This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer File: s_7bUAlSbwxrrUI_AM2gigkzt4s.cer (raw, json) Hash identifier: x4rTLpnW5W4+c0inJOmFWrz0lQmqrIp2ftdJ727JYuY= Subject key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101D18D03750E76FB5B1D88C868B4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.136.4.0/22 IP: 2a0a:ac40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1d:18:d0:37:50:e7:6f:b5:b1:d8:8c:86:8b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:ab:9a:fe:94:a5:a2:2c:ba:0d:33:67:68: 7c:c3:b7:86:8f:1f:63:d7:cd:01:dd:d9:ea:53:4b: 68:87:ec:04:68:18:44:89:0a:4a:9c:96:27:06:70: b4:22:54:57:0c:58:68:76:db:77:5f:d3:f6:94:b6: f1:a1:08:49:53:a2:89:b9:90:35:ce:f3:e3:59:24: 43:ea:95:bf:08:e0:e3:f6:a5:c7:16:73:c9:73:e4: 51:0a:9f:03:b1:c2:0a:11:36:6a:33:4d:a4:a6:1c: a5:10:dc:96:83:ff:4c:38:f5:9c:d9:5c:f1:83:3d: 6e:cd:c9:79:b4:4f:28:3c:cd:c8:a1:50:ea:59:21: 19:a5:65:94:46:a7:1b:a1:14:be:21:e3:cf:ac:22: e3:2a:21:7f:97:bc:c5:85:43:77:3e:60:71:1d:97: 52:ef:2d:8c:e1:12:e2:e5:66:25:97:24:82:df:8d: 56:f3:85:6d:b4:d7:18:58:81:6d:37:69:fa:46:3f: c5:93:b6:5d:1b:91:d5:93:26:06:cb:b2:24:f1:9e: 2a:7a:9a:af:ee:a8:80:69:f8:37:79:ab:73:49:39: a0:f2:96:2a:72:bb:53:88:98:ac:7d:67:1d:11:31: 04:5b:a6:c4:b3:3d:30:76:55:61:24:7f:88:c7:83: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.4.0/22 IPv6: 2a0a:ac40::/32 Signature Algorithm: sha256WithRSAEncryption 13:14:7f:d4:cf:fc:d6:e5:9e:f6:36:07:5b:27:27:98:92:08: b0:fb:36:f2:8b:50:f4:df:35:9e:ac:91:cf:27:e9:27:13:3a: 08:85:97:f8:bb:62:09:de:21:8a:17:fe:7f:c5:b3:1c:54:0a: 3f:a8:b9:43:00:6d:c7:ff:63:7b:4a:64:3a:04:fe:b8:72:ba: 05:70:c3:b5:00:a7:e1:da:b3:d8:d7:7d:16:9b:10:3e:a5:b7: 6d:1e:91:77:4e:43:20:d8:3e:69:f1:05:42:9f:04:a5:d3:05: e8:e4:a0:a0:59:e4:70:c5:8b:90:ec:29:42:25:24:74:c3:d7: 0c:28:62:bc:18:17:c6:97:ff:19:0d:93:b1:f8:6e:7e:69:00: 82:b8:69:36:f2:4e:d2:c5:0d:d8:89:8b:2b:7c:92:ba:93:71: 9e:c3:68:62:19:5e:f9:4a:e4:15:ed:fc:d7:d2:ba:90:d9:cf: 12:6a:9a:d5:49:98:1d:17:dd:3b:3f:ac:5d:f4:d9:8f:69:c1: d0:ff:de:d4:16:5f:13:de:2b:61:48:c7:7d:ba:ac:eb:2f:d5: c2:08:70:cc:84:00:bb:a7:fb:97:9f:dd:0c:4a:41:85:0b:13: cd:c7:48:ca:14:32:ad:12:77:30:3b:d4:8d:ec:09:64:dd:b9: dd:95:90:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EB0Y0DdQ52+1sdiMhotPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2ZlZGI1MDA5NTI2ZjBjNmJhZDQyM2YwMGNkYTA4YTA5MzNiNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU6rmv6UpaIsug0zZ2h8w7eGjx9j 180B3dnqU0toh+wEaBhEiQpKnJYnBnC0IlRXDFhodtt3X9P2lLbxoQhJU6KJuZA1 zvPjWSRD6pW/CODj9qXHFnPJc+RRCp8DscIKETZqM02kphylENyWg/9MOPWc2Vzx gz1uzcl5tE8oPM3IoVDqWSEZpWWURqcboRS+IePPrCLjKiF/l7zFhUN3PmBxHZdS 7y2M4RLi5WYllySC341W84VttNcYWIFtN2n6Rj/Fk7ZdG5HVkyYGy7Ik8Z4qepqv 7qiAafg3eatzSTmg8pYqcrtTiJisfWcdETEEW6bEsz0wdlVhJH+Ix4O07wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLP+21AJUm8Ma61CPwDNoIoJM7eLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2E1Y2Vk Yy1iZjYxLTRjYmMtYWIzNi1hZDA5NTNmN2ZkNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvYTVjZWRj LWJmNjEtNGNiYy1hYjM2LWFkMDk1M2Y3ZmQ0OS8xL3NfN2JVQWxTYnd4cnJVSV9B TTJnaWdrenQ0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYgEMA0EAgACMAcDBQAqCqxAMA0GCSqGSIb3 DQEBCwUAA4IBAQATFH/Uz/zW5Z72NgdbJyeYkgiw+zbyi1D03zWerJHPJ+knEzoI hZf4u2IJ3iGKF/5/xbMcVAo/qLlDAG3H/2N7SmQ6BP64croFcMO1AKfh2rPY130W mxA+pbdtHpF3TkMg2D5p8QVCnwSl0wXo5KCgWeRwxYuQ7ClCJSR0w9cMKGK8GBfG l/8ZDZOx+G5+aQCCuGk28k7SxQ3YiYsrfJK6k3Gew2hiGV75SuQV7fzX0rqQ2c8S aprVSZgdF907P6xd9NmPacHQ/97UFl8T3ithSMd9uqzrL9XCCHDMhAC7p/uXn90M SkGFCxPNx0jKFDKtEncwO9SN7Alk3bndlZBX -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:05 2026 by rpki-client