This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer File: BR8pRi56fafrX0XaeHPxTkA_46s.cer (raw, json) Hash identifier: TqSFywnRM9lherkEwtgVQvEJ+FrwljZGlQKgLw3KXI4= Subject key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F837EE2FA446D3320648F63349CFCF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.11.188.0/22 IP: 45.65.112.0/22 IP: 45.154.156.0/22 IP: 185.83.200.0/22 IP: 188.209.128.0/20 IP: 194.15.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:7e:e2:fa:44:6d:33:20:64:8f:63:34:9c:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:3f:60:1d:14:13:29:8b:3b:6a:aa:1a:4b: 1f:88:da:7b:d8:18:40:98:65:67:6a:f3:41:bd:71: 93:05:d0:0b:39:43:32:89:6c:56:a1:19:e4:48:64: 9a:56:5a:00:db:b7:65:38:a0:ee:a1:56:86:1d:14: 69:4f:9b:a7:da:d5:1b:86:c1:8b:23:d9:27:4c:40: e8:5d:d4:61:b1:21:9c:92:6e:1a:8b:7f:5c:89:25: d0:3e:82:8a:ec:04:66:d5:58:0e:2c:1d:84:72:90: af:c9:09:e2:05:28:84:1c:34:89:4a:c1:49:46:d4: 6b:40:e6:69:d0:3c:bb:6e:62:33:81:be:c5:17:f8: a2:8e:60:ae:ed:19:30:80:55:cb:3f:bb:4a:51:21: 48:22:5f:34:98:a7:ba:97:7b:52:ce:b2:b4:4c:9b: bd:fe:7b:ef:01:fb:7e:c1:59:2d:3f:12:89:b5:cc: 9e:38:b7:14:33:64:c2:d2:84:eb:b4:8b:82:36:de: 32:59:eb:4d:9c:84:2e:65:da:3d:f8:f7:75:60:4e: 37:5e:c0:95:ef:c5:6b:ec:9f:80:bc:20:e0:1f:9e: da:38:06:66:66:c2:63:04:d0:10:ed:75:b9:eb:1d: 38:55:89:3b:e2:f7:3f:04:76:48:bb:7e:ba:af:05: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.188.0/22 45.65.112.0/22 45.154.156.0/22 185.83.200.0/22 188.209.128.0/20 194.15.96.0/22 Signature Algorithm: sha256WithRSAEncryption 60:43:f7:d4:54:08:19:80:1b:74:8f:3f:78:7d:42:9f:96:9d: 6f:e9:28:37:e0:dc:7e:9a:7b:80:02:db:3a:d1:15:e4:b6:c5: 72:69:10:ca:8e:ef:51:37:89:ae:51:36:f5:25:06:8d:ea:08: f1:4c:ce:3d:e5:08:9f:68:b5:26:45:3e:b1:d7:68:4e:3b:c9: d6:74:77:e5:19:0a:7e:da:50:58:3e:f2:dc:23:c9:c0:6d:81: 32:42:b3:e2:95:8f:d7:d9:89:40:50:9c:08:39:5b:be:91:a0: 56:20:7b:d5:62:c2:ad:a1:03:a7:ca:35:74:d2:85:76:6f:4c: 8b:f4:75:95:5d:05:55:26:3c:6f:13:18:79:94:a4:62:c9:c7: 1f:db:bb:59:32:05:b2:d1:46:f6:43:f5:92:79:51:51:86:ef: c6:1c:83:0e:de:bf:2d:0c:a0:54:fa:d1:fa:29:09:cd:cd:b6: 2f:91:7c:a6:88:37:bd:53:9e:b0:62:87:04:48:4a:2e:e5:5e: 56:84:dc:30:a9:4a:4b:18:2a:96:90:38:4d:0a:c0:1a:27:95: 4b:b8:64:f6:4d:95:dc:26:6c:9e:be:e2:2f:ff:a1:b8:e3:18: 49:d7:84:b5:88:4e:ea:6a:2b:0c:75:ab:1a:fa:5b:54:57:0c: dd:1e:92:9e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt/g37i+kRtMyBkj2M0nPz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTFmMjk0NjJlN2E3ZGE3ZWI1ZjQ1ZGE3ODczZjE0ZTQwM2ZlM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuek/YB0UEymLO2qqGksfiNp72BhA mGVnavNBvXGTBdALOUMyiWxWoRnkSGSaVloA27dlOKDuoVaGHRRpT5un2tUbhsGL I9knTEDoXdRhsSGckm4ai39ciSXQPoKK7ARm1VgOLB2EcpCvyQniBSiEHDSJSsFJ RtRrQOZp0Dy7bmIzgb7FF/iijmCu7RkwgFXLP7tKUSFIIl80mKe6l3tSzrK0TJu9 /nvvAft+wVktPxKJtcyeOLcUM2TC0oTrtIuCNt4yWetNnIQuZdo9+Pd1YE43XsCV 78Vr7J+AvCDgH57aOAZmZsJjBNAQ7XW56x04VYk74vc/BHZIu366rwXb5wIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFAUfKUYuen2n619F2nhz8U5AP+OrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzM5NTMy OC1mNDYxLTQ0YjctYjAzMS0zZjhiNTVkYTFhYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMzk1MzI4 LWY0NjEtNDRiNy1iMDMxLTNmOGI1NWRhMWFjNC8xL0JSOHBSaTU2ZmFmclgwWGFl SFB4VGtBXzQ2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQCLQu8AwQCLUFwAwQCLZqcAwQCuVPIAwQEvNGA AwQCwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQBgQ/fUVAgZgBt0jz94fUKflp1v6Sg3 4Nx+mnuAAts60RXktsVyaRDKju9RN4muUTb1JQaN6gjxTM495QifaLUmRT6x12hO O8nWdHflGQp+2lBYPvLcI8nAbYEyQrPilY/X2YlAUJwIOVu+kaBWIHvVYsKtoQOn yjV00oV2b0yL9HWVXQVVJjxvExh5lKRiyccf27tZMgWy0Ub2Q/WSeVFRhu/GHIMO 3r8tDKBU+tH6KQnNzbYvkXymiDe9U56wYocESEou5V5WhNwwqUpLGCqWkDhNCsAa J5VLuGT2TZXcJmyevuIv/6G44xhJ14S1iE7qaisMdasa+ltUVwzdHpKe -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:19 2026 by rpki-client