This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer File: Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer (raw, json) Hash identifier: 5pvr6p7vlD65Ro8ZbNBbEWBS2swRifydP1kbXK9DzR4= Subject key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CA9083BC08F485DF39AE9EA85757 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214905 IP: 185.54.2.0/23 IP: 185.222.40.0/24 IP: 200.225.56.0/23 IP: 213.254.176.0/23 IP: 2a14:4ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ca:90:83:bc:08:f4:85:df:39:ae:9e:a8:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:d0:90:34:1e:83:c7:fd:c0:99:dd:d7:c0: f3:d1:2c:56:7b:8a:28:d7:24:f5:99:a8:64:f9:40: 60:48:74:32:6c:e1:10:44:bb:39:53:52:9b:4a:71: 4c:64:06:e5:ee:36:f1:1f:64:f2:6d:b1:c7:fe:42: 30:72:9e:52:29:a6:50:09:12:c3:bd:90:2b:c4:c7: ac:88:27:e3:00:a8:f2:5a:78:82:82:ac:ba:4d:55: 7d:3d:da:46:91:f8:88:3e:f6:11:4a:a6:89:d8:e5: f9:3a:86:87:ad:fb:76:83:41:0b:86:c8:ef:f5:cc: 72:50:86:75:5b:c3:d9:d9:f3:21:44:7e:67:2c:1b: 42:5e:27:4d:4a:9e:c6:98:f3:e3:2e:bc:b8:3e:6c: d0:0a:5b:f7:4b:7a:8d:da:5b:28:a6:3e:ce:1e:04: de:f4:cb:f6:42:51:c4:63:65:47:6a:5c:5f:b8:89: b3:e2:14:09:42:e6:b0:5a:0b:44:98:3f:d1:5d:de: bc:41:28:4b:e6:c8:98:22:c7:8c:c1:e3:45:f8:4b: 11:32:a1:f9:78:6f:7f:43:a1:60:30:7a:99:f4:88: 38:0e:78:b1:7e:c8:ec:fb:ea:ab:a9:db:5e:6a:f4: 58:0b:31:bc:52:01:27:eb:6f:6d:8f:a3:43:c4:80: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.2.0/23 185.222.40.0/24 200.225.56.0/23 213.254.176.0/23 IPv6: 2a14:4ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214905 Signature Algorithm: sha256WithRSAEncryption 82:8e:9b:d0:be:b6:84:e3:02:6a:15:4f:56:70:95:1f:f4:07: 79:b9:96:e8:dc:58:04:c4:31:fa:46:91:ba:f9:b3:8e:76:c3: e8:6e:a1:08:5e:b0:c1:4d:65:5b:d9:cb:5f:31:bd:d9:95:e0: b4:ca:34:ba:14:89:b3:28:24:00:68:f3:af:39:87:40:0c:8e: fb:d8:70:ae:1c:9b:dc:8a:46:04:ec:ee:f1:fd:40:14:8b:3a: 33:d0:26:50:03:76:7b:89:51:22:f0:cb:85:33:97:b6:db:6b: a9:42:b3:33:6f:40:95:3e:2d:41:96:2b:13:a5:05:75:89:20: 8c:9f:73:95:d8:3a:b1:14:a8:c6:33:0a:6e:d6:8a:67:4a:5d: 50:5d:f5:e5:d3:a1:15:b2:95:4c:b7:cf:70:64:53:b1:8d:22: 4c:be:de:26:23:9e:6a:b0:ce:75:6e:90:12:b6:9b:92:4c:76: ad:9f:dd:a0:83:e8:6b:ed:51:cf:c8:1e:92:51:e4:d3:bb:cf: 5f:3b:f4:65:d3:05:b7:69:ee:73:19:ab:df:c9:61:d4:8d:e0: e3:72:38:80:1d:30:94:0d:ae:b4:bd:27:4b:35:75:30:5b:3b: a0:29:3f:67:93:9e:88:8f:09:36:12:a3:c3:b6:fb:0f:ca:07: c4:4d:bd:51 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3WMqQg7wI9IXfOa6eqFdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ2ZWJlYTZlNmVhOWU2MDA2YTgxMzQ0ZDExNjNmYmVjNGZhODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttTQkDQeg8f9wJnd18Dz0SxWe4oo 1yT1mahk+UBgSHQybOEQRLs5U1KbSnFMZAbl7jbxH2TybbHH/kIwcp5SKaZQCRLD vZArxMesiCfjAKjyWniCgqy6TVV9PdpGkfiIPvYRSqaJ2OX5OoaHrft2g0ELhsjv 9cxyUIZ1W8PZ2fMhRH5nLBtCXidNSp7GmPPjLry4PmzQClv3S3qN2lsopj7OHgTe 9Mv2QlHEY2VHalxfuImz4hQJQuawWgtEmD/RXd68QShL5siYIseMweNF+EsRMqH5 eG9/Q6FgMHqZ9Ig4Dnixfsjs++qrqdteavRYCzG8UgEn629tj6NDxICADQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEbW6+pubqnmAGqBNE0RY/vsT6hIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzE1NTQx ZC1hN2JhLTQ3MTAtYTVjZi05NjVjYzIwOGVlNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMTU1NDFk LWE3YmEtNDcxMC1hNWNmLTk2NWNjMjA4ZWU0MC8xL1J0YnI2bTV1cWVZQWFvRTBU UkZqLS14UHFFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBuTYCAwQAud4oAwQByOE4AwQB1f6wMA0EAgAC MAcDBQMqFErAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHeTANBgkqhkiG9w0B AQsFAAOCAQEAgo6b0L62hOMCahVPVnCVH/QHebmW6NxYBMQx+kaRuvmzjnbD6G6h CF6wwU1lW9nLXzG92ZXgtMo0uhSJsygkAGjzrzmHQAyO+9hwrhyb3IpGBOzu8f1A FIs6M9AmUAN2e4lRIvDLhTOXtttrqUKzM29AlT4tQZYrE6UFdYkgjJ9zldg6sRSo xjMKbtaKZ0pdUF315dOhFbKVTLfPcGRTsY0iTL7eJiOearDOdW6QErabkkx2rZ/d oIPoa+1Rz8geklHk07vPXzv0ZdMFt2nucxmr38lh1I3g43I4gB0wlA2utL0nSzV1 MFs7oCk/Z5OeiI8JNhKjw7b7D8oHxE29UQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:29 2026 by rpki-client