This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer File: B0ejbXdop7MKTuy7aWTIwjfXRAE.cer (raw, json) Hash identifier: ecQaIHfDnaNU6nNI8dmggKEK+TxGy7ugnwuG8MtKrA0= Subject key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38C06452A84456BFCA5AB360179314 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44749 IP: 185.126.172.0/22 IP: 185.137.243.0/24 IP: 2a06:ca40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c0:64:52:a8:44:56:bf:ca:5a:b3:60:17:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:74:32:11:40:bc:b4:a4:f9:d7:aa:1a:b2: 1c:54:8f:3e:ea:8f:3c:10:c6:9f:07:10:42:9d:91: d8:a9:85:a1:d5:3c:23:2a:9e:f2:7e:8e:b2:86:af: 1f:67:eb:98:00:7f:44:c7:2c:7a:01:4c:15:ce:7c: fa:3a:1a:fa:7d:7f:e0:56:79:72:24:3a:b4:e7:c8: 0f:ee:73:85:4b:1d:31:fe:81:9d:31:8a:c6:bd:29: fc:a6:32:4a:e9:b0:2e:90:31:11:28:0b:a6:74:5a: db:e4:c2:61:db:56:c3:59:58:dc:ab:dd:a0:ad:99: e6:c6:31:93:44:df:78:27:94:f2:6b:99:b8:4e:3c: fc:5d:a9:50:72:21:7f:87:59:ec:bf:43:4f:12:e2: 8b:ed:bd:bb:d6:3a:23:08:a4:19:5b:69:a0:37:34: 84:d9:d8:4b:bb:2d:91:73:59:0b:01:0f:b4:a0:fb: b9:0a:a7:61:3b:6a:58:2a:d8:4d:64:19:b7:3e:43: 0c:ba:3f:7e:ba:ed:e0:7b:d8:eb:cc:e3:27:10:38: 2a:ea:2f:0d:44:c2:25:bd:2a:bf:d8:be:e8:69:84: 36:72:6b:d9:65:e9:74:8b:17:30:4a:38:f9:1d:c1: 30:49:8a:04:0f:93:88:e7:10:8a:b1:56:53:99:2d: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.172.0/22 185.137.243.0/24 IPv6: 2a06:ca40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44749 Signature Algorithm: sha256WithRSAEncryption 4c:cd:d4:4a:a7:ac:2a:72:79:6c:d0:0c:33:e7:c5:34:6d:d0: 41:8b:42:28:87:4d:1b:76:ca:ea:46:df:40:41:6c:5e:c1:60: 85:d5:c6:d9:cf:54:34:60:e7:d4:60:2c:5c:48:64:f7:05:54: 9d:f4:df:69:db:66:65:a5:26:65:4c:16:0d:1c:43:00:af:17: 69:ab:2c:ac:9a:7d:28:6a:1b:a9:9f:e3:9f:05:54:bb:0a:8c: 4e:71:b6:70:40:1c:fe:8d:a7:ab:47:13:d5:da:46:ac:27:a3: 61:0c:c3:66:b2:be:f4:6f:84:4d:4f:f1:cb:18:d0:a3:c1:05: bb:bf:b6:f0:71:5b:fc:88:c0:aa:91:48:6d:b5:94:d2:8f:9d: ba:6a:71:73:63:89:8e:69:cf:06:44:06:07:07:38:0b:ac:91: a2:87:49:d2:e7:d0:45:54:a6:a7:9d:d4:b9:a3:3f:e7:e5:28: 70:94:18:ad:3d:a4:74:36:e5:7e:d0:b9:c1:1f:d0:da:f7:b4: 39:51:a0:8d:0e:f5:d6:73:c4:62:86:73:97:18:48:fc:0a:6a: 21:e8:14:41:5b:4a:74:ba:ff:e2:7b:84:e4:16:5b:fc:0f:65: d1:60:6a:a0:d7:e7:f1:46:5c:9e:70:f1:00:f0:aa:e9:a9:76: e8:04:bb:dc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OMBkUqhEVr/KWrNgF5MUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzQ3YTM2ZDc3NjhhN2IzMGE0ZWVjYmI2OTY0YzhjMjM3ZDc0NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplN0MhFAvLSk+deqGrIcVI8+6o88 EMafBxBCnZHYqYWh1TwjKp7yfo6yhq8fZ+uYAH9Exyx6AUwVznz6Ohr6fX/gVnly JDq058gP7nOFSx0x/oGdMYrGvSn8pjJK6bAukDERKAumdFrb5MJh21bDWVjcq92g rZnmxjGTRN94J5Tya5m4Tjz8XalQciF/h1nsv0NPEuKL7b271jojCKQZW2mgNzSE 2dhLuy2Rc1kLAQ+0oPu5CqdhO2pYKthNZBm3PkMMuj9+uu3ge9jrzOMnEDgq6i8N RMIlvSq/2L7oaYQ2cmvZZel0ixcwSjj5HcEwSYoED5OI5xCKsVZTmS3eDQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAdHo213aKezCk7su2lkyMI310QBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzllYWYx ZS1jOWVjLTQ2NmQtODM3MS1hYWJhZGQwNzE5YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvOWVhZjFl LWM5ZWMtNDY2ZC04MzcxLWFhYmFkZDA3MTliYS8xL0IwZWpiWGRvcDdNS1R1eTdh V1RJd2pmWFJBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuX6sAwQAuYnzMA0EAgACMAcDBQMqBspAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuzTANBgkqhkiG9w0BAQsFAAOCAQEATM3U SqesKnJ5bNAMM+fFNG3QQYtCKIdNG3bK6kbfQEFsXsFghdXG2c9UNGDn1GAsXEhk 9wVUnfTfadtmZaUmZUwWDRxDAK8XaassrJp9KGobqZ/jnwVUuwqMTnG2cEAc/o2n q0cT1dpGrCejYQzDZrK+9G+ETU/xyxjQo8EFu7+28HFb/IjAqpFIbbWU0o+dumpx c2OJjmnPBkQGBwc4C6yRoodJ0ufQRVSmp53UuaM/5+UocJQYrT2kdDblftC5wR/Q 2ve0OVGgjQ711nPEYoZzlxhI/ApqIegUQVtKdLr/4nuE5BZb/A9l0WBqoNfn8UZc nnDxAPCq6al26AS73A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:58 2026 by rpki-client