This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer (raw, json) Hash identifier: sIIsQ8XkHvHEwH90qsMAZMnIgyz19ydvXQWX49EGBLI= Subject key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E3C74BB3EB4A07199CBFAB71E22B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47825 IP: 185.222.62.0/24 IP: 2a13:a140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3c:74:bb:3e:b4:a0:71:99:cb:fa:b7:1e:22:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4410d28a9274f9df1065b7f62f8b8997739c047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:33:7e:fb:fb:94:be:f7:89:9d:35:61:35: 1c:7c:b4:d3:c2:88:42:80:f2:d7:7e:e6:30:36:81: e8:de:4a:bd:2d:d6:24:1d:47:3f:41:ae:e7:2b:bc: 46:c2:61:3c:b3:7b:40:dd:a8:7d:e0:06:1f:64:b7: b7:18:80:d8:e3:35:b4:51:29:63:e1:d2:6e:60:a6: fa:84:35:5b:cd:c0:7d:49:40:67:00:bc:49:02:1f: 47:63:96:96:38:e0:49:15:53:8b:e2:cc:30:b5:bd: 0d:39:79:8f:c9:39:da:9e:f1:0a:76:b9:71:3a:e5: c6:5b:43:a2:22:a0:af:3b:e3:f0:71:bf:04:81:a1: ba:61:ac:d9:8e:75:9f:4c:3a:21:84:df:f4:81:d1: 3a:90:da:d4:03:20:9a:e5:f6:e7:57:3d:32:ea:e1: a4:44:5e:a9:47:bf:d9:45:88:fa:6d:cf:0d:b2:fb: d0:9f:32:e1:6a:a2:05:48:e2:8f:de:e1:ad:4a:77: 42:99:6e:20:36:a8:30:02:04:2e:e3:02:96:d3:f7: 08:4c:f5:9d:e7:74:cd:e4:d9:9f:f6:da:49:ed:00: 43:5a:aa:36:78:c5:1f:9d:53:dc:6d:ac:eb:44:0c: f5:78:89:e3:aa:67:82:bf:b2:67:2f:0a:43:ce:00: 78:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.62.0/24 IPv6: 2a13:a140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47825 Signature Algorithm: sha256WithRSAEncryption 03:3f:62:dd:7e:82:3f:c6:f9:31:4e:8b:9b:61:81:e5:f4:d2: d6:61:c8:16:0e:37:52:5b:73:53:de:8e:90:90:67:9f:d7:5c: 14:02:04:28:36:37:de:bf:98:d2:ea:8f:df:a1:1b:8d:80:12: 86:a5:98:0f:53:a6:71:4a:99:69:ad:23:13:b5:c3:69:56:d1: 10:e8:c0:92:a6:d1:30:c1:07:96:c6:56:6d:27:a6:e9:8f:3a: 98:37:8e:5e:b3:f0:62:d9:49:29:0b:da:bc:ec:3f:cd:88:5f: 72:bc:34:1a:ff:25:58:58:30:75:b5:30:2e:2c:9b:94:21:0b: fe:f7:1e:2e:d0:6d:35:eb:9f:d3:35:0f:c3:65:03:34:a1:75: 48:f5:65:88:0a:91:af:90:85:53:03:da:4d:5b:a5:0f:0a:c5: a6:59:7a:9e:a5:55:1f:f3:27:5c:b7:01:8b:e0:fc:23:26:af: 2b:58:35:13:a4:c7:74:6d:c8:39:03:09:41:3a:5e:9f:8f:de: d3:26:f8:eb:0d:e1:ac:3d:3d:3a:32:08:57:3e:7c:c6:4f:27: 70:cf:7e:95:ef:8e:56:22:9b:aa:5c:57:47:49:e6:83:c3:b9: 18:83:55:ae:e2:e5:7f:ff:0c:ea:12:a9:bc:96:95:19:c3:96: 07:38:25:3a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fjx0uz60oHGZy/q3HiK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDEwZDI4YTkyNzRmOWRmMTA2NWI3ZjYyZjhiODk5NzczOWMwNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gszfvv7lL73iZ01YTUcfLTTwohC gPLXfuYwNoHo3kq9LdYkHUc/Qa7nK7xGwmE8s3tA3ah94AYfZLe3GIDY4zW0USlj 4dJuYKb6hDVbzcB9SUBnALxJAh9HY5aWOOBJFVOL4swwtb0NOXmPyTnanvEKdrlx OuXGW0OiIqCvO+Pwcb8EgaG6YazZjnWfTDohhN/0gdE6kNrUAyCa5fbnVz0y6uGk RF6pR7/ZRYj6bc8NsvvQnzLhaqIFSOKP3uGtSndCmW4gNqgwAgQu4wKW0/cITPWd 53TN5Nmf9tpJ7QBDWqo2eMUfnVPcbazrRAz1eInjqmeCv7JnLwpDzgB4rQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEQQ0oqSdPnfEGW39i+LiZdznAR9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzMzYWEy Zi1jNDA5LTRjNzAtYWUwZS05MDc4MzhiNTcyNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMzNhYTJm LWM0MDktNGM3MC1hZTBlLTkwNzgzOGI1NzI1Zi8xL1JCRFNpcEowLWQ4UVpiZjJM NHVKbDNPY0JIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAud4+MA0EAgACMAcDBQMqE6FAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC60TANBgkqhkiG9w0BAQsFAAOCAQEAAz9i3X6CP8b5 MU6Lm2GB5fTS1mHIFg43UltzU96OkJBnn9dcFAIEKDY33r+Y0uqP36EbjYAShqWY D1OmcUqZaa0jE7XDaVbREOjAkqbRMMEHlsZWbSem6Y86mDeOXrPwYtlJKQvavOw/ zYhfcrw0Gv8lWFgwdbUwLiyblCEL/vceLtBtNeuf0zUPw2UDNKF1SPVliAqRr5CF UwPaTVulDwrFpll6nqVVH/MnXLcBi+D8IyavK1g1E6THdG3IOQMJQTpen4/e0yb4 6w3hrD09OjIIVz58xk8ncM9+le+OViKbqlxXR0nmg8O5GINVruLlf/8M6hKpvJaV GcOWBzglOg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:52 2026 by rpki-client