This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer File: b13p-du9RhiFe1gQXGdDcgoRvG4.cer (raw, json) Hash identifier: XBLXRS9kxtiRZsyK7lpUHXI1w3xAqtYBTza1iCg3PmE= Subject key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1542A414798FA51D3CEF8AB03682AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199092 AS: 213298 IP: 5.187.56.0/21 IP: 2a01:41c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:42:a4:14:79:8f:a5:1d:3c:ef:8a:b0:36:82:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:70:c9:a3:04:a1:92:73:28:1e:00:33:d9: 41:95:40:b7:3c:00:79:2f:14:59:3e:b4:46:72:c1: de:a0:aa:88:da:08:7f:b8:1c:9a:3e:45:bb:99:05: 3d:0c:f7:5b:d7:c0:76:23:4d:e6:85:66:1d:65:49: d4:84:51:50:be:b2:65:87:51:05:ab:e1:30:f3:1d: dc:bd:f5:a4:2d:ae:00:3e:18:8d:cf:32:c0:b6:cf: 2a:d5:62:bf:92:d5:bc:41:18:64:f9:a4:12:bd:7c: 56:de:e7:69:9f:44:d4:38:0b:5a:4c:62:d5:fd:55: 8d:64:d6:5c:b8:54:1f:88:ec:c6:fa:fc:b7:52:00: 8f:57:4b:e0:bc:5e:8d:9d:52:53:21:6a:42:f8:0e: 44:e0:d1:bb:df:73:1e:15:6b:2e:88:f0:2b:95:f5: 99:91:f5:be:59:07:ee:bd:9c:88:cb:e8:55:be:90: 71:21:b4:3b:b1:f5:15:3d:ed:56:8d:0b:c6:9b:52: f0:b3:4c:cf:97:b2:81:67:ca:26:f8:65:c7:3d:18: 44:b1:98:c6:c2:b2:30:8f:87:7a:78:a9:aa:d3:69: 85:32:c8:8d:a6:5d:b5:7a:a3:62:61:4f:b9:98:83: 1f:d9:d5:ef:8f:9c:99:47:1d:53:b4:64:33:51:eb: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.187.56.0/21 IPv6: 2a01:41c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199092 213298 Signature Algorithm: sha256WithRSAEncryption 68:a8:42:44:10:de:c9:f6:0d:ee:b6:11:9d:d1:25:6a:4e:56: 4b:59:01:7f:a5:02:34:d9:f6:83:da:61:49:52:d8:80:53:fd: eb:1c:d3:93:88:e9:82:09:fc:b7:7b:8c:c9:ea:42:c8:b2:68: 60:ca:65:2b:02:34:29:cc:8a:fe:1d:f6:08:17:10:66:69:4e: 6b:13:a0:24:61:93:bd:09:f1:8f:08:20:57:9e:5b:10:f4:44: 34:d2:c9:5e:76:cc:ef:6d:3d:11:d2:5f:53:f0:c8:a9:99:94: f2:4a:1a:b3:e8:01:f3:84:f6:34:03:4f:c8:45:ad:e8:d2:49: 6c:a7:d5:70:9e:04:1b:49:99:25:cb:38:55:47:16:ca:7b:00: 15:f1:fd:dd:44:50:e7:07:de:8a:10:e6:8c:23:1b:00:a4:28: 84:13:17:4f:d5:e8:0e:10:00:55:d2:e1:1e:da:30:62:3c:cd: a8:b1:e5:e1:c7:42:d5:c1:1e:dd:85:73:27:a8:9d:47:9d:42: b0:e2:fd:d3:9a:79:e1:a0:79:36:89:31:35:33:f6:ef:77:43: ef:c6:cd:bf:34:f7:cc:d1:23:5a:a2:aa:22:09:9b:b1:59:35: 15:1d:e0:96:b2:2f:ce:07:cc:32:4f:d7:f0:61:2a:fc:7d:b9: c0:7a:09:3e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/FUKkFHmPpR0874qwNoKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVkZTlmOWRiYmQ0NjE4ODU3YjU4MTA1YzY3NDM3MjBhMTFiYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK1wyaMEoZJzKB4AM9lBlUC3PAB5 LxRZPrRGcsHeoKqI2gh/uByaPkW7mQU9DPdb18B2I03mhWYdZUnUhFFQvrJlh1EF q+Ew8x3cvfWkLa4APhiNzzLAts8q1WK/ktW8QRhk+aQSvXxW3udpn0TUOAtaTGLV /VWNZNZcuFQfiOzG+vy3UgCPV0vgvF6NnVJTIWpC+A5E4NG733MeFWsuiPArlfWZ kfW+WQfuvZyIy+hVvpBxIbQ7sfUVPe1WjQvGm1Lws0zPl7KBZ8om+GXHPRhEsZjG wrIwj4d6eKmq02mFMsiNpl21eqNiYU+5mIMf2dXvj5yZRx1TtGQzUevasQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFG9d6fnbvUYYhXtYEFxnQ3IKEbxuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzYxZmNi NC01NTc0LTRlMmUtYjI1OS1hZTA1Nzk0YzhlMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNjFmY2I0 LTU1NzQtNGUyZS1iMjU5LWFlMDU3OTRjOGUxMy8xL2IxM3AtZHU5UmhpRmUxZ1FY R2REY2dvUnZHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBbs4MA0EAgACMAcDBQAqAUHAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMJtAIDA0EyMA0GCSqGSIb3DQEBCwUAA4IBAQBoqEJE EN7J9g3uthGd0SVqTlZLWQF/pQI02faD2mFJUtiAU/3rHNOTiOmCCfy3e4zJ6kLI smhgymUrAjQpzIr+HfYIFxBmaU5rE6AkYZO9CfGPCCBXnlsQ9EQ00sledszvbT0R 0l9T8MipmZTyShqz6AHzhPY0A0/IRa3o0klsp9VwngQbSZklyzhVRxbKewAV8f3d RFDnB96KEOaMIxsApCiEExdP1egOEABV0uEe2jBiPM2oseXhx0LVwR7dhXMnqJ1H nUKw4v3TmnnhoHk2iTE1M/bvd0Pvxs2/NPfM0SNaoqoiCZuxWTUVHeCWsi/OB8wy T9fwYSr8fbnAegk+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:13 2026 by rpki-client