This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer (raw, json) Hash identifier: p9OySkfKFf/JNc3he0KzPKLw/AyHUCR5sND3XCK4H0w= Subject key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC0C7D9BD106554F54B8247A25EE2CC8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 08:31:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202730 AS: 209244 IP: 81.172.67.0/24 IP: 185.142.112.0/24 IP: 2a07:2d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:c7:d9:bd:10:65:54:f5:4b:82:47:a2:5e:e2:cc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 08:31:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:6c:06:d9:a2:22:d9:8b:28:71:26:f6:a4: 3c:bc:b4:09:c9:bb:79:60:87:be:66:65:15:32:47: ef:e4:55:ac:00:7d:b9:53:97:48:b5:98:4a:e9:6b: d9:16:ff:33:5d:18:f3:d2:e6:a8:f8:20:57:bb:14: 17:49:68:60:cd:3b:43:b5:aa:95:ad:6e:c2:16:9d: 1e:06:e8:c2:d0:44:05:a6:29:11:81:02:34:6f:a0: 8d:ea:2b:1c:09:a8:f3:39:50:94:4f:d2:7e:02:b6: 65:24:bf:a7:c1:37:43:58:d7:8c:72:6b:95:de:fd: 03:dc:dd:a7:11:c6:33:fd:9b:d9:88:04:de:02:70: 79:e9:3a:ed:31:2c:f0:d7:46:fb:a8:c4:d8:f1:e1: f3:61:0e:bb:d5:69:ac:46:96:49:d8:66:08:d4:ac: b3:c8:d9:9c:1b:66:6e:ab:a0:df:3d:61:16:c6:6d: f1:c3:2e:92:60:60:24:15:cf:a5:0c:00:11:3f:1d: 52:0a:a1:6a:77:c2:78:38:4f:9c:81:43:f6:b5:4f: ed:01:41:d9:64:d9:e1:71:c7:23:d7:03:83:4c:b2: 51:76:ce:1a:b5:43:1b:60:98:19:3f:27:6b:0c:6e: c3:27:37:28:84:41:d4:73:04:f2:44:47:b5:93:96: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.67.0/24 185.142.112.0/24 IPv6: 2a07:2d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202730 209244 Signature Algorithm: sha256WithRSAEncryption 84:9d:77:4b:fe:8e:e4:81:3d:24:3c:82:f9:d0:18:ef:e6:25: 9f:0b:83:d1:5f:be:50:05:cc:76:9c:e0:7c:43:50:39:fa:80: c3:00:eb:6e:f1:88:5f:9e:b2:c7:32:78:b7:1d:e1:0b:d3:e5: 70:9c:ce:99:7c:69:c0:f0:f1:af:85:ff:2c:c5:d1:d9:dc:bc: 37:3e:bf:f4:50:6c:6f:20:c7:2c:ee:04:43:7f:0c:b4:41:ca: 96:bc:2b:b4:be:f9:2e:32:88:5a:9f:4e:78:dd:a7:83:06:c2: e8:2a:93:8f:14:82:32:79:8c:b8:e6:70:97:33:d4:49:26:43: 39:08:05:10:6a:34:97:04:b1:21:3e:79:1e:df:45:64:3c:6f: c7:00:42:a8:0f:52:e4:a1:1b:8c:81:17:02:1d:f7:e6:a1:da: f2:8e:a8:11:44:20:f1:8b:fb:8f:5b:ba:29:d5:0b:8e:a7:ef: 86:e6:54:42:51:8d:92:1f:49:86:03:6b:9b:9e:09:f1:f5:6c: 35:ff:9e:a7:8e:de:f2:32:ca:d4:26:19:d6:c8:9f:47:fb:e0: f8:a4:a1:04:ca:3a:a3:9a:90:e2:35:76:9f:64:3d:5f:fb:70: 4f:98:59:b6:2f:05:5c:84:1f:cd:78:6d:f1:7f:fe:ff:da:43: 5d:2d:37:37 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZvAx9m9EGVU9UuCR6Je4syMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MDgzMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWJkMGZhZWVkZTczYWQzY2ZjNDc3OGI4MjM4YzYwOGU0MGU5ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybxsBtmiItmLKHEm9qQ8vLQJybt5 YIe+ZmUVMkfv5FWsAH25U5dItZhK6WvZFv8zXRjz0uao+CBXuxQXSWhgzTtDtaqV rW7CFp0eBujC0EQFpikRgQI0b6CN6iscCajzOVCUT9J+ArZlJL+nwTdDWNeMcmuV 3v0D3N2nEcYz/ZvZiATeAnB56TrtMSzw10b7qMTY8eHzYQ671WmsRpZJ2GYI1Kyz yNmcG2Zuq6DfPWEWxm3xwy6SYGAkFc+lDAARPx1SCqFqd8J4OE+cgUP2tU/tAUHZ ZNnhcccj1wODTLJRds4atUMbYJgZPydrDG7DJzcohEHUcwTyREe1k5ZlbQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFAW9D67t5zrTz8R3i4I4xgjkDphBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzUyMTc4 OC1lNGJkLTQ4ODktYTU5Ny0xMmQwYjYzMmU1ZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNTIxNzg4 LWU0YmQtNDg4OS1hNTk3LTEyZDBiNjMyZTVlOC8xL0JiMFBydTNuT3RQUHhIZUxn ampHQ09RT21FRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAUaxDAwQAuY5wMA0EAgACMAcDBQMqBy0AMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMX6gIDAzFcMA0GCSqGSIb3DQEBCwUAA4IB AQCEnXdL/o7kgT0kPIL50Bjv5iWfC4PRX75QBcx2nOB8Q1A5+oDDAOtu8YhfnrLH Mni3HeEL0+VwnM6ZfGnA8PGvhf8sxdHZ3Lw3Pr/0UGxvIMcs7gRDfwy0QcqWvCu0 vvkuMohan0543aeDBsLoKpOPFIIyeYy45nCXM9RJJkM5CAUQajSXBLEhPnke30Vk PG/HAEKoD1LkoRuMgRcCHffmodryjqgRRCDxi/uPW7op1QuOp++G5lRCUY2SH0mG A2ubngnx9Ww1/56njt7yMsrUJhnWyJ9H++D4pKEEyjqjmpDiNXafZD1f+3BPmFm2 LwVchB/NeG3xf/7/2kNdLTc3 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:14 2026 by rpki-client