This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer File: B0rSOkz6MbbVXryhbF0UxAS6bK0.cer (raw, json) Hash identifier: P92lOv/Xk6gMbRlSMGkSuBkbdAG4UuT3k/05XobOTL0= Subject key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B84A10541D232E1C5B5E6E578955F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211678 IP: 5.145.178.0/23 IP: 193.239.202.0/24 IP: 2a10:a8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:a1:05:41:d2:32:e1:c5:b5:e6:e5:78:95:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:1a:d7:3e:16:ff:21:3a:ce:48:ce:aa:de: 48:9d:b1:b8:24:09:eb:81:b2:e2:a9:8b:9a:80:9a: 5d:38:ab:7e:94:3c:bc:d5:bd:a4:4d:7f:12:76:e6: dd:da:0c:4f:b6:f6:f7:fb:d3:89:a5:33:15:b3:c7: a2:fc:3b:05:e7:35:f9:c2:8a:b9:6e:51:a7:00:3b: 40:6e:66:8e:20:08:80:e1:9c:8e:ad:4b:98:26:d9: fd:38:dd:3a:85:95:86:bb:70:8c:3b:e3:35:57:55: 2c:f1:af:d2:4f:d2:37:a4:fc:df:9f:8e:37:84:a1: ed:fb:af:41:6f:bb:ee:3e:99:8d:99:d8:33:6e:7d: 96:36:8a:11:f4:fa:21:14:d8:3d:06:64:91:2c:9f: 06:f7:f4:53:7d:df:a8:c5:84:44:89:46:e9:0a:3d: 05:25:4c:63:70:5a:8d:8f:c0:47:1b:2c:2a:d2:80: f3:85:fe:b5:de:3e:6e:88:f3:8f:20:5b:91:94:54: f9:56:ed:8b:8c:0a:93:da:17:f9:5e:ce:0a:69:2d: da:ea:c8:25:25:3f:69:b7:cf:bf:21:2b:57:6f:ce: 71:f5:47:cf:a3:e6:04:d8:69:69:55:e4:43:77:9e: d9:20:92:74:eb:66:18:25:4e:ef:3a:90:f7:23:9d: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.178.0/23 193.239.202.0/24 IPv6: 2a10:a8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211678 Signature Algorithm: sha256WithRSAEncryption 35:66:fe:66:a4:71:72:e0:57:ca:7f:ee:d8:ef:dd:d4:a1:e2: f0:e6:28:73:3c:e1:3f:b5:f6:c8:e7:c4:1b:fb:2b:7a:28:72: c8:8e:30:40:20:bd:2f:b4:44:26:d8:14:2d:4f:4a:09:03:f3: 73:67:78:5f:47:16:cf:33:7a:25:4b:66:5d:1a:fd:d6:05:cd: d8:8e:50:04:df:75:4e:47:ce:a1:19:8b:8c:27:44:f4:96:d5: ae:b2:70:db:98:c4:ac:56:5f:d9:a7:56:55:c8:53:8b:0f:e8: 04:76:96:77:72:4d:51:7a:e9:12:26:8e:f7:70:18:ff:88:13: 0b:fb:de:5c:08:3c:a5:ce:84:63:49:41:ea:5f:66:6f:d8:5d: 32:3f:ea:2a:ae:c6:58:27:0e:88:e8:c7:b8:f7:8b:08:79:30: 1e:ff:5f:12:e1:02:62:7a:f4:8d:54:b0:1a:c6:05:f5:f9:95: 6a:0a:07:63:4c:5a:93:07:ae:22:94:97:85:ee:65:3a:95:c5: 86:4b:eb:89:02:db:c7:f7:7a:7d:c6:4a:10:54:59:b9:34:da: 96:5b:60:e3:ae:a7:ae:8a:b1:e4:55:7b:8c:03:ca:f5:f3:fc: 6f:a5:f6:3c:8f:1a:bb:c4:e2:99:7b:b7:93:f6:40:63:82:3d: ff:0c:95:70 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W4ShBUHSMuHFtebleJVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzRhZDIzYTRjZmEzMWI2ZDU1ZWJjYTE2YzVkMTRjNDA0YmE2Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8a1z4W/yE6zkjOqt5InbG4JAnr gbLiqYuagJpdOKt+lDy81b2kTX8Sdubd2gxPtvb3+9OJpTMVs8ei/DsF5zX5woq5 blGnADtAbmaOIAiA4ZyOrUuYJtn9ON06hZWGu3CMO+M1V1Us8a/ST9I3pPzfn443 hKHt+69Bb7vuPpmNmdgzbn2WNooR9PohFNg9BmSRLJ8G9/RTfd+oxYREiUbpCj0F JUxjcFqNj8BHGywq0oDzhf613j5uiPOPIFuRlFT5Vu2LjAqT2hf5Xs4KaS3a6sgl JT9pt8+/IStXb85x9UfPo+YE2GlpVeRDd57ZIJJ062YYJU7vOpD3I50m9wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAdK0jpM+jG21V68oWxdFMQEumytMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxL2JkM2E0 Ni03MjdiLTQ3NmMtYTc4OS1jOGM5OTFjZDg5ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvYmQzYTQ2 LTcyN2ItNDc2Yy1hNzg5LWM4Yzk5MWNkODlkNS8xL0IwclNPa3o2TWJiVlhyeWhi RjBVeEFTNmJLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBBZGyAwQAwe/KMA0EAgACMAcDBQMqEKjAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM63jANBgkqhkiG9w0BAQsFAAOCAQEANWb+ ZqRxcuBXyn/u2O/d1KHi8OYoczzhP7X2yOfEG/sreihyyI4wQCC9L7REJtgULU9K CQPzc2d4X0cWzzN6JUtmXRr91gXN2I5QBN91TkfOoRmLjCdE9JbVrrJw25jErFZf 2adWVchTiw/oBHaWd3JNUXrpEiaO93AY/4gTC/veXAg8pc6EY0lB6l9mb9hdMj/q Kq7GWCcOiOjHuPeLCHkwHv9fEuECYnr0jVSwGsYF9fmVagoHY0xakweuIpSXhe5l OpXFhkvriQLbx/d6fcZKEFRZuTTalltg466nroqx5FV7jAPK9fP8b6X2PI8au8Ti mXu3k/ZAY4I9/wyVcA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:54 2026 by rpki-client