This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer File: bBzlMVpD1WYc3NzBudfarPppkPc.cer (raw, json) Hash identifier: fL5YwP/WXWDBkxzTsJfrPEkhI4wzTmiCOKwnKh7lihI= Subject key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12092D2FB2411F2BD4EFB17CFB4BDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.200.144.0/22 IP: 2a0a:b040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:09:2d:2f:b2:41:1f:2b:d4:ef:b1:7c:fb:4b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:b6:ea:62:82:5d:4c:0f:94:a5:b8:fc:ea: 8e:f7:56:3f:0d:24:a5:b8:24:12:70:c8:d9:1b:51: a3:d1:93:26:db:f0:5a:4c:3e:9b:ac:de:78:7d:6c: b4:d7:2b:17:06:d8:57:90:7c:26:87:5b:9c:15:e9: f0:3b:5c:7b:1d:e5:c3:5e:23:37:8d:01:76:70:57: fc:05:37:6a:27:0e:8c:62:57:cd:ed:55:72:26:c6: 7a:c9:04:51:b5:9f:bf:1a:bd:a8:85:35:b7:b5:3a: cd:c9:46:2d:c0:22:3a:e6:32:00:9f:13:db:fb:fa: ef:7c:4e:0b:e2:70:8f:13:3a:e5:bf:14:7b:a0:5c: 65:e7:9a:2c:e2:74:66:2b:c6:9d:1c:37:67:c7:52: d5:a7:c8:f8:4d:08:31:04:72:29:c0:96:5a:54:14: 67:72:34:d9:28:9b:0b:1d:bd:63:22:0e:73:6f:7a: fb:66:e2:d3:67:61:3b:b2:d4:ef:7c:8c:1d:c1:d2: 69:c3:dd:27:d0:9d:25:f0:fa:83:2d:84:c1:23:67: 63:17:08:24:1d:4e:ab:db:ad:be:1e:8f:27:6f:3f: c2:dd:da:be:69:ef:26:09:91:ba:0a:50:2a:18:08: 7f:ab:65:b4:e0:58:99:4f:70:53:bc:51:ae:da:33: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.144.0/22 IPv6: 2a0a:b040::/29 Signature Algorithm: sha256WithRSAEncryption 49:1d:24:90:94:ff:5d:e1:6f:96:76:09:dc:9f:81:2b:44:6c: 0e:fc:f7:22:30:00:2e:12:9f:5f:49:80:e3:6e:01:43:88:66: 2a:df:a1:74:13:ed:2e:55:d8:21:13:61:30:d5:0c:2d:43:17: d6:cd:ab:e1:81:13:4d:8c:fc:a8:b7:19:00:fb:9d:a3:b5:a3: 9a:9d:76:81:93:43:54:3e:03:eb:f1:b5:93:b2:e5:6a:b0:94: c3:8c:b7:ba:ec:2f:7a:ca:65:bd:16:72:5c:7d:2d:4f:4e:e1: 6d:10:bb:d2:35:63:3c:6b:67:e3:16:0a:e3:2e:41:f2:b2:3b: cf:e2:d5:1c:86:54:95:84:ef:39:4a:e6:f4:73:45:b8:eb:ff: c7:86:fa:40:1f:e7:55:51:f6:1b:64:a6:56:8f:f5:49:1e:4f: 1a:e3:3f:03:00:65:d3:bf:78:4d:44:00:33:50:45:d0:f3:e5: 44:8d:b7:1f:a8:25:27:de:5a:81:16:24:94:ec:79:3b:83:3a: 26:37:64:d7:e8:b5:9d:f6:4b:c3:d3:88:b3:aa:13:56:07:35: 5d:dd:9e:21:04:ef:41:7b:4d:fd:b6:df:a9:01:44:df:1d:99: d1:d4:49:fb:76:33:bd:9d:70:fc:0c:49:aa:75:7d:6e:f9:87: 91:54:ab:71 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EgktL7JBHyvU77F8+0vbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzFjZTUzMTVhNDNkNTY2MWNkY2RjYzFiOWQ3ZGFhY2ZhNjk5MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f+26mKCXUwPlKW4/OqO91Y/DSSl uCQScMjZG1Gj0ZMm2/BaTD6brN54fWy01ysXBthXkHwmh1ucFenwO1x7HeXDXiM3 jQF2cFf8BTdqJw6MYlfN7VVyJsZ6yQRRtZ+/Gr2ohTW3tTrNyUYtwCI65jIAnxPb +/rvfE4L4nCPEzrlvxR7oFxl55os4nRmK8adHDdnx1LVp8j4TQgxBHIpwJZaVBRn cjTZKJsLHb1jIg5zb3r7ZuLTZ2E7stTvfIwdwdJpw90n0J0l8PqDLYTBI2djFwgk HU6r262+Ho8nbz/C3dq+ae8mCZG6ClAqGAh/q2W04FiZT3BTvFGu2jOoAwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2JiNTIw Yy1jZDBkLTQ4ZDgtOTZhOC0wZmJlN2JkNzZmZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvYmI1MjBj LWNkMGQtNDhkOC05NmE4LTBmYmU3YmQ3NmZmYi8xL2JCemxNVnBEMVdZYzNOekJ1 ZGZhclBwcGtQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuciQMA0EAgACMAcDBQMqCrBAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJHSSQlP9d4W+Wdgncn4ErRGwO/PciMAAuEp9fSYDjbgFDiGYq 36F0E+0uVdghE2Ew1QwtQxfWzavhgRNNjPyotxkA+52jtaOanXaBk0NUPgPr8bWT suVqsJTDjLe67C96ymW9FnJcfS1PTuFtELvSNWM8a2fjFgrjLkHysjvP4tUchlSV hO85Sub0c0W46//HhvpAH+dVUfYbZKZWj/VJHk8a4z8DAGXTv3hNRAAzUEXQ8+VE jbcfqCUn3lqBFiSU7Hk7gzomN2TX6LWd9kvD04izqhNWBzVd3Z4hBO9Be039tt+p AUTfHZnR1En7djO9nXD8DEmqdX1u+YeRVKtx -----END CERTIFICATE-----Generated at Tue Feb 10 07:33:37 2026 by rpki-client