This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer File: s7b1TqmxWovU8zglOGyyd7A0Od0.cer (raw, json) Hash identifier: Qm9dsFvNncXyL5R4LmzPnPfusBpbuiP6DhDirdp8058= Subject key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B26ECFDC60641F7BFE3E4B97851D8257D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 11:30:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42184 IP: 45.82.124.0/22 IP: 91.190.224.0/21 IP: 178.251.8.0/21 IP: 185.64.168.0/22 IP: 185.124.232.0/22 IP: 185.143.168.0/22 IP: 185.153.140.0/22 IP: 188.64.248.0/21 IP: 194.15.152.0/22 IP: 2a02:f08::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:ec:fd:c6:06:41:f7:bf:e3:e4:b9:78:51:d8:25:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 11:30:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:ae:8c:e1:43:be:45:57:f9:e6:04:df:bc: 9a:55:f5:f3:2e:0b:78:aa:e7:0d:5e:a0:06:af:44: 57:43:92:8e:e6:bd:a0:ba:5a:87:fc:e7:e8:d3:b3: 1a:ff:cb:b4:bc:06:19:77:34:41:43:20:ae:87:dd: 86:90:6e:5f:5b:4a:27:08:d2:9b:92:27:f4:da:a7: f1:9a:e9:a8:0c:20:ed:74:9a:67:44:a9:c8:3c:9c: 58:5a:f3:0a:6b:16:01:71:87:c5:3a:24:d2:cc:f3: aa:ed:f3:65:8d:47:12:5e:5e:20:06:f2:8a:22:de: d5:21:66:93:88:4e:96:a8:62:89:39:8f:e7:dc:72: 97:6f:2a:5f:47:08:c3:21:29:c5:4d:d5:06:a4:0a: c7:15:ac:71:8f:d7:b5:fa:7f:2a:12:cd:84:3c:bd: 48:3b:50:74:03:1f:02:b0:17:38:ff:b9:d3:26:52: 2f:04:c2:36:13:a0:d4:e7:a9:63:d1:73:39:cd:68: 25:47:e1:f9:1b:47:03:05:4e:0b:ea:ce:98:b5:52: 27:34:cc:fe:4c:1a:dc:88:90:7f:de:60:bf:c5:df: c4:93:5d:6b:a8:51:0a:97:2b:ed:1a:51:47:51:ea: 86:dd:b8:6b:ab:50:34:bd:9f:f8:d8:15:1e:08:8b: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.124.0/22 91.190.224.0/21 178.251.8.0/21 185.64.168.0/22 185.124.232.0/22 185.143.168.0/22 185.153.140.0/22 188.64.248.0/21 194.15.152.0/22 IPv6: 2a02:f08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42184 Signature Algorithm: sha256WithRSAEncryption 65:68:02:18:6f:7c:9f:20:fc:63:4b:48:62:17:f5:b1:8a:ad: ff:94:29:87:7d:fa:89:2f:c2:68:ce:03:6f:16:90:55:36:87: a7:c9:e7:93:f2:15:ec:13:ee:35:bf:52:a7:ef:d4:77:21:2c: 00:a6:8d:90:23:ba:90:d5:d4:25:7f:37:40:f8:0a:ee:b1:0f: 2d:00:2a:99:c1:a5:89:eb:c9:d0:f4:45:a6:24:27:94:84:08: bf:86:03:12:87:57:e2:49:14:7d:b9:ba:47:af:5f:62:15:f3: cc:70:44:f0:d2:3a:af:d7:44:de:9b:f4:f6:62:58:39:1a:c1: 24:92:51:e0:9a:3c:22:a8:24:f0:de:7a:6d:ab:47:65:52:42: 2d:50:e8:af:a2:53:f6:e9:9d:aa:f5:9b:a4:fa:cf:c6:35:17: d1:e0:2a:49:16:f1:bd:5d:0d:15:65:96:15:b7:83:d2:cc:47: f3:3a:54:cd:3c:1c:00:b0:53:a6:91:ff:bc:85:3f:21:2d:b3: 6b:0a:04:98:48:1d:82:46:8d:45:14:49:ad:c8:e4:d1:65:c6: 8b:1c:33:10:0e:69:0b:9c:f8:70:f7:c5:dd:d9:1d:51:c3:91: 47:ef:3d:32:db:d7:76:83:ad:73:da:11:2f:3f:e4:29:d7:87: 43:05:4b:b2 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZsm7P3GBkH3v+PkuXhR2CV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTEzMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I2ZjU0ZWE5YjE1YThiZDRmMzM4MjUzODZjYjI3N2IwMzQzOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNqujOFDvkVX+eYE37yaVfXzLgt4 qucNXqAGr0RXQ5KO5r2gulqH/Ofo07Ma/8u0vAYZdzRBQyCuh92GkG5fW0onCNKb kif02qfxmumoDCDtdJpnRKnIPJxYWvMKaxYBcYfFOiTSzPOq7fNljUcSXl4gBvKK It7VIWaTiE6WqGKJOY/n3HKXbypfRwjDISnFTdUGpArHFaxxj9e1+n8qEs2EPL1I O1B0Ax8CsBc4/7nTJlIvBMI2E6DU56lj0XM5zWglR+H5G0cDBU4L6s6YtVInNMz+ TBrciJB/3mC/xd/Ek11rqFEKlyvtGlFHUeqG3bhrq1A0vZ/42BUeCIuZGQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFLO29U6psVqL1PM4JThssnewNDndMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzhkZTRh My04ZDVhLTQ2YjEtYTczNS0yZjQ2ZTkzMTdjYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvOGRlNGEz LThkNWEtNDZiMS1hNzM1LTJmNDZlOTMxN2NjNi8xL3M3YjFUcW14V292VTh6Z2xP R3l5ZDdBME9kMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCLVJ8AwQDW77gAwQDsvsIAwQCuUCoAwQCuXzo AwQCuY+oAwQCuZmMAwQDvED4AwQCwg+YMA0EAgACMAcDBQAqAg8IMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCkyDANBgkqhkiG9w0BAQsFAAOCAQEAZWgCGG98nyD8 Y0tIYhf1sYqt/5Qph336iS/CaM4DbxaQVTaHp8nnk/IV7BPuNb9Sp+/UdyEsAKaN kCO6kNXUJX83QPgK7rEPLQAqmcGlievJ0PRFpiQnlIQIv4YDEodX4kkUfbm6R69f YhXzzHBE8NI6r9dE3pv09mJYORrBJJJR4Jo8Iqgk8N56batHZVJCLVDor6JT9umd qvWbpPrPxjUX0eAqSRbxvV0NFWWWFbeD0sxH8zpUzTwcALBTppH/vIU/IS2zawoE mEgdgkaNRRRJrcjk0WXGixwzEA5pC5z4cPfF3dkdUcORR+89MtvXdoOtc9oRLz/k KdeHQwVLsg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:57 2025 by rpki-client