This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer File: s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer (raw, json) Hash identifier: rU9L5yIih5plXIyhSsrtctPq6vrCioc2ZXCTXum62D4= Subject key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA6EF177039384F86C35E1879B669 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215956 IP: 2001:67c:688::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:ef:17:70:39:38:4f:86:c3:5e:18:79:b6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:a3:9b:cd:16:b8:9a:0b:2a:78:22:59:83: ec:0f:af:b7:56:ca:21:88:28:f8:05:5a:c7:f5:c5: 6d:fd:5d:c0:8f:a3:94:fe:24:2f:6f:e8:73:53:83: 43:ff:27:6b:84:9c:44:63:6f:6b:92:6f:2d:6c:b3: 82:ee:16:5e:67:c7:7f:7f:23:6b:de:32:51:5c:eb: fb:14:e1:c7:eb:d9:f8:83:82:10:da:02:86:1a:55: f9:b8:97:6c:d0:a3:66:02:46:4d:1b:14:9e:92:8a: 9b:c3:9f:2a:ec:b6:16:67:07:76:2d:51:01:f1:eb: 72:9a:d4:2c:ef:dd:1a:69:84:64:0a:3d:cc:2b:08: f1:e4:75:4d:d8:72:b3:44:be:0c:fe:3c:ce:ce:62: 27:63:09:c5:ab:08:04:93:78:69:20:7f:10:ef:75: 8c:8c:e5:e5:5a:80:c7:3c:e1:7a:f3:24:05:c6:06: 98:f6:a0:6b:1e:ae:24:38:6a:43:a5:38:d1:f3:75: 46:c7:44:a4:07:59:69:53:59:90:34:f7:32:83:0f: 95:5e:79:77:08:06:e8:54:8b:86:69:dd:21:45:2c: bb:9b:9d:36:d1:19:5a:eb:b1:73:49:b4:7a:64:04: 12:ba:cf:c7:19:5d:f4:40:89:18:f5:d8:59:28:dc: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:688::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215956 Signature Algorithm: sha256WithRSAEncryption 14:ee:b2:2b:f6:da:76:27:10:fd:13:2d:82:3c:08:81:83:59: 8c:a4:87:d0:7b:7b:63:19:fe:60:19:d6:fd:12:ce:66:f1:15: c6:a2:2b:87:03:78:d0:c5:8d:76:bc:48:24:d6:4b:0b:44:d5: 6a:43:c7:ba:5b:a7:7a:c4:d7:ac:b9:6e:6d:cf:82:cc:c2:03: ba:7b:46:79:f2:cf:f8:93:5a:3b:e6:36:07:6b:fe:36:ca:22: ba:a4:6b:62:35:69:f2:1e:c2:d1:0b:14:f5:45:07:41:a8:ed: cf:96:16:27:48:60:ab:73:10:6f:b6:27:dc:e8:fa:d8:b5:be: cc:fe:d7:ef:31:00:e9:8b:72:9a:64:91:b1:b2:d7:3c:1e:f3: 47:ac:44:be:52:40:b0:92:06:5d:45:de:48:c5:d6:8a:25:1c: be:34:dc:8a:cf:f9:9f:d6:f1:3b:22:53:15:cc:5d:60:3f:6f: be:c1:e2:59:88:4b:48:a5:17:a9:65:5a:20:4e:7e:b5:79:2d: 18:72:21:6a:e8:db:64:0a:05:0a:21:44:f5:82:5e:6a:09:2d: 50:4e:51:35:6b:81:27:6e:01:b0:3f:68:b7:36:bc:30:78:4d: b4:04:a8:d7:5e:45:74:83:38:ad:67:0a:a3:c7:f2:40:c4:b0: 98:cc:e0:31 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt5fqbvF3A5OE+Gw14YebZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I5MzYwYzBkZGEzZDY4OGY0ZGJlNTNlMmI2ZDNjZWY0N2ZlODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprujm80WuJoLKngiWYPsD6+3Vsoh iCj4BVrH9cVt/V3Aj6OU/iQvb+hzU4ND/ydrhJxEY29rkm8tbLOC7hZeZ8d/fyNr 3jJRXOv7FOHH69n4g4IQ2gKGGlX5uJds0KNmAkZNGxSekoqbw58q7LYWZwd2LVEB 8etymtQs790aaYRkCj3MKwjx5HVN2HKzRL4M/jzOzmInYwnFqwgEk3hpIH8Q73WM jOXlWoDHPOF68yQFxgaY9qBrHq4kOGpDpTjR83VGx0SkB1lpU1mQNPcygw+VXnl3 CAboVIuGad0hRSy7m5020Rla67FzSbR6ZAQSus/HGV30QIkY9dhZKNwFdQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFLO5NgwN2j1oj02+U+K20870f+glMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ViZjA0 YzdjLWY4MmQtNDcxZC04NWFkLTk4YzY1ZGUxYzkxMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWJm MDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFjOTEyLzAvQjNCOTM2MEMwRERB M0Q2ODhGNERCRTUzRTJCNkQzQ0VGNDdGRTgyNS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBnwGiDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDS5QwDQYJKoZIhvcNAQEL BQADggEBABTusiv22nYnEP0TLYI8CIGDWYykh9B7e2MZ/mAZ1v0SzmbxFcaiK4cD eNDFjXa8SCTWSwtE1WpDx7pbp3rE16y5bm3PgszCA7p7Rnnyz/iTWjvmNgdr/jbK Irqka2I1afIewtELFPVFB0Go7c+WFidIYKtzEG+2J9zo+ti1vsz+1+8xAOmLcppk kbGy1zwe80esRL5SQLCSBl1F3kjF1oolHL403IrP+Z/W8TsiUxXMXWA/b77B4lmI S0ilF6llWiBOfrV5LRhyIWro22QKBQohRPWCXmoJLVBOUTVrgSduAbA/aLc2vDB4 TbQEqNdeRXSDOK1nCqPH8kDEsJjM4DE= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:58 2026 by rpki-client