This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer (raw, json) Hash identifier: CjPV71KaytFz2ACMHqUNCfkaKZ8iUnNt88XmEW6A0yo= Subject key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE0C6BA78A1AA337635F655D3B02EBE02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:37:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214476 IP: 5.182.62.0/24 IP: 2a01:e000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:c6:ba:78:a1:aa:33:76:35:f6:55:d3:b0:2e:be:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 13:37:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07664130764480ef2dd8178116b5dd0c59d2e994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:ea:5b:33:05:9b:31:75:8e:27:67:24:1c: e3:2f:49:21:d5:b4:1b:34:20:44:df:b4:de:d4:00: e3:cd:1a:81:4a:0b:a2:a6:5b:9f:4e:18:62:06:76: ec:98:78:5f:ea:6b:41:eb:af:77:7c:51:66:29:24: 2c:4e:64:8a:e2:52:23:8b:14:6c:bd:41:d6:7f:c1: ee:73:b3:64:73:45:c5:ea:fb:df:0a:52:94:f2:e8: 69:0c:6f:83:d9:69:9c:8d:2b:1a:71:e3:67:41:01: 59:bc:f6:8b:ae:49:38:48:d1:99:52:f9:b8:9b:f7: e6:83:02:42:3f:8e:7e:cc:c0:14:25:32:f2:01:9f: c5:32:00:56:c5:10:a8:28:43:b0:06:af:02:52:f6: 4f:6e:af:6a:0f:58:ef:f7:8b:35:c2:62:00:69:06: 5f:cf:44:90:46:5a:a3:ef:e5:fb:9b:5f:94:61:17: 01:66:26:1d:2c:e4:dc:86:20:3f:a3:cd:20:f7:8a: 6c:e6:94:d3:d7:51:92:09:4e:5b:68:2d:82:31:75: a7:81:de:d9:2c:78:99:b4:0c:66:56:14:59:2e:bc: 38:00:3a:30:45:65:15:68:37:e4:56:fd:46:59:1b: e7:9e:6d:50:e2:0a:46:12:9b:67:9c:ec:1b:1d:d3: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.62.0/24 IPv6: 2a01:e000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214476 Signature Algorithm: sha256WithRSAEncryption 06:af:67:91:a6:6e:1c:f7:2b:d8:dc:d2:32:31:64:be:15:c0: aa:2d:71:9c:68:57:09:40:5f:69:b3:e2:ca:7c:81:52:2a:8a: a4:34:4a:d5:2f:17:4d:48:89:09:38:5a:17:90:13:1a:a6:d0: f6:ef:55:e7:65:d1:88:34:19:fa:40:7e:66:1e:27:12:ad:84: 2c:2d:fb:ad:0e:95:78:74:0d:35:55:2f:fc:d1:e2:ed:61:11: d6:c7:2d:65:66:7a:3e:46:35:c1:21:20:25:12:34:92:53:09: c7:24:c1:d4:12:e4:b4:65:1f:0a:c6:ca:bb:a0:64:fe:dc:49: ce:2e:19:6e:a5:06:10:47:22:ca:e3:cf:a4:a4:e9:be:1b:a3: db:0a:9a:ec:e3:da:1a:07:59:bd:cb:6f:5e:7a:8c:e5:59:fa: c0:3b:6c:27:a2:77:04:2c:35:8c:00:f0:29:c2:f8:09:7a:31: 83:c1:8c:65:e3:a2:bb:57:5d:71:82:1a:bd:89:66:5a:ad:70: b7:e0:30:f3:0b:09:83:67:cd:2c:5d:f5:28:a4:d5:74:c6:af: 90:10:8b:e1:d4:6a:2c:95:df:c7:6f:2b:67:88:bc:fd:ff:7b: d9:90:a9:4d:2b:3d:99:40:d4:41:e0:0b:f2:cf:c2:f4:c8:33: fb:a5:87:57 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvgxrp4oaozdjX2VdOwLr4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTMzNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzY2NDEzMDc2NDQ4MGVmMmRkODE3ODExNmI1ZGQwYzU5ZDJlOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0fqWzMFmzF1jidnJBzjL0kh1bQb NCBE37Te1ADjzRqBSguiplufThhiBnbsmHhf6mtB6693fFFmKSQsTmSK4lIjixRs vUHWf8Huc7Nkc0XF6vvfClKU8uhpDG+D2WmcjSsaceNnQQFZvPaLrkk4SNGZUvm4 m/fmgwJCP45+zMAUJTLyAZ/FMgBWxRCoKEOwBq8CUvZPbq9qD1jv94s1wmIAaQZf z0SQRlqj7+X7m1+UYRcBZiYdLOTchiA/o80g94ps5pTT11GSCU5baC2CMXWngd7Z LHiZtAxmVhRZLrw4ADowRWUVaDfkVv1GWRvnnm1Q4gpGEptnnOwbHdOrcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAdmQTB2RIDvLdgXgRa13QxZ0umUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzZiMjFk NC0zMjg3LTRkMzUtODJkNS0xMWUxMmY5NWI1MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmIyMWQ0 LTMyODctNGQzNS04MmQ1LTExZTEyZjk1YjUyOS8xL0IyWkJNSFpFZ084dDJCZUJG clhkREZuUzZaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQABbY+MA0EAgACMAcDBQMqAeAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNFzDANBgkqhkiG9w0BAQsFAAOCAQEABq9nkaZuHPcr 2NzSMjFkvhXAqi1xnGhXCUBfabPiynyBUiqKpDRK1S8XTUiJCThaF5ATGqbQ9u9V 52XRiDQZ+kB+Zh4nEq2ELC37rQ6VeHQNNVUv/NHi7WER1sctZWZ6PkY1wSEgJRI0 klMJxyTB1BLktGUfCsbKu6Bk/txJzi4ZbqUGEEciyuPPpKTpvhuj2wqa7OPaGgdZ vctvXnqM5Vn6wDtsJ6J3BCw1jADwKcL4CXoxg8GMZeOiu1ddcYIavYlmWq1wt+Aw 8wsJg2fNLF31KKTVdMavkBCL4dRqLJXfx28rZ4i8/f972ZCpTSs9mUDUQeAL8s/C 9Mgz+6WHVw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:02 2026 by rpki-client