This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer File: b20hysOH8-N4uiOkynfeyTA7qS0.cer (raw, json) Hash identifier: Uo6soye9H/tZrnPtA7uSxcZx8YEjdlfGTif+Bw8cRPw= Subject key identifier: 6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5838EB0435FEA9F5B12C806492CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21249 IP: 79.110.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:58:38:eb:04:35:fe:a9:f5:b1:2c:80:64:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:44:b5:15:34:19:0b:60:83:c2:6e:28:8d: ed:5b:20:9b:37:8f:3f:5b:30:1f:58:8b:05:2c:18: 1b:d8:95:14:b3:ad:4c:4c:88:b6:fd:df:b8:11:b0: 9c:c2:95:43:5d:a2:25:72:64:99:0a:81:65:2d:0c: 65:18:21:61:c9:36:b7:69:ee:a7:a2:8e:6f:48:54: f5:e8:9a:6f:11:3a:a0:0b:cd:af:5c:92:34:fc:bc: 0b:d7:7f:53:f7:c4:d8:11:97:89:b2:0f:78:fc:65: 92:9c:6d:6c:df:0e:44:73:43:16:4a:4e:58:74:45: 32:b0:76:76:31:b4:44:9f:d7:de:18:ab:39:dc:53: 7e:95:97:d4:dd:ea:67:f8:dd:2f:28:a6:36:2c:94: 9d:d1:e0:7f:c0:1c:0a:88:06:6d:e1:f5:e1:67:88: 74:c8:d0:e6:86:c2:c5:4a:a6:8a:a2:99:0e:46:d6: 31:5f:aa:fe:d3:62:b7:43:9b:e9:7e:bd:c2:75:7a: 3c:e4:e7:e3:fa:56:6a:52:d9:e6:24:12:6f:6c:49: 11:8f:62:cb:6f:75:95:8f:05:41:17:da:f3:78:d6: 02:4b:2f:5b:e8:bc:1b:c4:a0:42:68:5c:e2:7c:c0: 1d:93:68:25:2d:75:5f:16:a8:3c:d2:30:14:53:a1: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21249 Signature Algorithm: sha256WithRSAEncryption 15:57:e7:74:52:64:4c:a2:44:42:7d:7f:82:7d:2c:e1:30:98: df:b9:3b:70:46:7a:7b:96:18:9e:72:e1:1c:c1:84:37:a2:cf: 62:55:a0:26:50:18:b4:ae:80:83:f5:86:e3:23:fb:f0:32:ce: 0d:6d:38:35:27:4a:a3:c3:05:cc:c0:ef:0c:ae:c0:a9:9c:49: 4b:62:78:69:34:f4:ec:a5:80:b4:82:f8:29:fe:aa:f1:a9:5a: d3:69:1f:b4:49:90:e8:67:01:c8:0c:73:d9:9f:ff:c2:52:fe: da:7a:e5:ca:1d:c6:48:d9:78:10:3e:ca:9a:ed:0b:55:7a:20: b0:ab:31:00:4e:b8:ab:2d:7d:66:53:ac:2a:6d:d7:56:de:44: 57:47:d8:1d:36:88:cb:99:82:8b:19:94:02:ce:b5:d0:bc:f6: 51:fe:b3:59:5d:17:1e:d1:bf:95:6e:e9:3d:75:0f:da:59:e9: f1:b9:38:4a:d7:13:14:23:f7:55:f1:a9:ec:b3:18:26:27:3e: 9b:c1:d9:cd:67:24:3f:12:c0:b7:b7:3c:9b:49:08:2e:4f:f6: eb:d7:0d:da:b0:8c:77:06:35:38:8a:ab:ae:2a:33:c1:23:bb: 52:39:5e:a0:8b:4c:f1:3b:57:df:f3:c7:42:e0:e0:9a:1c:ac: ae:21:0d:4a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt261g46wQ1/qn1sSyAZJLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZkMjFjYWMzODdmM2UzNzhiYTIzYTRjYTc3ZGVjOTMwM2JhOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogZEtRU0GQtgg8JuKI3tWyCbN48/ WzAfWIsFLBgb2JUUs61MTIi2/d+4EbCcwpVDXaIlcmSZCoFlLQxlGCFhyTa3ae6n oo5vSFT16JpvETqgC82vXJI0/LwL139T98TYEZeJsg94/GWSnG1s3w5Ec0MWSk5Y dEUysHZ2MbREn9feGKs53FN+lZfU3epn+N0vKKY2LJSd0eB/wBwKiAZt4fXhZ4h0 yNDmhsLFSqaKopkORtYxX6r+02K3Q5vpfr3CdXo85Ofj+lZqUtnmJBJvbEkRj2LL b3WVjwVBF9rzeNYCSy9b6LwbxKBCaFzifMAdk2glLXVfFqg80jAUU6G/EQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFG9tIcrDh/PjeLojpMp33skwO6ktMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzZmZjIy ZS04NTNjLTRiYWItODRjYy0xYWViY2E0YjZkYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNmZmMjJl LTg1M2MtNGJhYi04NGNjLTFhZWJjYTRiNmRiOC8xL2IyMGh5c09IOC1ONHVpT2t5 bmZleVRBN3FTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDT25wMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlMBMA0GCSqGSIb3DQEBCwUAA4IBAQAVV+d0UmRMokRCfX+CfSzhMJjfuTtwRnp7 lhiecuEcwYQ3os9iVaAmUBi0roCD9YbjI/vwMs4NbTg1J0qjwwXMwO8MrsCpnElL YnhpNPTspYC0gvgp/qrxqVrTaR+0SZDoZwHIDHPZn//CUv7aeuXKHcZI2XgQPsqa 7QtVeiCwqzEATrirLX1mU6wqbddW3kRXR9gdNojLmYKLGZQCzrXQvPZR/rNZXRce 0b+Vbuk9dQ/aWenxuThK1xMUI/dV8anssxgmJz6bwdnNZyQ/EsC3tzybSQguT/br 1w3asIx3BjU4iquuKjPBI7tSOV6gi0zxO1ff88dC4OCaHKyuIQ1K -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:15 2026 by rpki-client