This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer File: RBMe6Tam-kL_OvCmrobCxmU91XM.cer (raw, json) Hash identifier: liswha8TR/7ow++PV+95O5ebyF8lLxvFsV9AfLr6qsM= Subject key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA38CBA60C96A65AF34F8E12C4D1C0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60906 IP: 193.23.16.0/22 IP: 2a0f:5680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8c:ba:60:c9:6a:65:af:34:f8:e1:2c:4d:1c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:8c:90:1f:0a:82:7d:d2:d8:32:5e:9f:ec: ac:6d:76:7c:90:da:cc:3b:5f:3f:73:3d:9b:c9:53: d5:c1:f1:95:bd:7b:92:f7:b4:06:97:94:0e:65:2c: b6:14:a4:78:20:0d:cc:d1:2d:69:ec:cd:9d:cb:7e: a2:d6:c0:21:35:48:5a:28:ee:aa:3c:5b:03:e9:8c: d5:35:53:24:2d:26:16:3c:7c:0a:da:99:75:6d:76: 56:8f:51:ff:36:05:c8:69:69:61:ac:89:6c:bd:96: e1:d7:ae:62:0c:6d:bd:63:4a:7e:20:af:e6:47:1e: 89:0a:ae:ec:bb:51:ab:dd:64:e1:9e:0e:27:05:a9: b4:2c:49:8b:61:e5:17:5e:bf:2d:56:a2:88:db:22: dd:91:97:6e:cf:1c:15:03:3a:d2:64:78:75:e7:46: 7a:6b:74:d8:91:ea:44:b3:0a:f8:7b:82:17:fa:3e: f9:e0:15:10:4f:ec:b4:62:49:79:53:d1:4c:49:57: 46:8f:c7:4d:22:2d:4d:2a:fc:9b:6a:5b:54:69:07: 0c:49:fc:38:a9:0b:79:8b:0f:0d:c5:11:29:04:01: 48:7d:4a:8d:ac:10:df:e2:ed:ce:96:fd:f7:0e:20: 80:18:6f:ca:5e:0d:5e:48:5c:7d:47:2d:5c:0f:26: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.16.0/22 IPv6: 2a0f:5680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60906 Signature Algorithm: sha256WithRSAEncryption 92:92:6c:88:2a:eb:8e:a0:6e:82:e9:5a:4d:98:6f:8f:60:d3: 90:0d:30:07:95:c4:55:11:96:5f:f0:42:42:f6:9a:a1:b3:9f: 78:17:e9:f5:f2:c3:57:49:b1:f5:21:fa:7f:d9:c1:03:65:57: 63:83:9e:6c:e4:61:bd:15:db:d2:cb:48:2b:61:8f:be:aa:0b: 9d:c7:17:bf:85:0c:f5:1a:ad:f1:57:08:53:df:e0:15:50:f6: 51:90:68:6f:29:39:e2:56:11:e2:76:3d:b4:15:01:23:2d:4a: 85:65:b7:1a:60:1d:83:59:bb:48:8e:9e:8e:8e:2b:4e:61:ef: c4:75:84:0f:0e:a4:e6:ef:ba:75:a3:86:bb:4a:16:4d:b3:52: b3:ac:a0:21:24:8d:d6:96:7a:43:14:76:23:cc:e3:cc:af:a4: f6:da:9e:04:aa:e8:c7:ed:1b:ad:4c:40:6e:18:fa:e0:6e:b7: 5a:dc:7d:51:30:27:87:68:70:85:c7:5d:41:73:bd:ef:a8:42: 92:e3:bd:bb:71:d3:b4:2d:5e:fe:97:f0:a5:9c:df:d2:69:0b: a7:9e:c3:ab:71:2c:16:16:16:61:5d:4d:74:09:4b:79:ec:3f: 2d:d0:0f:08:37:a2:3a:63:43:1f:59:2f:52:a6:bf:25:4c:ba: b1:dc:ae:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o4y6YMlqZa80+OEsTRwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDEzMWVlOTM2YTZmYTQyZmYzYWYwYTZhZTg2YzJjNjY1M2RkNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AmMkB8Kgn3S2DJen+ysbXZ8kNrM O18/cz2byVPVwfGVvXuS97QGl5QOZSy2FKR4IA3M0S1p7M2dy36i1sAhNUhaKO6q PFsD6YzVNVMkLSYWPHwK2pl1bXZWj1H/NgXIaWlhrIlsvZbh165iDG29Y0p+IK/m Rx6JCq7su1Gr3WThng4nBam0LEmLYeUXXr8tVqKI2yLdkZduzxwVAzrSZHh150Z6 a3TYkepEswr4e4IX+j754BUQT+y0Ykl5U9FMSVdGj8dNIi1NKvybaltUaQcMSfw4 qQt5iw8NxREpBAFIfUqNrBDf4u3Olv33DiCAGG/KXg1eSFx9Ry1cDyZ0xQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEQTHuk2pvpC/zrwpq6GwsZlPdVzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzFkNDRm Mi0xNzA2LTRiZjEtYjcxZC03NGNhMzY0MDJhODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvMWQ0NGYy LTE3MDYtNGJmMS1iNzFkLTc0Y2EzNjQwMmE4NS8xL1JCTWU2VGFtLWtMX092Q21y b2JDeG1VOTFYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwRcQMA0EAgACMAcDBQMqD1aAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDt6jANBgkqhkiG9w0BAQsFAAOCAQEAkpJsiCrrjqBu gulaTZhvj2DTkA0wB5XEVRGWX/BCQvaaobOfeBfp9fLDV0mx9SH6f9nBA2VXY4Oe bORhvRXb0stIK2GPvqoLnccXv4UM9Rqt8VcIU9/gFVD2UZBobyk54lYR4nY9tBUB Iy1KhWW3GmAdg1m7SI6ejo4rTmHvxHWEDw6k5u+6daOGu0oWTbNSs6ygISSN1pZ6 QxR2I8zjzK+k9tqeBKrox+0brUxAbhj64G63Wtx9UTAnh2hwhcddQXO976hCkuO9 u3HTtC1e/pfwpZzf0mkLp57Dq3EsFhYWYV1NdAlLeew/LdAPCDeiOmNDH1kvUqa/ JUy6sdyuLw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:34 2026 by rpki-client