This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer File: B45GPzbEf3arfBlqf17dTxvtpkI.cer (raw, json) Hash identifier: XU1N3t62b7+u/Tjiz4WNAgS7Elwlpfalu3AeQyZvMGE= Subject key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78346969C30071394BAA047EFBFA38EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215075 IP: 45.139.106.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:69:69:c3:00:71:39:4b:aa:04:7e:fb:fa:38:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:c4:be:cc:42:0f:e6:3b:f4:1f:fc:74:cc: 32:5f:09:89:ed:98:e9:26:73:9b:74:5b:dc:ac:79: 9d:90:d4:ba:5f:e2:7f:dd:44:5b:b7:30:a9:02:3c: 78:e1:a4:8f:45:95:35:c2:e6:10:4d:6d:a8:f3:de: bb:ee:86:c4:cc:21:ba:43:89:ff:02:e5:16:50:a7: 0b:5a:ef:f4:ee:8a:81:09:7d:3c:0f:49:3e:46:70: 6b:3f:6b:5a:9b:0b:33:85:09:4b:33:bf:4a:f5:eb: 4d:b9:fd:65:6f:86:de:ae:64:18:ae:5e:94:db:71: 48:e3:82:ac:c1:d1:aa:3a:29:d7:a3:ca:5c:4a:5f: 20:29:78:21:92:16:3c:2a:26:8b:8b:02:1e:f2:91: f0:86:7d:6b:a0:b1:f6:4e:06:e2:2f:2e:4f:de:02: f2:9b:a2:86:0c:5b:7c:2c:aa:8e:30:6f:38:ee:c0: ba:2d:50:8c:b7:e2:4c:1b:e4:c3:9a:5a:69:43:5c: 25:6e:54:0a:94:4a:14:dc:01:c5:ba:60:13:b9:ea: fd:6c:18:0f:41:4f:ca:82:c0:32:22:2a:80:38:98: b9:7a:28:44:d5:b3:87:3b:e1:9c:b2:7a:17:74:1c: 76:10:08:83:04:52:69:56:1d:56:89:b6:90:6a:e8: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.106.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215075 Signature Algorithm: sha256WithRSAEncryption 5c:cd:d2:b8:e5:36:08:0f:4f:77:ef:49:14:e5:46:87:08:f9: 24:a7:03:38:4c:f7:72:56:0e:18:6b:3f:9c:41:4f:e0:f4:92: e5:90:ea:62:41:d9:b9:e4:da:65:2c:b4:b0:43:9e:6f:79:ec: 70:fc:08:d9:30:e2:d7:9b:b6:42:ac:14:ba:b9:21:20:31:d6: 9a:61:c6:e1:06:9d:4d:a8:79:de:5c:20:ac:9e:64:f8:14:ed: e2:fa:68:59:4a:e5:6b:46:ce:63:86:50:82:ff:b1:82:bb:2d: fa:89:1d:7b:16:3f:d3:90:5c:d5:5e:f5:ae:a2:b3:23:4e:6d: f3:9c:b0:32:d7:25:b8:37:7c:9a:eb:6a:7f:04:7b:f0:ca:47: b9:09:86:72:69:81:02:f0:d6:79:49:a1:53:51:92:f5:a6:17: b5:3a:35:d7:c2:c2:e2:2b:03:75:6f:cd:86:14:2a:29:54:88: e5:77:b2:43:0c:09:95:70:c7:aa:47:b7:01:36:88:f5:46:58: c3:38:47:65:95:ea:96:97:61:2b:f6:2f:2c:5a:23:3c:1f:51: 52:7b:31:4f:37:83:ee:57:80:6d:cf:38:a2:3a:c9:8a:fc:89: 21:26:2b:ea:71:db:2d:99:63:41:1a:73:64:c6:32:af:66:27: 17:01:72:90 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NGlpwwBxOUuqBH77+jjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhlNDYzZjM2YzQ3Zjc2YWI3YzE5NmE3ZjVlZGQ0ZjFiZWRhNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5LEvsxCD+Y79B/8dMwyXwmJ7Zjp JnObdFvcrHmdkNS6X+J/3URbtzCpAjx44aSPRZU1wuYQTW2o89677obEzCG6Q4n/ AuUWUKcLWu/07oqBCX08D0k+RnBrP2tamwszhQlLM79K9etNuf1lb4bermQYrl6U 23FI44KswdGqOinXo8pcSl8gKXghkhY8KiaLiwIe8pHwhn1roLH2TgbiLy5P3gLy m6KGDFt8LKqOMG847sC6LVCMt+JMG+TDmlppQ1wlblQKlEoU3AHFumATuer9bBgP QU/KgsAyIiqAOJi5eihE1bOHO+GcsnoXdBx2EAiDBFJpVh1WibaQaugIgQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAeORj82xH92q3wZan9e3U8b7aZCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzk5NGI1 Ni0yZjBjLTQ5MDgtYmU0Ny04MWY3ZjdiOTMzMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvOTk0YjU2 LTJmMGMtNDkwOC1iZTQ3LTgxZjdmN2I5MzMwMC8xL0I0NUdQemJFZjNhcmZCbHFm MTdkVHh2dHBrSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALYtqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNIIzANBgkqhkiG9w0BAQsFAAOCAQEAXM3SuOU2CA9Pd+9JFOVGhwj5JKcDOEz3 clYOGGs/nEFP4PSS5ZDqYkHZueTaZSy0sEOeb3nscPwI2TDi15u2QqwUurkhIDHW mmHG4QadTah53lwgrJ5k+BTt4vpoWUrla0bOY4ZQgv+xgrst+okdexY/05Bc1V71 rqKzI05t85ywMtcluDd8mutqfwR78MpHuQmGcmmBAvDWeUmhU1GS9aYXtTo118LC 4isDdW/NhhQqKVSI5XeyQwwJlXDHqke3ATaI9UZYwzhHZZXqlpdhK/YvLFojPB9R UnsxTzeD7leAbc84ojrJivyJISYr6nHbLZljQRpzZMYyr2YnFwFykA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:56 2026 by rpki-client