This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer File: b58jpjrWJaftMNptos3J6LW7gD4.cer (raw, json) Hash identifier: AcnUt14b3TnVSuHro+YUQIoLimu/gwW7Z9p5foagHiE= Subject key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB69710D71163D28C42D7771ED9983 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.159.80.0/22 IP: 2a0f:6880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:69:71:0d:71:16:3d:28:c4:2d:77:71:ed:99:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:70:ac:90:92:6b:11:c7:8f:4a:2b:09:89: 80:3b:39:20:f9:e7:5d:b3:ff:c4:4a:7b:3b:30:00: 0c:3b:32:38:91:66:21:f8:7d:22:0c:d2:35:f9:64: 53:1b:11:b0:fd:33:43:88:bf:e1:50:0b:dd:93:7e: 37:4e:bc:8a:5b:64:46:57:af:5c:59:3b:33:77:a2: 98:cf:aa:6f:d9:48:91:d1:32:8f:ca:98:ad:ef:25: ac:27:78:d7:ad:1b:a0:e4:ac:6a:51:bb:91:bd:b9: 86:72:93:88:32:23:8f:7c:10:07:e3:44:17:8c:76: 6b:42:26:a9:d7:d8:44:18:e8:25:dc:73:94:1a:b3: 76:be:7e:70:4c:84:93:2c:c8:b3:b8:ed:39:54:4d: bc:58:4f:cd:24:19:ba:ee:27:fc:59:94:8b:6a:0b: 80:b3:61:37:bd:e2:86:af:93:1d:c7:b5:38:79:11: 88:fc:63:50:2a:bb:88:6b:ad:89:b9:16:38:79:cd: 94:02:54:94:85:16:d8:74:b6:84:36:7f:d4:87:28: 08:44:4b:fd:98:6b:ac:18:84:16:37:72:9f:e1:be: c0:c1:e5:e3:39:7c:10:9d:d1:e4:8f:f6:23:f7:9e: 49:ac:65:41:29:dc:64:5a:41:02:3d:79:f7:a2:3c: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.80.0/22 IPv6: 2a0f:6880::/29 Signature Algorithm: sha256WithRSAEncryption a6:e0:09:2b:56:9c:0a:77:8c:05:c1:c9:bb:c0:3a:c9:f9:05: 9f:9b:e7:0d:c7:30:29:71:1d:8e:9e:07:98:6f:c2:44:35:20: 2a:27:df:ff:36:f9:cd:c4:fb:32:10:fc:87:75:f7:5d:f7:91: 89:72:8a:25:19:63:fb:9f:f1:f2:18:8d:d3:2a:8f:20:92:01: e9:ce:12:49:9e:7c:01:6d:30:a0:37:d4:f4:08:a0:7b:1d:6b: 32:41:cf:74:86:61:72:dd:36:05:00:8d:15:af:08:ee:28:89: ac:f0:c8:64:86:e5:d1:24:17:42:84:b0:3b:b7:56:6f:bb:1d: 08:6c:b4:d4:31:ae:df:bc:5b:d6:61:7a:9f:a1:46:83:8e:2b: 39:1b:5a:ff:df:eb:ca:32:b8:45:e2:6d:c0:af:b9:49:3e:40: 65:51:47:12:b8:b4:45:8e:2d:da:88:dc:3f:17:d8:52:f8:26: 37:a7:fa:e6:15:77:e7:2c:7a:81:0b:b7:52:eb:ae:03:8e:75: e8:77:06:aa:d3:5d:e7:64:b6:56:3c:61:09:e9:0f:b2:cb:c1: 83:e5:e1:41:f9:dc:3c:b9:4b:ec:e0:bc:8c:34:4e:f1:a7:34: 2f:dd:7a:28:e4:58:9d:a1:18:69:ad:2e:55:ec:c6:4f:e9:7f: fe:2d:dd:9b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt262lxDXEWPSjELXdx7ZmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjlmMjNhNjNhZDYyNWE3ZWQzMGRhNmRhMmNkYzllOGI1YmI4MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LFwrJCSaxHHj0orCYmAOzkg+edd s//ESns7MAAMOzI4kWYh+H0iDNI1+WRTGxGw/TNDiL/hUAvdk343TryKW2RGV69c WTszd6KYz6pv2UiR0TKPypit7yWsJ3jXrRug5KxqUbuRvbmGcpOIMiOPfBAH40QX jHZrQiap19hEGOgl3HOUGrN2vn5wTISTLMizuO05VE28WE/NJBm67if8WZSLaguA s2E3veKGr5Mdx7U4eRGI/GNQKruIa62JuRY4ec2UAlSUhRbYdLaENn/UhygIREv9 mGusGIQWN3Kf4b7AweXjOXwQndHkj/Yj955JrGVBKdxkWkECPXn3ojzazQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFG+fI6Y61iWn7TDabaLNyei1u4A+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I3MmRl NC02MzY2LTQ3ZmEtYjZmNi1kNDJiZDY4MjYzOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjcyZGU0 LTYzNjYtNDdmYS1iNmY2LWQ0MmJkNjgyNjM4ZC8xL2I1OGpwanJXSmFmdE1OcHRv czNKNkxXN2dENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ9QMA0EAgACMAcDBQMqD2iAMA0GCSqGSIb3 DQEBCwUAA4IBAQCm4AkrVpwKd4wFwcm7wDrJ+QWfm+cNxzApcR2OngeYb8JENSAq J9//NvnNxPsyEPyHdfdd95GJcoolGWP7n/HyGI3TKo8gkgHpzhJJnnwBbTCgN9T0 CKB7HWsyQc90hmFy3TYFAI0VrwjuKIms8MhkhuXRJBdChLA7t1Zvux0IbLTUMa7f vFvWYXqfoUaDjis5G1r/3+vKMrhF4m3Ar7lJPkBlUUcSuLRFji3aiNw/F9hS+CY3 p/rmFXfnLHqBC7dS664DjnXodwaq013nZLZWPGEJ6Q+yy8GD5eFB+dw8uUvs4LyM NE7xpzQv3Xoo5FidoRhprS5V7MZP6X/+Ld2b -----END CERTIFICATE-----Generated at Sun Jan 18 11:12:57 2026 by rpki-client