This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer File: 7HB5DNzgwZKsiG89nvcl85lRg5g.cer (raw, json) Hash identifier: 8Tq39p8d+b0jjM6k8wsLhEDiHCIFoyq3WhbbrfVgvak= Subject key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2139E2B5481EC0DD9E6AAA3CE93257EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 08:56:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 61319 IP: 171.25.183.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:39:e2:b5:48:1e:c0:dd:9e:6a:aa:3c:e9:32:57:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 08:56:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec70790cdce0c192ac886f3d9ef725f399518398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:5c:1e:11:da:cb:34:eb:c7:c1:43:d5:1f: 12:d3:97:46:61:f2:d0:eb:2a:09:e7:83:f8:fc:0e: 81:3d:0c:8a:f8:87:e1:50:2f:ae:8f:87:ef:fa:6c: d9:db:79:18:78:fd:9a:b2:b4:a6:94:23:d1:10:10: 40:7b:48:42:30:cd:72:ed:1a:1f:02:1e:24:92:a4: 1d:80:b5:31:9c:ba:a6:c4:e8:d1:57:37:39:ec:52: c1:8a:c6:cb:01:6d:cf:1d:df:35:44:68:9a:3f:f0: d2:15:50:ee:44:38:9b:37:24:a3:21:94:f1:d1:18: f7:2c:63:b0:cd:39:57:6b:62:79:15:db:03:3f:22: 19:e8:82:7d:4f:e3:4b:e3:40:c9:39:d1:8e:89:c9: 99:96:47:78:03:ef:cd:ab:68:8e:ba:70:06:2f:ff: a6:07:0e:bd:76:cc:93:16:8e:7c:be:35:4e:b4:c3: 60:39:0c:f0:f0:a7:75:16:de:22:da:5c:b6:b1:84: 2f:77:f2:50:fb:eb:35:f2:a1:cf:f3:be:a4:91:b9: 62:ed:14:a2:31:ce:dc:22:cb:5e:14:76:44:6b:73: c0:6f:80:d3:98:d1:fe:f7:d8:c1:a4:ba:ad:c3:45: 1d:d5:63:f2:5e:80:87:35:56:32:b4:f7:52:eb:a6: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.183.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61319 Signature Algorithm: sha256WithRSAEncryption 5a:9a:ca:b4:25:bf:9c:2c:d7:ab:d4:0a:e1:38:2e:dc:00:3e: 02:ff:c6:0e:a1:2b:30:da:02:30:d6:58:47:7b:91:34:dc:26: ad:0f:41:31:56:34:95:29:0c:b4:09:7f:a6:7e:99:6b:c8:3a: 0c:b6:dd:af:82:35:57:7f:a0:35:d8:9e:68:72:1e:66:11:e1: 10:e6:69:da:4e:ea:53:69:96:ba:66:51:72:23:6f:99:7d:de: f4:34:d5:12:fb:7f:76:33:1c:7d:50:d3:6c:a1:77:c7:f3:24: 95:01:a5:e3:10:26:26:95:16:e8:94:7d:54:a5:39:ff:28:57: 00:a1:a3:3d:fa:67:06:6c:cc:82:5e:c7:31:2b:49:14:51:34: 38:b1:b4:7d:02:83:bb:3f:61:ef:e1:b2:41:5c:69:4c:ac:a1: b1:b8:9e:ed:c9:fd:b2:78:cf:e3:38:4d:0d:c7:6c:3d:fa:65: 5a:57:5f:db:28:f4:0b:dc:99:84:6a:1c:6e:52:9c:73:60:2a: 45:b0:dd:b4:78:d6:ae:5e:57:74:d4:6c:6b:f5:90:0c:5f:99: aa:6f:9f:e2:7b:80:60:4f:1b:fc:a4:9c:a5:45:f9:1c:01:42: a0:29:f8:8a:c5:2a:f3:d2:95:6e:a3:8a:b1:9d:ea:30:29:31: b0:2c:19:c7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZshOeK1SB7A3Z5qqjzpMlfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MDg1NjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzcwNzkwY2RjZTBjMTkyYWM4ODZmM2Q5ZWY3MjVmMzk5NTE4Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqlcHhHayzTrx8FD1R8S05dGYfLQ 6yoJ54P4/A6BPQyK+IfhUC+uj4fv+mzZ23kYeP2asrSmlCPREBBAe0hCMM1y7Rof Ah4kkqQdgLUxnLqmxOjRVzc57FLBisbLAW3PHd81RGiaP/DSFVDuRDibNySjIZTx 0Rj3LGOwzTlXa2J5FdsDPyIZ6IJ9T+NL40DJOdGOicmZlkd4A+/Nq2iOunAGL/+m Bw69dsyTFo58vjVOtMNgOQzw8Kd1Ft4i2ly2sYQvd/JQ++s18qHP876kkbli7RSi Mc7cIsteFHZEa3PAb4DTmNH+99jBpLqtw0Ud1WPyXoCHNVYytPdS66bwtQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOxweQzc4MGSrIhvPZ73JfOZUYOYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzUwNzY2 MC0xMmJhLTRiZTgtOWI3My1iNzQ5Mzg3ZGYwZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNTA3NjYw LTEyYmEtNGJlOC05YjczLWI3NDkzODdkZjBmNS8xLzdIQjVETnpnd1pLc2lHODlu dmNsODVsUmc1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAqxm3MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDvhzANBgkqhkiG9w0BAQsFAAOCAQEAWprKtCW/nCzXq9QK4Tgu3AA+Av/GDqEr MNoCMNZYR3uRNNwmrQ9BMVY0lSkMtAl/pn6Za8g6DLbdr4I1V3+gNdieaHIeZhHh EOZp2k7qU2mWumZRciNvmX3e9DTVEvt/djMcfVDTbKF3x/MklQGl4xAmJpUW6JR9 VKU5/yhXAKGjPfpnBmzMgl7HMStJFFE0OLG0fQKDuz9h7+GyQVxpTKyhsbie7cn9 snjP4zhNDcdsPfplWldf2yj0C9yZhGocblKcc2AqRbDdtHjWrl5XdNRsa/WQDF+Z qm+f4nuAYE8b/KScpUX5HAFCoCn4isUq89KVbqOKsZ3qMCkxsCwZxw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:34:23 2025 by rpki-client