This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer (raw, json) Hash identifier: 8epUvI6hr+e2rw9dehlBxCw87s8vIDn/8qWhyOdpDI8= Subject key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75BBE205B92F0E5C2EE4391D628EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51466 IP: 194.5.234.0/24 IP: 194.39.141.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5b:be:20:5b:92:f0:e5:c2:ee:43:91:d6:28:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:f2:c6:c4:eb:c9:26:46:8f:f3:27:a9:20: ad:47:37:b1:d7:4b:32:7e:14:ce:11:a7:01:49:5c: a9:8c:24:d2:8d:78:7c:f7:84:ba:e2:f5:b4:68:1b: fe:a7:51:c7:4b:d5:e0:ee:74:33:9d:a3:84:bc:26: cc:99:9a:91:4a:b3:5c:2a:3a:10:83:be:fa:b5:0f: 32:ad:0f:1a:aa:c6:6e:07:7c:b6:07:74:d1:2f:68: a3:34:fe:d2:67:e4:4e:77:85:26:13:73:5b:00:51: 46:09:d8:3f:a2:64:cd:08:9a:2d:97:1c:d0:7c:c6: b1:1d:4d:a9:ce:1d:60:c8:83:52:01:7a:10:1e:d5: 0a:f2:2f:15:26:79:d0:1f:e8:d9:68:b4:e4:28:f2: d0:d1:ec:f5:8f:46:b7:8d:ad:52:a8:4d:e1:f5:41: 68:3b:82:a3:02:08:5b:b9:2b:b2:70:d6:ab:73:db: 15:22:34:03:eb:52:ce:99:9d:d8:22:b1:d1:d5:43: 1a:07:a2:ff:f8:a0:31:87:c8:4b:30:de:1b:79:07: ad:6c:63:f0:fe:41:3d:2d:af:f3:05:a9:4f:6a:be: 30:bb:85:0c:d6:bd:42:87:c4:2e:7d:b4:2d:39:87: 2d:1d:e5:3b:c3:1a:e5:29:57:fc:3b:1e:3b:28:e3: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.234.0/24 194.39.141.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51466 Signature Algorithm: sha256WithRSAEncryption 48:61:26:46:c3:6c:e7:3e:40:a7:11:cb:b5:05:cb:04:3f:3c: 51:d4:de:17:79:25:48:02:af:a9:54:64:b2:31:50:64:62:47: 8c:70:05:5c:45:ac:e2:82:54:d3:b6:8a:f0:e7:0b:1b:17:fe: 1c:72:e8:9f:d8:96:53:dc:51:fd:08:13:4f:54:ca:59:67:0d: bb:5e:52:4d:41:a5:37:cd:eb:6a:42:ed:0c:d0:67:4b:6e:56: f2:14:ee:5c:ff:98:33:4e:4f:0b:a4:ec:f8:f6:77:a8:52:a9: 65:41:ed:69:67:65:00:d1:9f:06:75:cf:ee:0a:ed:7b:1e:a4: f7:0e:30:e0:04:98:d9:81:06:76:23:87:90:74:b4:94:72:77: 9f:3e:ab:e6:20:27:92:04:26:13:68:a8:7a:f6:15:0c:a0:41: 98:c4:81:18:ee:b8:d1:48:da:69:a3:6f:81:09:c2:08:98:3c: 86:b2:82:72:0e:a2:24:fa:dd:12:c7:cb:09:09:39:61:1f:6a: 95:a7:e9:12:60:94:41:d1:99:17:30:9c:de:0d:80:6b:2a:01: 16:a7:c8:f8:4a:21:6e:11:7d:55:94:fc:65:6a:b0:8c:3d:66: 53:cf:b6:99:a3:7a:79:83:36:49:a5:f8:d1:ab:ea:e5:6f:c1: 45:f2:1d:d4 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3x1u+IFuS8OXC7kOR1ijqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzUxNjE0YjZiZmI2YzYxODc4MzY3NjkxMWJkZjNiYzgyOWY5N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0fyxsTrySZGj/MnqSCtRzex10sy fhTOEacBSVypjCTSjXh894S64vW0aBv+p1HHS9Xg7nQznaOEvCbMmZqRSrNcKjoQ g776tQ8yrQ8aqsZuB3y2B3TRL2ijNP7SZ+ROd4UmE3NbAFFGCdg/omTNCJotlxzQ fMaxHU2pzh1gyINSAXoQHtUK8i8VJnnQH+jZaLTkKPLQ0ez1j0a3ja1SqE3h9UFo O4KjAghbuSuycNarc9sVIjQD61LOmZ3YIrHR1UMaB6L/+KAxh8hLMN4beQetbGPw /kE9La/zBalPar4wu4UM1r1Ch8QufbQtOYctHeU7wxrlKVf8Ox47KOPbmwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGxRYUtr+2xhh4NnaRG987yCn5fXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzYwY2U3 ZS0xOTIzLTQ5OTMtOTAwYy03ZDVlYjE4MzFlZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvNjBjZTdl LTE5MjMtNDk5My05MDBjLTdkNWViMTgzMWVmMS8xL2JGRmhTMnY3YkdHSGcyZHBF YjN6dklLZmw5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwgXqAwQAwieNMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDJCjANBgkqhkiG9w0BAQsFAAOCAQEASGEmRsNs5z5ApxHLtQXLBD88 UdTeF3klSAKvqVRksjFQZGJHjHAFXEWs4oJU07aK8OcLGxf+HHLon9iWU9xR/QgT T1TKWWcNu15STUGlN83rakLtDNBnS25W8hTuXP+YM05PC6Ts+PZ3qFKpZUHtaWdl ANGfBnXP7grtex6k9w4w4ASY2YEGdiOHkHS0lHJ3nz6r5iAnkgQmE2ioevYVDKBB mMSBGO640UjaaaNvgQnCCJg8hrKCcg6iJPrdEsfLCQk5YR9qlafpEmCUQdGZFzCc 3g2AayoBFqfI+EohbhF9VZT8ZWqwjD1mU8+2maN6eYM2SaX40avq5W/BRfId1A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:00 2026 by rpki-client