This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer (raw, json) Hash identifier: wWm3w/qVKzr/g+HQwjMc4xvsf45GOmWseKdeW0LvOpI= Subject key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AA1FE6BF00E325F96BBBD6F3C4908 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214309 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:fe:6b:f0:0e:32:5f:96:bb:bd:6f:3c:49:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:90:dd:87:36:7f:3c:30:98:05:bc:93:d5: c6:a9:71:a3:3b:ff:d5:d6:1c:50:d5:f7:12:ee:8e: 5e:2f:94:75:e1:8b:8d:bb:2b:93:f4:11:ad:bd:c5: 94:70:5f:a5:08:9f:aa:f3:d2:9e:59:d5:1b:1b:65: d4:12:c3:04:29:70:b1:a7:8c:e9:63:95:43:d0:c1: 04:3c:9a:3d:2b:a7:06:6a:b4:be:04:13:6d:72:1c: 37:2e:0f:f5:a3:de:d6:52:9b:11:c2:a9:4f:52:81: d8:f7:74:d3:7e:be:2a:11:71:67:9e:22:a7:cf:a0: 2d:11:c0:23:27:42:fd:58:f9:86:32:04:35:bb:f8: 9b:09:a4:ad:63:56:0a:f8:fa:8a:e0:41:d3:af:b9: d4:56:e7:e6:80:2f:7c:d8:ab:28:3a:11:9f:e3:3a: 08:90:f8:7b:9f:c0:2c:bf:e4:9c:a6:32:90:41:e1: 29:70:da:18:37:d4:84:79:e8:fc:47:fa:9e:cc:35: 48:78:55:48:e8:cd:7e:36:1f:a6:23:57:74:18:33: 33:ef:0b:6c:1e:87:1c:d9:0b:a7:99:d2:d6:ba:af: d4:ef:4b:6a:e1:cf:ee:ad:d0:18:38:83:22:e2:3e: b7:09:5d:4e:99:83:4a:c5:a7:9b:dd:ee:1e:4e:9d: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214309 Signature Algorithm: sha256WithRSAEncryption 8f:8d:df:18:78:0b:64:49:3a:7f:71:a0:5e:4d:c9:34:ae:3d: d4:a0:84:69:dd:c0:14:59:29:5c:c9:17:85:97:25:79:4b:2b: ae:d2:2a:d1:15:ad:06:73:0f:f4:f9:3a:f7:56:8c:8b:16:a2: 12:57:73:55:4a:1c:65:a3:d8:73:b3:af:33:69:14:c1:75:24: 7f:f9:8e:70:1c:cd:17:f2:ac:52:99:78:ad:e6:a8:2f:23:cc: b6:75:b3:48:fb:4f:df:6b:6f:29:f0:83:1f:12:d2:c3:0d:dc: 7f:f7:1d:2f:48:d8:f9:74:1d:06:39:51:e9:62:9d:91:ef:3f: e7:0e:57:e6:7b:05:61:0e:ec:a8:69:1d:df:61:dd:69:b2:ce: 4a:f9:ef:aa:29:54:5e:30:93:f7:5e:51:73:c3:03:40:43:4a: 77:ad:df:20:ce:e0:e1:42:fc:ef:52:3b:ac:43:58:72:7c:3d: ba:c0:62:35:9c:46:db:8d:f8:44:67:2c:c9:d3:29:b1:c5:01: e8:7e:48:63:b7:e9:6b:f8:00:d9:6d:d4:40:19:67:e2:c9:68: 3b:d6:8d:17:13:f0:7c:31:7d:17:88:17:bb:bf:dc:2c:ee:fb: 57:85:0a:58:69:15:75:da:f2:39:6d:b6:b5:c9:c0:e5:ee:10: f1:57:26:ed -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6WqH+a/AOMl+Wu71vPEkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY0M2I0ZmEzZjBlMTNjY2E4MDU1ODMzYWM3MGM2OWRkMWNhOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2smQ3Yc2fzwwmAW8k9XGqXGjO//V 1hxQ1fcS7o5eL5R14YuNuyuT9BGtvcWUcF+lCJ+q89KeWdUbG2XUEsMEKXCxp4zp Y5VD0MEEPJo9K6cGarS+BBNtchw3Lg/1o97WUpsRwqlPUoHY93TTfr4qEXFnniKn z6AtEcAjJ0L9WPmGMgQ1u/ibCaStY1YK+PqK4EHTr7nUVufmgC982KsoOhGf4zoI kPh7n8Asv+ScpjKQQeEpcNoYN9SEeej8R/qezDVIeFVI6M1+Nh+mI1d0GDMz7wts Hocc2QunmdLWuq/U70tq4c/urdAYOIMi4j63CV1OmYNKxaeb3e4eTp3VQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOxkO0+j8OE8yoBVgzrHDGndHKjhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzc0ZDQ5 MC1iODVhLTQ5MzktOTBkYy03OWU3NDYzODNmOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNzRkNDkw LWI4NWEtNDkzOS05MGRjLTc5ZTc0NjM4M2Y4ZC8xLzdHUTdUNlB3NFR6S2dGV0RP c2NNYWQwY3FPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNFJTANBgkqhkiG9w0BAQsFAAOCAQEAj43fGHgLZEk6 f3GgXk3JNK491KCEad3AFFkpXMkXhZcleUsrrtIq0RWtBnMP9Pk691aMixaiEldz VUocZaPYc7OvM2kUwXUkf/mOcBzNF/KsUpl4reaoLyPMtnWzSPtP32tvKfCDHxLS ww3cf/cdL0jY+XQdBjlR6WKdke8/5w5X5nsFYQ7sqGkd32HdabLOSvnvqilUXjCT 915Rc8MDQENKd63fIM7g4UL871I7rENYcnw9usBiNZxG2434RGcsydMpscUB6H5I Y7fpa/gA2W3UQBln4sloO9aNFxPwfDF9F4gXu7/cLO77V4UKWGkVddryOW22tcnA 5e4Q8Vcm7Q== -----END CERTIFICATE-----Generated at Mon Jan 12 03:26:41 2026 by rpki-client