:9a: e2:21:d6:a0:56:0c:70:77:bb:92:e8:09:83:5a:79:c4:0b:7f: e6:64:f9:87:e8:df:3d:bf:91:38:a7:a8:00:e5:d8:36:3e:16: b9:af:48:2a:f6:f9:e5:b5:cd:ef:51:5e:9e:79:a4:70:5b:de: a1:64:d2:ca:fc:33:63:45:d7:ea:26:88:3f:5d:da:e5:61:64: a4:9c:62:d8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NUZx6OJVgJQe4UgNs+pIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2IxZGVmNjk1ODg1ZWFkZTVjY2M4YjRiZTJhMDJiYjE2MDc5ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfCLZZ9RxwUa3pn2HHYRFqB1nd0c fmTSSUcuZ3zpkjnbq8YPb3p0Md1stmVwaow71uUG6X+7TJRZEl1X/ls3PXvU4C8W Q/39ior126OUvdn4f6WsXTmzXc+iWh0J20YuTPCe5vKT6D22/gs055FhJe4ZfaVj XraX0e3KH5OLEFh/g8Usw8yKVGkuoa5y5DEJbU69m+kGb6kBG6oRCsnyxJyR1cBO SMePeC39HVZ7Of+awJT7IlktZLCCEH9jPdO0452XiFtmfn3uY36diKnn1wEbdi6A PuoICZkrpIEgrUZmBrmwtCzDapeiqGWG74SpUEBhppbFzd9JWulmwCwaMwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKex3vaViF6t5czItL4qArsWB56cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzY4OGNh ZS01Zjk2LTQ4NzUtODcwMS05NDRlY2VjN2E0MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNjg4Y2Fl LTVmOTYtNDg3NS04NzAxLTk0NGVjZWM3YTQyMy8xL3A3SGU5cFdJWHEzbHpNaTB2 aW9DdXhZSG5wdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDrf+QAwQCwREkMA0EAgACMAcDBQMqB+5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMfaDANBgkqhkiG9w0BAQsFAAOCAQEAsBJu L1F7xSemATlbDN1Yh+h/XW5L6CDgdkhhY+Oh+c5XZUAsSJBfEEG6ywxojdmxsQDG ZajP9ijZzUXisaRmdK7ISQBd2uLtTGD7Ay+tS9KYGOqow7HO4R9dxNvtA84ESnnm KhyO3eNnrB4FK2F5QO71dSICiYSu2JCf08EitgjBHtQnQLUGaUiMnD47KgFac6zf /dZIXlN/cI8D13dO3WSyiljCvJq+B40bRJavnJK2qQ6a4iHWoFYMcHe7kugJg1p5 xAt/5mT5h+jfPb+ROKeoAOXYNj4Wua9IKvb55bXN71FennmkcFveoWTSyvwzY0XX 6iaIP13a5WFkpJxi2A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:59 2026 by rpki-client