This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer File: b61qcd7-VgoOXCH_u0A4-0EJEpU.cer (raw, json) Hash identifier: uaUSM/h6JidtD7LBBFwiufgxwNYBgHRGzyTpEisHT1Y= Subject key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3C8F7C6BAFCE566F7F8BAE74AD44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200321 IP: 193.138.245.0 -- 193.138.247.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:8f:7c:6b:af:ce:56:6f:7f:8b:ae:74:ad:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:c2:2a:ac:c5:d8:02:dc:ce:10:f2:aa:c0: 39:07:12:0e:20:94:f4:e6:c5:09:41:bb:4d:00:d3: c1:ca:ac:3d:d2:5a:d3:9b:04:54:36:1b:a3:0e:43: 9b:ca:7a:bd:05:21:67:ec:eb:e2:b7:2a:4a:be:50: 33:53:3d:56:2d:00:16:c1:73:b8:55:48:4f:03:2d: 99:b9:0e:4b:63:36:98:b4:8a:b0:61:eb:58:de:24: fa:83:a1:e4:b4:97:3d:a5:37:d2:a3:5c:e4:90:ec: 57:85:56:5f:48:cf:1b:44:fc:31:3d:59:e9:c5:2a: 51:dc:b8:40:3c:68:e9:97:63:95:a9:99:27:aa:e5: 31:58:ac:bd:a2:4c:cc:da:a9:e6:d8:85:96:c8:3a: 60:bd:54:bd:f5:13:32:69:03:5e:e1:c0:85:d1:64: 3a:82:c4:97:d5:ac:d4:00:75:d4:ff:12:50:d2:49: 0d:27:d0:3c:fe:c0:ba:c6:ff:31:97:72:2a:3d:eb: 2a:8c:f2:73:cf:ad:3d:b3:eb:b7:85:d4:65:71:c6: fc:6f:27:51:8c:62:d0:ce:49:c9:3a:5a:54:28:fc: ba:e6:3c:69:d3:6c:07:d2:2e:35:c2:a0:74:63:c8: ea:a8:b7:aa:cd:af:f6:d2:52:37:0f:d5:2d:2a:e0: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.245.0-193.138.247.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200321 Signature Algorithm: sha256WithRSAEncryption 0a:8e:14:9f:ac:74:9d:4e:f5:5e:6c:59:f2:96:e9:92:f3:be: 69:f1:32:90:86:ef:48:79:87:32:34:7f:1b:96:44:54:df:0c: 98:d4:32:78:3f:06:db:8c:2e:46:63:2a:cf:ac:9a:76:51:3c: 14:2a:f9:e8:92:c8:7f:a6:a7:33:22:e3:f6:fd:39:b2:82:8d: 3d:e2:77:93:77:f9:9a:9b:72:4b:59:25:ff:1c:ba:42:57:ae: 58:ec:69:17:e7:0d:4c:7b:8c:b4:44:fc:ff:9e:ea:53:db:6e: 54:5d:b8:07:d7:f7:05:47:24:8c:6a:9f:d3:ee:38:8f:f7:13: cf:9e:26:6f:ec:dc:3a:5a:5e:80:38:9b:2b:fa:9e:4e:09:96: 7e:19:7a:ca:f1:0a:19:dd:19:4e:a9:89:11:3c:c8:ca:f8:51: 9e:19:13:4d:44:29:40:28:be:a5:ea:27:03:27:b1:29:ea:ca: 7d:5b:fe:5d:39:f3:72:ad:b6:bd:82:56:6d:02:d8:9f:d1:a3: d8:75:e8:52:15:93:55:d4:34:78:be:d5:ff:00:83:06:13:64: 57:64:8c:3f:3a:e0:89:80:07:d2:4b:0e:3f:76:22:4e:d6:5d: 1f:6f:f6:d1:b7:c6:e2:6b:74:e5:a3:6d:a3:63:69:64:1a:a6: 9c:aa:68:6d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt57TyPfGuvzlZvf4uudK1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFkNmE3MWRlZmU1NjBhMGU1YzIxZmZiYjQwMzhmYjQxMDkxMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprCKqzF2ALczhDyqsA5BxIOIJT0 5sUJQbtNANPByqw90lrTmwRUNhujDkObynq9BSFn7OvitypKvlAzUz1WLQAWwXO4 VUhPAy2ZuQ5LYzaYtIqwYetY3iT6g6HktJc9pTfSo1zkkOxXhVZfSM8bRPwxPVnp xSpR3LhAPGjpl2OVqZknquUxWKy9okzM2qnm2IWWyDpgvVS99RMyaQNe4cCF0WQ6 gsSX1azUAHXU/xJQ0kkNJ9A8/sC6xv8xl3IqPesqjPJzz609s+u3hdRlccb8bydR jGLQzknJOlpUKPy65jxp02wH0i41wqB0Y8jqqLeqza/20lI3D9UtKuByeQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFG+tanHe/lYKDlwh/7tAOPtBCRKVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzI5MzY5 OC05NDlkLTQ2NjUtYmEwNy04Y2I0ZTI1M2YxNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMjkzNjk4 LTk0OWQtNDY2NS1iYTA3LThjYjRlMjUzZjE3NS8xL2I2MXFjZDctVmdvT1hDSF91 MEE0LTBFSkVwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADBivUDBAPBivAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAw6BMA0GCSqGSIb3DQEBCwUAA4IBAQAKjhSfrHSdTvVebFnylumS 875p8TKQhu9IeYcyNH8blkRU3wyY1DJ4PwbbjC5GYyrPrJp2UTwUKvnoksh/pqcz IuP2/Tmygo094neTd/mam3JLWSX/HLpCV65Y7GkX5w1Me4y0RPz/nupT225UXbgH 1/cFRySMap/T7jiP9xPPniZv7Nw6Wl6AOJsr+p5OCZZ+GXrK8QoZ3RlOqYkRPMjK +FGeGRNNRClAKL6l6icDJ7Ep6sp9W/5dOfNyrba9glZtAtif0aPYdehSFZNV1DR4 vtX/AIMGE2RXZIw/OuCJgAfSSw4/diJO1l0fb/bRt8bia3Tlo22jY2lkGqacqmht -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:03 2026 by rpki-client