This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.cer (raw, json) Hash identifier: +9Og/IAHFyYXjFPsg9MkNE61n1o7saMI4q5JQL42qOo= Subject key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B359FDCEC6DEC33AF63104F92D57B6C8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 08:00:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 51262 IP: 185.147.8.0/22 IP: 193.84.120.0/22 IP: 195.191.240.0/23 IP: 2a0a:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:9f:dc:ec:6d:ec:33:af:63:10:4f:92:d5:7b:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 08:00:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:97:b8:71:ec:96:4a:f6:a6:25:31:49:e1: 15:00:0d:2a:a8:e4:21:bb:b4:b2:8a:d5:3e:74:a5: 04:d2:e1:19:4e:e2:c0:cd:ac:13:bb:4b:ca:f3:cf: 0a:18:ea:1c:cc:f2:00:b2:d9:48:db:4c:35:5c:bd: f5:b3:91:20:6e:08:4d:93:87:26:3c:1e:c9:98:0e: 6e:b0:83:cc:6f:97:54:6b:8e:14:90:a5:c6:e8:fc: a1:71:fc:48:8b:59:ec:f1:83:e9:49:58:34:7f:b3: e9:fd:3d:81:96:9e:21:a2:8e:19:37:f2:72:3a:62: e5:b8:c5:5d:39:fa:c2:9a:36:87:d6:1b:2c:6d:c1: 42:62:ae:ff:b2:c1:a4:32:a3:51:ae:1b:e3:ce:2b: 10:39:2d:d3:58:d9:2f:a7:61:67:5a:e0:20:e4:ff: 02:7b:e7:57:06:c3:3a:b5:47:c0:bd:0b:9d:d0:02: 5d:67:40:69:f8:85:66:0a:2e:88:f6:e0:6e:dc:e1: ed:9d:16:64:b8:ac:4e:bc:79:fb:c4:7c:8a:91:5f: a3:88:aa:fd:cf:a6:24:d5:6f:67:3d:61:da:a0:42: 5c:29:94:ca:f2:80:89:bb:54:63:80:c5:ec:1a:58: 18:1a:ee:72:e8:aa:25:f8:7e:26:c2:7c:dd:d0:5c: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.8.0/22 193.84.120.0/22 195.191.240.0/23 IPv6: 2a0a:dc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51262 Signature Algorithm: sha256WithRSAEncryption 8a:09:27:6b:00:e4:03:fa:dd:20:ff:29:6d:14:32:9b:75:02: 29:02:73:f0:5c:5e:b0:db:1a:5c:b1:ce:cd:44:fa:df:06:6c: ce:20:2b:4f:70:79:9d:03:69:54:81:c6:a8:61:1e:9b:9d:ab: 70:f6:0e:d5:95:da:6e:95:c5:e6:86:f4:73:21:77:b6:43:d5: 04:7a:9e:cb:1b:a5:02:dd:e0:ef:31:90:b4:da:a5:17:64:97: c1:5a:0a:2f:0e:0e:1a:f4:e9:22:cd:45:72:33:bc:71:ed:6a: 3c:77:65:e2:44:8c:da:16:f8:ea:38:8e:f1:12:4f:67:f0:d7: 34:ae:83:0f:e4:5a:dd:da:55:80:aa:b7:d5:ce:b9:53:6c:55: 1b:78:dc:82:51:fa:38:e2:8a:a8:13:4a:a0:14:9d:4e:15:0c: fa:dc:04:60:37:e2:41:67:5c:23:f4:89:ea:8e:16:af:40:ee: e2:27:63:94:19:11:13:a4:7c:0f:a0:89:04:75:ea:5a:52:ef: 07:b8:fb:a6:27:e7:0d:33:6d:9b:80:b0:90:b1:57:fe:df:f1: c5:36:5a:02:a0:a7:74:90:2b:38:e8:67:96:f6:cb:14:18:d6: bd:1a:dc:ca:e1:90:e1:89:77:08:7a:1f:35:9d:ee:93:7d:cf: a5:b6:18:c4 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZs1n9zsbewzr2MQT5LVe2yOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MDgwMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmU2OTE0MjdjNmU0MTgwNmY2Y2ViMWUyMThhN2RjNjMyMGZkZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWXuHHslkr2piUxSeEVAA0qqOQh u7SyitU+dKUE0uEZTuLAzawTu0vK888KGOoczPIAstlI20w1XL31s5EgbghNk4cm PB7JmA5usIPMb5dUa44UkKXG6PyhcfxIi1ns8YPpSVg0f7Pp/T2Blp4hoo4ZN/Jy OmLluMVdOfrCmjaH1hssbcFCYq7/ssGkMqNRrhvjzisQOS3TWNkvp2FnWuAg5P8C e+dXBsM6tUfAvQud0AJdZ0Bp+IVmCi6I9uBu3OHtnRZkuKxOvHn7xHyKkV+jiKr9 z6Yk1W9nPWHaoEJcKZTK8oCJu1RjgMXsGlgYGu5y6Kol+H4mwnzd0Fwl0wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFO/mkUJ8bkGAb2zrHiGKfcYyD97tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzA1OTk3 NS1lZjkwLTQyMWItOGFmMy0zODE0YzU3ZmU5YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMDU5OTc1 LWVmOTAtNDIxYi04YWYzLTM4MTRjNTdmZTliYi8xLzctYVJRbnh1UVlCdmJPc2VJ WXA5eGpJUDN1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuZMIAwQCwVR4AwQBw7/wMA0EAgACMAcDBQMq CtwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIPjANBgkqhkiG9w0BAQsFAAOC AQEAigknawDkA/rdIP8pbRQym3UCKQJz8FxesNsaXLHOzUT63wZsziArT3B5nQNp VIHGqGEem52rcPYO1ZXabpXF5ob0cyF3tkPVBHqeyxulAt3g7zGQtNqlF2SXwVoK Lw4OGvTpIs1FcjO8ce1qPHdl4kSM2hb46jiO8RJPZ/DXNK6DD+Ra3dpVgKq31c65 U2xVG3jcglH6OOKKqBNKoBSdThUM+twEYDfiQWdcI/SJ6o4Wr0Du4idjlBkRE6R8 D6CJBHXqWlLvB7j7pifnDTNtm4CwkLFX/t/xxTZaAqCndJArOOhnlvbLFBjWvRrc yuGQ4Yl3CHofNZ3uk33PpbYYxA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:40 2025 by rpki-client