This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer File: B67xkPRL_B2wxQ8ac_3wFwga_hY.cer (raw, json) Hash identifier: Sakoc9XiZJS+IY5Wlxukorr0pMp7wavlEmeXyFhbVY4= Subject key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB4631FD386EA0BCEC38C7E3DD707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211018 IP: 194.99.159.0/24 IP: 2a11:8e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b4:63:1f:d3:86:ea:0b:ce:c3:8c:7e:3d:d7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:63:97:a8:92:6b:0a:a3:39:79:7f:c9:8b: 90:0d:67:fb:fd:60:7c:e3:63:34:81:d3:9d:42:27: ae:c4:f5:a3:e1:11:5f:50:74:4e:a1:e0:e4:1b:48: b2:da:76:2e:ce:69:57:a5:6f:b2:a8:09:77:4d:27: b0:b4:99:92:72:35:b1:e2:a2:81:4f:6b:db:fa:27: ec:6f:57:e6:0e:9c:97:bc:bf:17:d6:cc:17:4e:dc: dc:53:88:e8:ba:1e:8a:69:ed:5d:ca:0f:04:8c:f2: 57:cb:09:0e:bb:9a:e4:5f:1f:4d:32:a8:e0:47:cc: a1:d5:23:0b:5a:51:c4:c8:95:5c:47:f3:6b:35:be: fe:9b:7f:c6:0d:ef:4b:f6:14:40:ab:41:c8:ef:ff: 2c:71:61:0d:25:cc:d2:9a:d3:e8:a1:33:b4:84:a7: 13:cf:c5:cd:48:8b:d7:23:39:0f:54:f3:52:a1:b7: 73:64:9c:07:31:f3:a3:1e:cc:fa:5e:76:bc:5c:b3: 79:eb:13:f3:68:5c:cd:6b:23:a1:2e:b0:3e:f8:95: dd:7b:0a:22:ef:92:c9:43:bc:c7:49:c0:ee:83:ed: dd:28:10:ee:3e:1f:62:f7:62:9d:5b:2e:dd:cb:80: b9:86:89:c1:4f:79:ec:fa:30:fc:7a:0a:13:36:ed: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.159.0/24 IPv6: 2a11:8e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211018 Signature Algorithm: sha256WithRSAEncryption 8f:c3:a5:60:89:65:e1:0d:e3:26:7e:fa:8d:e5:1f:2b:99:af: e6:af:dc:59:bd:c2:0f:a1:63:f7:d9:aa:f1:5e:17:a1:67:34: 6b:2e:86:e1:0a:b9:bc:90:71:53:64:fa:34:98:54:8e:94:8e: 8f:3b:04:19:4b:67:85:37:34:d9:8a:b0:d3:2c:f5:4b:2a:ab: 31:a2:61:b9:f9:2b:63:8b:e2:ad:90:4c:de:71:e6:48:31:3c: f9:86:9d:c2:79:0a:3c:bd:58:03:bc:d0:4f:58:94:29:2e:29: b9:66:5c:9c:51:af:3c:ab:ec:d0:70:61:be:db:43:c8:72:fb: cc:db:8d:f5:73:fc:5b:91:d9:73:e7:2f:b6:49:5c:86:27:52: 03:66:c2:5c:1b:9d:23:09:55:69:e1:71:5a:e1:d0:80:4a:59: 08:d6:a8:e7:48:af:57:e9:67:15:3c:23:f5:14:18:28:d0:fd: 23:53:ca:2f:87:0d:db:99:f7:ba:66:58:c2:30:54:5c:a5:d5: 68:74:de:d4:22:d0:71:9a:83:70:3c:db:e3:bf:54:74:15:a4: 88:33:ae:5a:c0:58:23:e8:f4:39:45:d5:70:71:cf:9b:57:3a: e0:9c:58:dc:bd:7e:c2:d8:14:32:b6:df:99:47:58:81:20:ca: 99:b1:ed:86 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt567RjH9OG6gvOw4x+PdcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2FlZjE5MGY0NGJmYzFkYjBjNTBmMWE3M2ZkZjAxNzA4MWFmZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ljl6iSawqjOXl/yYuQDWf7/WB8 42M0gdOdQieuxPWj4RFfUHROoeDkG0iy2nYuzmlXpW+yqAl3TSewtJmScjWx4qKB T2vb+ifsb1fmDpyXvL8X1swXTtzcU4jouh6Kae1dyg8EjPJXywkOu5rkXx9NMqjg R8yh1SMLWlHEyJVcR/NrNb7+m3/GDe9L9hRAq0HI7/8scWENJczSmtPooTO0hKcT z8XNSIvXIzkPVPNSobdzZJwHMfOjHsz6Xna8XLN56xPzaFzNayOhLrA++JXdewoi 75LJQ7zHScDug+3dKBDuPh9i92KdWy7dy4C5honBT3ns+jD8egoTNu2WzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAeu8ZD0S/wdsMUPGnP98BcIGv4WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2Q2OTUy NS03Y2ZiLTQ3YzgtOWM0Zi1lZjQ0NThlYTIwY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZDY5NTI1 LTdjZmItNDdjOC05YzRmLWVmNDQ1OGVhMjBjZC8xL0I2N3hrUFJMX0Iyd3hROGFj XzN3RndnYV9oWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwmOfMA0EAgACMAcDBQMqEY4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4SjANBgkqhkiG9w0BAQsFAAOCAQEAj8OlYIll4Q3j Jn76jeUfK5mv5q/cWb3CD6Fj99mq8V4XoWc0ay6G4Qq5vJBxU2T6NJhUjpSOjzsE GUtnhTc02Yqw0yz1SyqrMaJhufkrY4virZBM3nHmSDE8+YadwnkKPL1YA7zQT1iU KS4puWZcnFGvPKvs0HBhvttDyHL7zNuN9XP8W5HZc+cvtklchidSA2bCXBudIwlV aeFxWuHQgEpZCNao50ivV+lnFTwj9RQYKND9I1PKL4cN25n3umZYwjBUXKXVaHTe 1CLQcZqDcDzb479UdBWkiDOuWsBYI+j0OUXVcHHPm1c64JxY3L1+wtgUMrbfmUdY gSDKmbHthg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:56 2026 by rpki-client