This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer File: s7b1TqmxWovU8zglOGyyd7A0Od0.cer (raw, json) Hash identifier: ywU8fK5xoIAPPNo5gW0Bj07BBp5w/IzszjP6rmdCSLc= Subject key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F1AB65A394A282BFDC1335741D7F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42184 IP: 45.82.124.0/22 IP: 91.190.224.0/21 IP: 178.251.8.0/21 IP: 185.64.168.0/22 IP: 185.124.232.0/22 IP: 185.143.168.0/22 IP: 185.153.140.0/22 IP: 188.64.248.0/21 IP: 194.15.152.0/22 IP: 2a02:f08::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1a:b6:5a:39:4a:28:2b:fd:c1:33:57:41:d7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:ae:8c:e1:43:be:45:57:f9:e6:04:df:bc: 9a:55:f5:f3:2e:0b:78:aa:e7:0d:5e:a0:06:af:44: 57:43:92:8e:e6:bd:a0:ba:5a:87:fc:e7:e8:d3:b3: 1a:ff:cb:b4:bc:06:19:77:34:41:43:20:ae:87:dd: 86:90:6e:5f:5b:4a:27:08:d2:9b:92:27:f4:da:a7: f1:9a:e9:a8:0c:20:ed:74:9a:67:44:a9:c8:3c:9c: 58:5a:f3:0a:6b:16:01:71:87:c5:3a:24:d2:cc:f3: aa:ed:f3:65:8d:47:12:5e:5e:20:06:f2:8a:22:de: d5:21:66:93:88:4e:96:a8:62:89:39:8f:e7:dc:72: 97:6f:2a:5f:47:08:c3:21:29:c5:4d:d5:06:a4:0a: c7:15:ac:71:8f:d7:b5:fa:7f:2a:12:cd:84:3c:bd: 48:3b:50:74:03:1f:02:b0:17:38:ff:b9:d3:26:52: 2f:04:c2:36:13:a0:d4:e7:a9:63:d1:73:39:cd:68: 25:47:e1:f9:1b:47:03:05:4e:0b:ea:ce:98:b5:52: 27:34:cc:fe:4c:1a:dc:88:90:7f:de:60:bf:c5:df: c4:93:5d:6b:a8:51:0a:97:2b:ed:1a:51:47:51:ea: 86:dd:b8:6b:ab:50:34:bd:9f:f8:d8:15:1e:08:8b: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.124.0/22 91.190.224.0/21 178.251.8.0/21 185.64.168.0/22 185.124.232.0/22 185.143.168.0/22 185.153.140.0/22 188.64.248.0/21 194.15.152.0/22 IPv6: 2a02:f08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42184 Signature Algorithm: sha256WithRSAEncryption 2b:5f:a0:45:5f:07:db:83:5d:3f:cc:0f:5b:dc:4d:2c:28:54: 92:c9:a2:e4:d8:fa:e4:e6:44:b1:73:fe:93:c0:41:84:31:b8: 74:a3:17:6b:f6:f3:93:03:20:65:a0:10:2b:c9:6d:89:25:4c: 4d:bd:8d:4b:cd:5d:10:d0:3d:08:f0:e5:2c:c9:65:51:b3:7d: 01:d3:7a:80:36:c0:83:be:1b:7c:b9:8d:08:2a:ec:73:a1:d4: 0d:20:6d:c4:a2:41:0b:56:aa:37:af:54:7e:98:cc:fe:87:bb: f5:5d:95:a3:b3:ab:1e:9b:fb:da:bb:aa:49:9f:ac:1d:8a:56: 5b:dc:da:6d:93:83:85:b3:aa:95:47:01:90:3c:29:3e:63:80: fb:06:c8:b8:8d:db:d7:67:27:ae:fa:9c:bd:c3:fb:f4:12:6c: 2d:6c:99:40:ba:90:fe:8a:db:11:cc:e4:e9:64:6c:56:c4:eb: f1:77:a5:f2:06:9f:ca:d0:5a:96:2a:2e:9d:f3:4d:ac:0c:79: 35:82:75:21:77:f4:c3:4a:7f:d8:c1:ab:05:30:4f:ee:7b:62: 63:fe:a9:de:70:5f:f4:88:09:a0:7f:0c:08:c0:a0:ae:0d:97: f2:33:21:f6:ab:e2:c0:34:8f:26:91:dc:6b:74:a9:d0:f7:82: 70:f1:4f:38 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt8fxq2WjlKKCv9wTNXQdfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I2ZjU0ZWE5YjE1YThiZDRmMzM4MjUzODZjYjI3N2IwMzQzOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNqujOFDvkVX+eYE37yaVfXzLgt4 qucNXqAGr0RXQ5KO5r2gulqH/Ofo07Ma/8u0vAYZdzRBQyCuh92GkG5fW0onCNKb kif02qfxmumoDCDtdJpnRKnIPJxYWvMKaxYBcYfFOiTSzPOq7fNljUcSXl4gBvKK It7VIWaTiE6WqGKJOY/n3HKXbypfRwjDISnFTdUGpArHFaxxj9e1+n8qEs2EPL1I O1B0Ax8CsBc4/7nTJlIvBMI2E6DU56lj0XM5zWglR+H5G0cDBU4L6s6YtVInNMz+ TBrciJB/3mC/xd/Ek11rqFEKlyvtGlFHUeqG3bhrq1A0vZ/42BUeCIuZGQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFLO29U6psVqL1PM4JThssnewNDndMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzhkZTRh My04ZDVhLTQ2YjEtYTczNS0yZjQ2ZTkzMTdjYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvOGRlNGEz LThkNWEtNDZiMS1hNzM1LTJmNDZlOTMxN2NjNi8xL3M3YjFUcW14V292VTh6Z2xP R3l5ZDdBME9kMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCLVJ8AwQDW77gAwQDsvsIAwQCuUCoAwQCuXzo AwQCuY+oAwQCuZmMAwQDvED4AwQCwg+YMA0EAgACMAcDBQAqAg8IMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCkyDANBgkqhkiG9w0BAQsFAAOCAQEAK1+gRV8H24Nd P8wPW9xNLChUksmi5Nj65OZEsXP+k8BBhDG4dKMXa/bzkwMgZaAQK8ltiSVMTb2N S81dENA9CPDlLMllUbN9AdN6gDbAg74bfLmNCCrsc6HUDSBtxKJBC1aqN69UfpjM /oe79V2Vo7OrHpv72ruqSZ+sHYpWW9zabZODhbOqlUcBkDwpPmOA+wbIuI3b12cn rvqcvcP79BJsLWyZQLqQ/orbEczk6WRsVsTr8Xel8gafytBaliounfNNrAx5NYJ1 IXf0w0p/2MGrBTBP7ntiY/6p3nBf9IgJoH8MCMCgrg2X8jMh9qviwDSPJpHca3Sp 0PeCcPFPOA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:10 2026 by rpki-client