This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer (raw, json) Hash identifier: 0FRhcHHBRosy66LTCURKb5iQqBVRW0RoErGSoSiodHM= Subject key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C40F0A5CE212BB70CE9F51C3F8FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204310 IP: 185.253.172.0/22 IP: 2a0c:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c4:0f:0a:5c:e2:12:bb:70:ce:9f:51:c3:f8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:c6:94:49:ff:a6:fb:fe:a0:69:ab:01:c7: 24:ae:53:74:b7:26:3b:61:6f:08:55:d5:c0:1c:12: 46:88:e8:2f:1f:1f:dc:2a:00:27:81:19:4d:b7:38: 88:d4:7e:67:94:f7:3c:23:ae:b5:1d:52:08:37:55: d7:ff:4e:97:b3:e6:27:d7:1d:ac:90:7e:ab:63:62: 83:ad:13:ef:2e:27:44:81:68:7d:86:90:3e:6e:63: 1e:95:4f:2c:e0:5f:3a:e4:8b:3a:16:5f:64:1b:b4: ce:1c:96:c9:c2:6a:a7:47:6a:35:f7:b2:ff:6c:2f: 17:d4:30:53:85:db:7e:2f:db:d3:ec:5a:5e:68:a2: 25:0d:5d:d7:77:b4:76:e1:bb:82:cb:5c:74:f0:ff: 5b:83:9d:50:65:70:48:96:c2:7d:43:72:89:11:59: fe:e2:8c:24:89:44:cd:8d:13:df:41:2e:7e:e0:e1: d8:9e:82:42:c0:4d:5f:63:f4:ee:01:80:92:58:15: ff:ec:a3:56:0d:f6:ec:b7:71:cd:01:ed:ab:bf:a3: 4b:85:c9:5b:b0:d6:c1:64:46:cd:97:ab:b7:b7:56: 1e:ed:af:99:7d:e4:b3:e2:96:97:0a:10:8d:ab:f7: d0:0e:4e:e1:61:89:74:62:0f:17:06:bf:56:dd:00: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.172.0/22 IPv6: 2a0c:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204310 Signature Algorithm: sha256WithRSAEncryption 5b:a7:43:0e:1c:fb:5c:3a:7b:e9:7a:c5:07:26:89:ec:80:7e: 41:ec:ca:49:22:b3:f3:13:2b:09:91:12:69:da:cf:4c:75:fe: 8d:f1:04:e0:ab:d2:b7:e5:34:12:d7:68:8d:e0:4d:63:9c:14: 5a:4d:7e:5b:1d:95:71:ca:02:f2:36:26:bf:2d:14:0d:b2:8e: 39:86:54:f1:94:6b:a9:c6:a1:9c:52:f5:8f:86:a5:14:10:5c: f9:10:1e:eb:cc:b7:4c:b6:c0:5e:09:78:ac:59:1f:ff:42:b3: db:10:f8:42:71:cb:1b:83:19:2a:c6:a0:ca:ad:84:72:57:11: 6b:a8:1e:b8:df:e2:d4:95:f8:41:88:96:80:09:e6:bc:4a:50: 27:39:31:2c:ab:30:17:7a:d9:44:25:2f:06:8c:9c:9d:84:c5: 0a:aa:5f:c9:e3:db:ff:e4:5a:99:0c:ed:e4:9f:2e:6a:7f:84: 56:6c:50:69:bd:21:f8:88:db:04:b0:fa:03:49:84:6a:26:38: e2:9a:dc:b5:5b:62:95:1a:d6:1e:cc:04:80:ed:bf:af:01:ef: 13:b5:05:36:69:ee:bd:b4:75:47:94:ea:c7:65:c4:66:82:fd: 49:54:c8:ae:ed:96:07:34:54:d0:bd:e6:20:23:27:c8:5b:7e: d2:7f:60:24 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NMQPClziErtwzp9Rw/j8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDhiMGMzMzc3NjY2M2NiNDMyMWExMDhmMmY0ZDE2MzViNWQyZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ibGlEn/pvv+oGmrAcckrlN0tyY7 YW8IVdXAHBJGiOgvHx/cKgAngRlNtziI1H5nlPc8I661HVIIN1XX/06Xs+Yn1x2s kH6rY2KDrRPvLidEgWh9hpA+bmMelU8s4F865Is6Fl9kG7TOHJbJwmqnR2o197L/ bC8X1DBThdt+L9vT7FpeaKIlDV3Xd7R24buCy1x08P9bg51QZXBIlsJ9Q3KJEVn+ 4owkiUTNjRPfQS5+4OHYnoJCwE1fY/TuAYCSWBX/7KNWDfbst3HNAe2rv6NLhclb sNbBZEbNl6u3t1Ye7a+ZfeSz4paXChCNq/fQDk7hYYl0Yg8XBr9W3QDQfQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFASLDDN3ZmPLQyGhCPL00WNbXS2KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzRiYjdm NC05NzA5LTQxMDktYjMwZS0yNDExNmNiNmU5ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvNGJiN2Y0 LTk3MDktNDEwOS1iMzBlLTI0MTE2Y2I2ZTk4Ni8xL0JJc01NM2RtWTh0RElhRUk4 dlRSWTF0ZExZby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf2sMA0EAgACMAcDBQMqDD7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeFjANBgkqhkiG9w0BAQsFAAOCAQEAW6dDDhz7XDp7 6XrFByaJ7IB+QezKSSKz8xMrCZESadrPTHX+jfEE4KvSt+U0EtdojeBNY5wUWk1+ Wx2VccoC8jYmvy0UDbKOOYZU8ZRrqcahnFL1j4alFBBc+RAe68y3TLbAXgl4rFkf /0Kz2xD4QnHLG4MZKsagyq2EclcRa6geuN/i1JX4QYiWgAnmvEpQJzkxLKswF3rZ RCUvBoycnYTFCqpfyePb/+RamQzt5J8uan+EVmxQab0h+IjbBLD6A0mEaiY44prc tVtilRrWHswEgO2/rwHvE7UFNmnuvbR1R5Tqx2XEZoL9SVTIru2WBzRU0L3mICMn yFt+0n9gJA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:35 2026 by rpki-client