This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer File: t7wa3782Jkj8Y1wzMvODvLwB53Q.cer (raw, json) Hash identifier: QRrG8qlQ3rge2J9sJs6IixlAU//VhwNbARS68s3ntR0= Subject key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35DF08F439C55045154280D700BB74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50572 IP: 37.49.240.0/20 IP: 91.211.168.0/22 IP: 109.205.216.0/21 IP: 185.5.20.0/22 IP: 2a02:1380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:08:f4:39:c5:50:45:15:42:80:d7:00:bb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:5a:1b:85:2d:19:3a:9c:18:c1:ae:ba:c7: b1:0d:9a:e9:cb:b7:e4:5b:fd:89:00:91:14:ac:a0: 17:ae:d3:22:d4:25:21:d5:60:45:73:e2:74:81:6b: c4:27:e2:bd:1e:0f:45:0d:5b:41:07:d5:ca:02:5e: 6f:bc:76:56:59:7e:f0:6e:06:a5:95:0f:25:37:1d: f8:6a:bf:5b:a4:b8:10:38:31:68:b9:b8:65:f6:b7: 48:2a:af:14:26:2d:86:67:53:48:41:90:a8:cd:53: 8a:c8:a9:3c:b2:9f:88:81:e6:fd:ea:30:98:88:e1: 59:b0:87:63:92:7a:44:b9:98:a7:12:d3:ab:f5:b9: 0f:90:08:0a:4c:31:69:0d:c0:94:02:16:ba:a9:09: 68:25:44:b5:e1:3b:f4:39:2f:1d:c0:7f:0c:71:ab: 53:41:6d:e1:4b:42:1a:77:5b:8e:02:fd:0c:2d:6e: 0d:9c:8f:db:60:4f:2d:5d:36:9e:d1:a6:b0:4d:02: 2a:5e:2a:a3:d1:94:86:19:fb:c3:4a:cc:29:28:4c: 43:9d:a0:33:3c:eb:0f:b6:50:60:92:05:4e:2c:6b: d2:93:3e:44:7e:b0:58:21:7c:b8:f7:d3:b1:8f:81: f6:44:3a:25:ab:45:20:33:49:79:a3:bd:97:75:96: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.240.0/20 91.211.168.0/22 109.205.216.0/21 185.5.20.0/22 IPv6: 2a02:1380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50572 Signature Algorithm: sha256WithRSAEncryption 8e:90:e1:ef:42:b8:0a:5a:d4:92:e1:1c:78:d3:24:8d:bf:32: 0d:b3:59:e5:e5:62:ed:4f:de:b5:c7:88:f7:3e:cc:7a:f5:e6: 33:fb:9d:d6:90:7d:b5:47:b1:de:5d:d7:62:62:b2:83:a9:e2: 49:aa:da:37:9e:59:71:39:e5:71:f9:d2:8d:1a:8e:23:cb:4e: 54:af:92:74:89:d6:a0:ae:a8:46:1b:db:9a:60:4f:6c:df:c1: 1e:f6:46:6d:d0:d8:62:79:7d:d3:77:52:0c:d4:28:2a:27:63: e0:8c:70:45:ed:ac:6f:86:38:d6:0d:4a:de:bc:4c:0c:f3:7d: d1:c9:1b:68:2a:5a:54:de:ff:54:82:ba:55:29:a8:04:66:6a: 51:53:1b:78:eb:36:bf:8e:02:32:89:cc:51:41:e0:4b:a0:c8: 3b:ee:30:ba:52:9b:a0:ee:ba:a9:e2:ee:66:0a:33:03:3a:c0: 0b:2e:f0:08:44:9b:60:52:37:33:5b:ed:1f:88:c7:7e:15:dc: 2a:10:69:b1:3d:dc:14:2b:65:2c:de:fb:9c:ba:04:4e:36:63: b1:a4:83:07:ce:88:4c:4d:37:7f:93:f9:01:15:a9:de:ae:6a: bb:7b:02:de:55:be:4a:59:e1:bf:5a:ab:b2:1b:70:b7:6c:eb: 0e:9f:d0:17 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7Nd8I9DnFUEUVQoDXALt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2JjMWFkZmJmMzYyNjQ4ZmM2MzVjMzMzMmYzODNiY2JjMDFlNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9aG4UtGTqcGMGuusexDZrpy7fk W/2JAJEUrKAXrtMi1CUh1WBFc+J0gWvEJ+K9Hg9FDVtBB9XKAl5vvHZWWX7wbgal lQ8lNx34ar9bpLgQODFoubhl9rdIKq8UJi2GZ1NIQZCozVOKyKk8sp+Igeb96jCY iOFZsIdjknpEuZinEtOr9bkPkAgKTDFpDcCUAha6qQloJUS14Tv0OS8dwH8McatT QW3hS0Iad1uOAv0MLW4NnI/bYE8tXTae0aawTQIqXiqj0ZSGGfvDSswpKExDnaAz POsPtlBgkgVOLGvSkz5EfrBYIXy499Oxj4H2RDolq0UgM0l5o72XdZY+AwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzFjOWRj Ny03OGE1LTRkOGEtYjE4NS1mZDYwNmIwNmEwMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMWM5ZGM3 LTc4YTUtNGQ4YS1iMTg1LWZkNjA2YjA2YTAxYS8xL3Q3d2EzNzgySmtqOFkxd3pN dk9Edkx3QjUzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEJTHwAwQCW9OoAwQDbc3YAwQCuQUUMA0EAgAC MAcDBQAqAhOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFjDANBgkqhkiG9w0B AQsFAAOCAQEAjpDh70K4ClrUkuEceNMkjb8yDbNZ5eVi7U/etceI9z7MevXmM/ud 1pB9tUex3l3XYmKyg6niSaraN55ZcTnlcfnSjRqOI8tOVK+SdInWoK6oRhvbmmBP bN/BHvZGbdDYYnl903dSDNQoKidj4IxwRe2sb4Y41g1K3rxMDPN90ckbaCpaVN7/ VIK6VSmoBGZqUVMbeOs2v44CMonMUUHgS6DIO+4wulKboO66qeLuZgozAzrACy7w CESbYFI3M1vtH4jHfhXcKhBpsT3cFCtlLN77nLoETjZjsaSDB86ITE03f5P5ARWp 3q5qu3sC3lW+Slnhv1qrshtwt2zrDp/QFw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:46 2026 by rpki-client