This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer (raw, json) Hash identifier: KJiHNUP/tKdycBpUDKmbY/CC4RCpvEwmbCrXAFdN9o4= Subject key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC92041CC3865C5B1E944B455887F2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44128 IP: 80.87.96.0/20 IP: 91.201.52.0/22 IP: 91.226.80.0/22 IP: 185.41.160.0/22 IP: 185.93.108.0/22 IP: 193.107.236.0/22 IP: 213.189.216.0/21 IP: 2a01:5560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:20:41:cc:38:65:c5:b1:e9:44:b4:55:88:7f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06ce5b28466b92742526031392d94bf1a558e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:de:7d:d9:50:89:91:79:8a:ef:8a:93:92: 66:4f:b9:a6:bd:55:ce:d1:4c:44:aa:e2:fc:6a:0e: 99:36:2f:36:4d:23:ac:32:01:c9:e9:09:f3:29:7c: 2a:c7:86:99:30:d5:b3:ac:98:54:0e:d7:67:26:75: b1:a6:72:08:0d:b8:4e:c5:d4:45:70:5d:8d:85:e8: 27:76:4a:3a:ab:53:e0:8b:27:39:af:74:79:9c:79: 9c:b4:d8:dd:a4:f0:56:5a:a4:31:ce:43:ec:19:e4: ca:70:40:4d:f5:a4:2c:de:cb:2e:80:b5:2d:5b:0d: eb:47:ec:d3:19:a3:2e:6e:d9:cc:ca:94:33:cc:63: a7:bb:98:bc:92:cd:dc:03:cc:b9:0c:bd:8b:85:3b: 16:1b:d5:07:10:84:49:c7:fc:eb:02:2f:e7:89:05: a0:8e:fb:24:38:bd:bb:70:6d:da:7f:cb:b5:83:da: ec:88:04:d7:ff:fb:8a:8f:f1:25:4e:99:35:09:4e: 11:af:8a:62:e3:07:3c:85:61:96:00:eb:88:e0:4a: d7:04:b1:f0:51:44:97:af:31:59:2d:09:4e:c7:88: c4:0c:c9:2e:04:d1:9b:b5:04:97:00:bf:45:5c:20: b6:84:bd:b7:a0:ee:df:3b:f9:62:6e:97:dd:bb:45: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.96.0/20 91.201.52.0/22 91.226.80.0/22 185.41.160.0/22 185.93.108.0/22 193.107.236.0/22 213.189.216.0/21 IPv6: 2a01:5560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44128 Signature Algorithm: sha256WithRSAEncryption 94:5c:8c:ae:96:cc:ab:12:b2:b9:f3:dc:d0:14:df:f5:6c:1f: f6:b4:04:55:6b:7d:b1:98:82:43:8e:77:23:3a:05:ae:14:fb: 97:19:f5:6e:f5:8b:61:28:db:61:42:18:f7:c7:3b:80:45:59: 47:3b:bf:0e:08:34:9e:fa:6d:4f:af:2a:2f:c6:9a:6d:af:88: ea:70:c0:c1:7c:31:e5:81:8a:37:f9:c2:14:bb:60:b8:13:b7: 10:c1:5c:10:54:56:4d:72:04:54:41:0f:b2:62:1f:bb:51:f3: 25:27:7a:0a:08:27:93:4d:32:01:e9:23:5d:5c:59:8b:e5:da: 44:1f:8c:d7:00:a1:25:c7:57:59:35:2b:cc:87:ae:c7:47:1a: e9:44:43:ee:56:42:6a:68:7c:ca:24:55:ef:98:84:0c:d2:78: 1c:f3:da:97:4d:d9:ff:91:45:75:d4:ed:3c:c2:fc:ae:3f:64: 42:2d:fc:2b:f6:6b:72:d6:98:02:14:4c:f4:18:fb:d3:42:c0: 9b:33:35:80:aa:cf:cb:4f:78:44:d5:0e:c2:19:77:c1:74:67: b9:b5:75:d6:12:d8:8f:b7:4f:3b:e8:e4:29:d7:77:da:ca:af: 9a:a9:76:e6:e6:74:70:1d:e2:32:99:3a:9b:4e:35:e3:9b:03: 9e:6e:f6:3c -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt6ySBBzDhlxbHpRLRViH8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNlNWIyODQ2NmI5Mjc0MjUyNjAzMTM5MmQ5NGJmMWE1NThlODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN7efdlQiZF5iu+Kk5JmT7mmvVXO 0UxEquL8ag6ZNi82TSOsMgHJ6QnzKXwqx4aZMNWzrJhUDtdnJnWxpnIIDbhOxdRF cF2Nhegndko6q1Pgiyc5r3R5nHmctNjdpPBWWqQxzkPsGeTKcEBN9aQs3ssugLUt Ww3rR+zTGaMubtnMypQzzGOnu5i8ks3cA8y5DL2LhTsWG9UHEIRJx/zrAi/niQWg jvskOL27cG3af8u1g9rsiATX//uKj/ElTpk1CU4Rr4pi4wc8hWGWAOuI4ErXBLHw UUSXrzFZLQlOx4jEDMkuBNGbtQSXAL9FXCC2hL23oO7fO/libpfdu0XnvQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFAbOWyhGa5J0JSYDE5LZS/GlWOhEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzQ1Y2Yz Ny1hZmE1LTQ5OTQtYWVkYi00ODViMjA5NTJkOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNDVjZjM3 LWFmYTUtNDk5NC1hZWRiLTQ4NWIyMDk1MmQ5My8xL0JzNWJLRVpya25RbEpnTVRr dGxMOGFWWTZFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQEUFdgAwQCW8k0AwQCW+JQAwQCuSmgAwQCuV1s AwQCwWvsAwQD1b3YMA0EAgACMAcDBQAqAVVgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCsYDANBgkqhkiG9w0BAQsFAAOCAQEAlFyMrpbMqxKyufPc0BTf9Wwf9rQE VWt9sZiCQ453IzoFrhT7lxn1bvWLYSjbYUIY98c7gEVZRzu/Dgg0nvptT68qL8aa ba+I6nDAwXwx5YGKN/nCFLtguBO3EMFcEFRWTXIEVEEPsmIfu1HzJSd6Cggnk00y AekjXVxZi+XaRB+M1wChJcdXWTUrzIeux0ca6URD7lZCamh8yiRV75iEDNJ4HPPa l03Z/5FFddTtPML8rj9kQi38K/ZrctaYAhRM9Bj700LAmzM1gKrPy094RNUOwhl3 wXRnubV11hLYj7dPO+jkKdd32sqvmql25uZ0cB3iMpk6m04145sDnm72PA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:06 2026 by rpki-client