This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer File: b1frSRlt0uBgbVl3wrdLEBt5vAs.cer (raw, json) Hash identifier: SQaF4o5bd6L52szAyU0122oQG6EQ/L/PAUjoebGt+CE= Subject key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783549A7CD0E697FEAA533063C8B45F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201967 IP: 193.104.143.0/24 IP: 2a0c:2380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:49:a7:cd:0e:69:7f:ea:a5:33:06:3c:8b:45:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:ac:2d:57:df:d1:23:a2:a6:8d:59:f5:c6: 44:29:42:a5:97:31:f5:a5:d0:d3:9e:7b:ba:22:62: db:b4:8b:4c:92:80:f1:08:a7:95:e6:68:ac:68:77: f5:1f:5a:bd:22:87:77:a2:df:64:e4:b9:c0:37:fc: d6:e1:63:91:19:d2:e1:7f:03:2d:db:92:09:56:91: a2:6c:94:06:18:9e:e5:cd:23:24:ec:37:6c:71:8d: 83:ad:2d:22:a4:2f:a0:bd:93:27:c1:54:4c:56:41: f9:7f:f9:ae:f3:b1:e1:1a:3f:b1:8c:be:9d:9c:1e: a2:c7:a3:fb:aa:3d:51:38:08:f4:9a:96:a2:97:08: 72:12:38:2c:d7:a4:df:53:7a:d2:aa:b5:5f:2d:e6: bd:45:9d:87:ee:06:ad:13:de:d8:88:4b:a4:9e:71: 43:83:9f:73:f7:ba:34:78:be:53:16:7d:cc:0c:eb: 7e:83:37:05:2a:7b:a3:86:3e:0a:2b:8f:4a:1d:17: 5d:cb:02:5d:73:9b:15:a3:1c:9b:fb:23:0a:96:ce: 9c:b9:f4:4d:62:d2:56:36:f1:cd:b7:1b:d5:84:3f: 38:9a:c4:3e:98:db:12:cf:0c:74:f5:19:ee:ee:cf: e1:62:7f:9e:0f:8a:ad:e1:36:42:46:f6:08:c8:14: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.143.0/24 IPv6: 2a0c:2380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201967 Signature Algorithm: sha256WithRSAEncryption 06:a8:ef:15:6e:a4:9d:8b:eb:6c:5d:c6:50:93:d4:e5:8e:c3: 58:db:9a:f2:94:c3:bb:b8:b6:c8:2e:59:12:72:2c:3f:47:ce: 67:93:da:a5:9d:55:ec:32:e7:12:25:6d:09:4f:ab:1b:41:8d: 99:aa:bf:4d:98:54:d9:14:da:5d:d6:ab:2d:b3:e4:2f:ee:08: 35:76:cb:26:0c:7e:5b:35:93:13:68:42:48:14:7b:d0:bb:48: 6f:ac:bd:a2:43:b0:c3:52:b9:f4:8a:9c:3c:29:ae:60:84:96: af:1d:48:db:ca:66:9a:17:9a:44:b0:4b:08:bb:b5:2b:f0:ca: fb:9f:52:93:2f:c3:11:6f:3e:a6:98:41:bb:bb:9a:c8:7b:f4: dd:0b:0f:7b:95:43:48:08:91:5b:39:04:de:04:99:be:4b:08: 5c:66:62:28:91:47:dc:ad:a0:ad:42:92:c4:63:bb:bc:7d:a2: b8:b2:c6:94:28:37:c1:97:5a:dd:96:44:ec:43:62:bf:7e:23: 17:9f:1c:8d:af:d5:ca:12:f0:4a:d7:56:d3:b2:75:9b:d4:a6: ed:d1:7b:29:62:15:de:47:d3:17:71:8b:f4:e3:a8:ae:f4:05: c5:88:67:8f:97:fc:11:b1:04:a9:e5:12:3a:c7:d9:9e:aa:f5: 66:aa:08:c3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NUmnzQ5pf+qlMwY8i0X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU3ZWI0OTE5NmRkMmUwNjA2ZDU5NzdjMmI3NGIxMDFiNzliYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYysLVff0SOipo1Z9cZEKUKllzH1 pdDTnnu6ImLbtItMkoDxCKeV5misaHf1H1q9Iod3ot9k5LnAN/zW4WORGdLhfwMt 25IJVpGibJQGGJ7lzSMk7DdscY2DrS0ipC+gvZMnwVRMVkH5f/mu87HhGj+xjL6d nB6ix6P7qj1ROAj0mpailwhyEjgs16TfU3rSqrVfLea9RZ2H7gatE97YiEuknnFD g59z97o0eL5TFn3MDOt+gzcFKnujhj4KK49KHRddywJdc5sVoxyb+yMKls6cufRN YtJWNvHNtxvVhD84msQ+mNsSzwx09Rnu7s/hYn+eD4qt4TZCRvYIyBQz6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG9X60kZbdLgYG1Zd8K3SxAbebwLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2M3YmY0 YS1kYTk3LTRiNWItODcxOS0zN2IzZTI0NGMwNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYzdiZjRh LWRhOTctNGI1Yi04NzE5LTM3YjNlMjQ0YzA2My8xL2IxZnJTUmx0MHVCZ2JWbDN3 cmRMRUJ0NXZBcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWiPMA0EAgACMAcDBQMqDCOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMU7zANBgkqhkiG9w0BAQsFAAOCAQEABqjvFW6knYvr bF3GUJPU5Y7DWNua8pTDu7i2yC5ZEnIsP0fOZ5PapZ1V7DLnEiVtCU+rG0GNmaq/ TZhU2RTaXdarLbPkL+4INXbLJgx+WzWTE2hCSBR70LtIb6y9okOww1K59IqcPCmu YISWrx1I28pmmheaRLBLCLu1K/DK+59Sky/DEW8+pphBu7uayHv03QsPe5VDSAiR WzkE3gSZvksIXGZiKJFH3K2grUKSxGO7vH2iuLLGlCg3wZda3ZZE7ENiv34jF58c ja/VyhLwStdW07J1m9Sm7dF7KWIV3kfTF3GL9OOorvQFxYhnj5f8EbEEqeUSOsfZ nqr1ZqoIww== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:43 2026 by rpki-client