This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer File: B7tb-mSw1dGKMGGphpscpXFy6ro.cer (raw, json) Hash identifier: 8gOoj/FOh5Z1rPfH8WjoE1HxpEzyYnW1pMO0hr7q58Q= Subject key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1507D9FAB4B067D241A08BDBCFDAE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203815 IP: 185.155.76.0/22 IP: 2a05:b8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:07:d9:fa:b4:b0:67:d2:41:a0:8b:db:cf:da:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:d0:32:e5:21:dc:60:b6:4d:1e:78:2e:7a: 9c:46:1d:d8:08:b4:2a:44:06:89:cb:48:41:3c:f9: 12:2a:6c:ed:71:3a:a9:65:c2:d8:8c:76:72:8f:fa: 74:68:64:7a:b8:f0:8e:35:31:96:0e:47:e9:40:58: d9:3f:f4:7a:c6:d2:39:1a:dc:1c:5e:a7:5a:f4:c8: c8:31:c9:f6:f4:be:e8:16:64:fb:d2:46:00:0b:f6: 2c:38:13:9c:1a:b8:c0:b1:c4:0f:61:35:70:5a:af: 18:64:d5:a2:2d:be:7b:00:6c:06:25:a8:5b:34:21: 66:83:7d:08:03:3e:40:9a:a2:3f:f0:0a:f8:c1:61: 69:ae:ad:83:89:a2:3d:d0:1d:ee:26:10:c1:b0:57: 55:53:7d:88:53:18:fc:ba:8a:fd:b7:b8:c0:60:21: 7f:6d:47:b9:4b:7c:01:77:e0:25:cb:30:d8:b3:2f: f8:db:e4:25:0a:e5:4a:d4:76:5e:2e:f0:db:8e:cb: 75:bd:52:68:0b:63:68:cb:96:e2:34:73:7d:bd:a2: f3:be:ef:32:12:56:09:ab:dc:52:c0:b4:12:39:2f: 65:c3:d4:39:b9:8f:83:7f:2c:7b:f3:7c:d0:a5:db: 7b:81:f5:c9:98:7b:94:77:fc:95:08:ec:ee:d8:1a: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.76.0/22 IPv6: 2a05:b8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203815 Signature Algorithm: sha256WithRSAEncryption 00:c5:41:fb:33:d8:00:6c:48:68:e0:5f:96:83:c4:26:8c:b7: b3:b0:2c:2e:42:3d:3c:6d:eb:71:3e:09:cc:c3:9c:cb:bc:49: 20:75:58:4c:76:52:04:7c:be:0e:2d:60:dd:87:97:ba:ab:03: 89:07:5c:2f:ac:ac:39:64:f8:20:47:fa:9a:dd:23:a6:2f:23: 20:e1:f3:13:95:d7:c8:98:24:35:f2:19:e1:c0:ad:95:04:7e: 7c:15:2c:23:e2:4c:83:d7:d3:3e:1b:87:0f:1e:a3:23:b6:04: bf:68:cd:8f:0b:6e:26:10:6c:05:a0:59:7f:4e:34:3e:b5:e9: aa:25:0e:d6:f8:5a:20:a0:c3:9b:be:13:67:37:49:1e:ea:fa: c7:c7:d3:70:42:22:c2:26:73:a8:65:eb:c3:a8:27:14:cb:c4: d3:e0:73:27:d0:19:f7:36:d9:08:4b:96:42:1a:3f:73:74:25: 7b:00:f3:3d:b0:61:74:4b:eb:a1:3d:8e:6c:49:a9:da:ff:a0: 00:a6:b7:8a:84:11:c6:c4:1e:f5:c2:3f:d6:24:b6:19:33:45: 26:2a:ab:89:ef:3d:96:de:5b:ce:89:3b:bd:cb:22:89:fc:e2: f5:15:39:8f:92:73:46:e1:37:c7:84:f6:a8:70:06:92:7c:99: 6c:43:db:ad -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FQfZ+rSwZ9JBoIvbz9rlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2JiNWJmYTY0YjBkNWQxOGEzMDYxYTk4NjliMWNhNTcxNzJlYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsDQMuUh3GC2TR54LnqcRh3YCLQq RAaJy0hBPPkSKmztcTqpZcLYjHZyj/p0aGR6uPCONTGWDkfpQFjZP/R6xtI5Gtwc Xqda9MjIMcn29L7oFmT70kYAC/YsOBOcGrjAscQPYTVwWq8YZNWiLb57AGwGJahb NCFmg30IAz5AmqI/8Ar4wWFprq2DiaI90B3uJhDBsFdVU32IUxj8uor9t7jAYCF/ bUe5S3wBd+AlyzDYsy/42+QlCuVK1HZeLvDbjst1vVJoC2Noy5biNHN9vaLzvu8y ElYJq9xSwLQSOS9lw9Q5uY+Dfyx783zQpdt7gfXJmHuUd/yVCOzu2BooTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAe7W/pksNXRijBhqYabHKVxcuq6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2FjZmQ5 OC1iNzM2LTQ5ZjQtYTY2MC1mOTA4ZDIxNzE4ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYWNmZDk4 LWI3MzYtNDlmNC1hNjYwLWY5MDhkMjE3MThmNy8xL0I3dGItbVN3MWRHS01HR3Bo cHNjcFhGeTZyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZtMMA0EAgACMAcDBQMqBbjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcJzANBgkqhkiG9w0BAQsFAAOCAQEAAMVB+zPYAGxI aOBfloPEJoy3s7AsLkI9PG3rcT4JzMOcy7xJIHVYTHZSBHy+Di1g3YeXuqsDiQdc L6ysOWT4IEf6mt0jpi8jIOHzE5XXyJgkNfIZ4cCtlQR+fBUsI+JMg9fTPhuHDx6j I7YEv2jNjwtuJhBsBaBZf040PrXpqiUO1vhaIKDDm74TZzdJHur6x8fTcEIiwiZz qGXrw6gnFMvE0+BzJ9AZ9zbZCEuWQho/c3QlewDzPbBhdEvroT2ObEmp2v+gAKa3 ioQRxsQe9cI/1iS2GTNFJiqrie89lt5bzok7vcsiifzi9RU5j5JzRuE3x4T2qHAG knyZbEPbrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:07 2026 by rpki-client