This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer File: b2oouFuReYIHK59PQG1-sJmROjE.cer (raw, json) Hash identifier: rIPUyBFoUuXY9Tgi/FudxZ4TPF+HznewXkXOcFioDuU= Subject key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C92341587BD948B480430FB6B78C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:9d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:92:34:15:87:bd:94:8b:48:04:30:fb:6b:78:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6a28b85b917982072b9f4f406d7eb099913a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:82:b9:f1:b5:50:16:09:16:00:9f:ef:5e: 30:0e:ef:c1:51:ca:84:08:51:72:a5:a4:87:6f:22: 64:a0:48:c9:62:c8:14:c8:56:4f:11:b6:eb:14:fc: 57:5f:42:29:f3:8e:9b:dc:e4:d3:90:3c:f5:05:9a: 4e:86:6e:f7:76:2d:a7:38:fe:56:08:04:fc:7f:ba: bf:2b:03:85:93:72:a1:4b:15:b0:11:0b:32:1b:81: 17:b1:a5:15:2b:7f:32:6d:06:5e:cb:73:67:0e:6a: 31:bf:5b:81:44:51:2f:e6:01:1e:66:dd:68:33:d0: 29:ca:c3:72:85:b3:e7:9f:bf:bd:c6:3c:9b:b9:76: c9:ec:3c:d9:e2:22:6b:d6:22:90:fb:50:e8:43:4b: 95:d2:8d:c1:99:b4:71:52:a0:27:95:fa:31:79:79: 1f:e0:3f:97:1b:92:e9:8b:6f:9c:7e:92:d3:f9:77: 3b:8c:a4:10:01:f6:8a:4a:bc:08:79:a6:0e:2e:44: d3:b8:9e:54:9b:04:e6:6e:1d:cf:08:7e:8d:9a:a7: 89:dc:75:1f:b3:c9:60:c1:14:ff:1f:c7:8b:c9:16: 18:10:c1:08:3d:18:2f:4a:c8:3d:20:a7:9c:07:2c: 66:a1:6e:bb:b3:f1:cf:2e:ee:1c:ca:38:fb:ed:9a: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9d4::/48 Signature Algorithm: sha256WithRSAEncryption 0f:65:8e:8b:fb:64:51:69:57:76:5c:9e:96:ca:10:7f:e9:72: 75:6d:84:54:38:93:a1:66:e4:ad:fa:7f:0b:a1:fd:3e:50:16: 37:10:38:8f:84:d7:e6:3d:57:30:8f:1a:9e:95:d2:5a:fa:c4: ad:1b:4c:f7:21:cf:9c:79:b5:aa:ca:98:12:1b:17:fa:ea:1b: 20:94:fe:ee:42:d6:19:9c:d7:96:65:0a:9a:a5:d5:62:58:5f: 3b:e9:bc:db:28:0d:d2:c0:03:d7:3d:26:fa:39:d7:64:4c:99: 99:4f:d5:29:b6:fe:43:5e:74:a3:f0:98:20:83:70:44:9e:e7: d4:4f:8a:15:4b:d3:79:63:5c:3c:8b:69:8c:5b:9c:75:18:b7: 77:01:63:be:88:db:e7:0c:12:cb:3c:20:6c:08:d4:2b:a3:17: 61:c7:6e:1a:2e:b4:c5:72:e0:98:d4:5d:d3:02:21:ae:bb:2f: 16:b6:b0:c8:9e:fa:cf:b2:4b:86:8b:17:03:b0:5e:43:de:6c: 86:49:7c:62:ec:e1:ff:cb:46:3f:36:90:24:cc:60:dc:fb:56: 4e:0a:64:1e:e1:eb:f3:bf:77:81:2a:53:bf:43:cb:88:a1:95: ef:7b:dd:83:8f:e5:ac:c9:11:dc:dc:15:1c:01:6b:ac:01:00: 98:eb:7f:af -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt9XJI0FYe9lItIBDD7a3jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZhMjhiODViOTE3OTgyMDcyYjlmNGY0MDZkN2ViMDk5OTEzYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuCufG1UBYJFgCf714wDu/BUcqE CFFypaSHbyJkoEjJYsgUyFZPEbbrFPxXX0Ip846b3OTTkDz1BZpOhm73di2nOP5W CAT8f7q/KwOFk3KhSxWwEQsyG4EXsaUVK38ybQZey3NnDmoxv1uBRFEv5gEeZt1o M9ApysNyhbPnn7+9xjybuXbJ7DzZ4iJr1iKQ+1DoQ0uV0o3BmbRxUqAnlfoxeXkf 4D+XG5Lpi2+cfpLT+Xc7jKQQAfaKSrwIeaYOLkTTuJ5UmwTmbh3PCH6NmqeJ3HUf s8lgwRT/H8eLyRYYEMEIPRgvSsg9IKecByxmoW67s/HPLu4cyjj77ZqeswIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFG9qKLhbkXmCByufT0BtfrCZkToxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzUyNTU0 Yy0zODlkLTRhZWEtYTAwYy03NDFkMDg5OGRhNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvNTI1NTRj LTM4OWQtNGFlYS1hMDBjLTc0MWQwODk4ZGE0ZS8xL2Iyb291RnVSZVlJSEs1OVBR RzEtc0ptUk9qRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnUMA0GCSqGSIb3DQEBCwUAA4IBAQAP ZY6L+2RRaVd2XJ6WyhB/6XJ1bYRUOJOhZuSt+n8Lof0+UBY3EDiPhNfmPVcwjxqe ldJa+sStG0z3Ic+cebWqypgSGxf66hsglP7uQtYZnNeWZQqapdViWF876bzbKA3S wAPXPSb6OddkTJmZT9Uptv5DXnSj8Jggg3BEnufUT4oVS9N5Y1w8i2mMW5x1GLd3 AWO+iNvnDBLLPCBsCNQroxdhx24aLrTFcuCY1F3TAiGuuy8WtrDInvrPskuGixcD sF5D3myGSXxi7OH/y0Y/NpAkzGDc+1ZOCmQe4evzv3eBKlO/Q8uIoZXve92Dj+Ws yRHc3BUcAWusAQCY63+v -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:36 2026 by rpki-client