This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer File: b95EDBTZdmUDy1yRuVC4EGLRECk.cer (raw, json) Hash identifier: sVVyeGEpXhEuCZvYPz+E5p9KlJe4R8ipMB0nXmzAoEo= Subject key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBAA80D51004FF9B4A42CEC0FDA024 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48868 IP: 91.209.243.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:aa:80:d5:10:04:ff:9b:4a:42:ce:c0:fd:a0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fde440c14d9766503cb5c91b950b81062d11029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:d0:ee:ea:33:ac:78:ce:20:6d:0a:42:08: b4:c8:8d:f1:6b:91:1d:43:cf:71:6d:37:43:dd:49: 5c:30:a8:a3:1d:7b:b5:d7:5d:ee:c9:d4:14:2e:63: 96:40:06:fb:bd:56:a2:7c:9a:e9:0f:72:2b:fe:bc: b3:63:e1:a6:5d:b2:84:04:fc:e2:82:48:75:b6:4b: 73:46:ea:f7:57:06:d5:eb:3e:40:e8:fe:f8:06:03: 54:7a:34:14:93:01:d0:5e:e7:57:15:c5:73:d0:17: 0c:12:eb:42:53:ed:8d:4e:3a:d4:05:94:8e:c6:34: ad:16:12:b4:b9:aa:00:a1:11:94:89:c7:be:e9:17: 95:99:c3:e0:24:9d:1b:58:49:e2:ba:56:b2:6a:f6: 54:86:b5:f7:69:0d:69:33:70:72:7c:dc:a9:ff:5e: ca:80:9b:e2:bc:9d:b9:21:2b:c6:1e:7c:5c:34:07: 13:36:07:f0:19:16:9b:25:5f:3d:b7:77:ea:8e:27: aa:63:24:38:78:ad:ab:6e:5a:5b:91:2b:5e:9a:b1: 93:86:46:1c:93:1b:12:d8:5c:8d:5d:74:eb:e2:0c: 43:e3:2b:58:e9:d2:aa:ef:03:48:8e:0e:d3:e0:9b: 29:40:10:9f:3e:9c:ce:e0:02:b7:89:eb:f3:f1:f8: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48868 Signature Algorithm: sha256WithRSAEncryption 2d:64:93:67:6f:2d:8d:0b:0a:64:37:d0:da:9f:f8:d2:00:df: 01:fc:23:1a:5d:da:dd:e1:43:f7:1d:b8:3d:9d:67:f0:54:93: 16:c8:1f:45:3a:9a:cb:70:f6:53:c7:d6:86:2e:af:21:f6:9c: 3b:a9:c9:91:88:4b:ac:64:6b:e0:77:f4:31:ab:9f:ac:21:71: a2:02:ff:11:fa:8f:6d:9d:5b:ce:33:b5:b5:87:ef:10:ee:1a: 17:4a:6c:d7:85:d9:12:e5:02:09:37:58:1e:6c:50:09:42:92: da:10:8f:c6:7f:ff:e1:f8:37:fd:44:b2:62:c5:cb:5d:72:8c: 09:f0:d7:de:46:f7:4a:eb:93:02:d6:c5:3c:a0:f9:0f:66:f8: 43:1a:e9:b9:01:9e:9a:74:ea:2c:ef:95:55:30:53:1b:a9:f3: 16:83:6a:ff:c1:ac:a8:3d:df:a2:45:f4:c4:71:ed:cf:4d:5d: c0:18:1a:4d:06:3f:be:67:24:d4:c0:7c:b9:52:c3:dc:78:36: 8c:9f:a7:95:af:13:ed:2a:b7:f5:a1:2a:bf:30:9e:16:58:70: 5c:34:ad:4f:cb:39:5f:6a:08:fc:ae:a5:e2:c0:1f:cf:54:66: f4:3e:4a:ce:f5:9a:9b:96:b3:21:0d:7a:f3:ea:3d:52:ae:08: ac:e3:e3:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt566qA1RAE/5tKQs7A/aAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmRlNDQwYzE0ZDk3NjY1MDNjYjVjOTFiOTUwYjgxMDYyZDExMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtrQ7uozrHjOIG0KQgi0yI3xa5Ed Q89xbTdD3UlcMKijHXu1113uydQULmOWQAb7vVaifJrpD3Ir/ryzY+GmXbKEBPzi gkh1tktzRur3VwbV6z5A6P74BgNUejQUkwHQXudXFcVz0BcMEutCU+2NTjrUBZSO xjStFhK0uaoAoRGUice+6ReVmcPgJJ0bWEniulayavZUhrX3aQ1pM3ByfNyp/17K gJvivJ25ISvGHnxcNAcTNgfwGRabJV89t3fqjieqYyQ4eK2rblpbkStemrGThkYc kxsS2FyNXXTr4gxD4ytY6dKq7wNIjg7T4JspQBCfPpzO4AK3ievz8fjSrQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFG/eRAwU2XZlA8tckblQuBBi0RApMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzExOTk1 MS0wOTU5LTRjMTMtOWEwZS05ODEyOGVlYTNhNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMTE5OTUx LTA5NTktNGMxMy05YTBlLTk4MTI4ZWVhM2E2NS8xL2I5NUVEQlRaZG1VRHkxeVJ1 VkM0RUdMUkVDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9HzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC+5DANBgkqhkiG9w0BAQsFAAOCAQEALWSTZ28tjQsKZDfQ2p/40gDfAfwjGl3a 3eFD9x24PZ1n8FSTFsgfRTqay3D2U8fWhi6vIfacO6nJkYhLrGRr4Hf0MaufrCFx ogL/EfqPbZ1bzjO1tYfvEO4aF0ps14XZEuUCCTdYHmxQCUKS2hCPxn//4fg3/USy YsXLXXKMCfDX3kb3SuuTAtbFPKD5D2b4QxrpuQGemnTqLO+VVTBTG6nzFoNq/8Gs qD3fokX0xHHtz01dwBgaTQY/vmck1MB8uVLD3Hg2jJ+nla8T7Sq39aEqvzCeFlhw XDStT8s5X2oI/K6l4sAfz1Rm9D5KzvWam5azIQ168+o9Uq4IrOPjPg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:51 2026 by rpki-client