This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer File: bMacPXAwzsGfj7ZuVDveZVlXCKI.cer (raw, json) Hash identifier: xHGdu00wRSzZLLsAjzjIySdnQyYKppYQSzDBOCD2tk4= Subject key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F841FD3657AB8DFA9322F2290F58CA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204033 IP: 176.126.127.0/24 IP: 185.20.7.0/24 IP: 2a13:3d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1f:d3:65:7a:b8:df:a9:32:2f:22:90:f5:8c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:35:a9:b0:72:e4:05:11:40:f0:f8:1c:23: 53:74:87:fb:f3:ae:1e:2b:e6:fb:33:ac:ff:02:4a: d5:ed:3c:57:e5:ed:cd:3c:74:91:86:92:1c:9b:51: 25:25:3d:a0:c6:0d:f6:7c:5b:5c:c4:23:59:02:a7: 22:35:82:93:dc:f2:32:3e:ef:77:5a:76:1f:64:1a: 15:90:94:5c:1c:ff:cf:5c:e9:4d:81:69:04:cc:c4: 70:33:b3:69:ec:a4:9f:32:61:8a:15:7d:18:d9:b0: d7:42:7c:63:15:25:41:fe:ad:86:9d:bc:17:bf:00: 1c:8f:cd:89:a7:37:92:dd:71:cb:5d:80:cf:ff:bc: a4:b1:24:38:24:b7:df:fa:56:9c:1c:36:47:de:70: 1a:e1:b0:2b:b0:1f:fb:17:f8:dc:fc:dc:15:f1:f8: 12:f4:4d:f1:f3:73:00:16:69:96:69:b9:ef:16:0c: 9b:14:e0:6f:1c:b3:5c:fa:85:e2:ec:a0:2f:c8:dc: a5:45:29:de:79:85:12:ce:62:1d:9f:20:b3:ef:23: 8e:0e:ab:48:e3:ca:5b:f3:06:10:e7:63:7f:fe:7e: 3f:2e:06:64:fe:d4:0f:2e:1c:c8:31:07:07:28:ce: 67:b1:7a:b1:c6:f6:8c:f5:4a:9e:cd:3d:c9:25:06: a8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.127.0/24 185.20.7.0/24 IPv6: 2a13:3d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204033 Signature Algorithm: sha256WithRSAEncryption 03:a8:ce:04:96:fa:53:13:22:ba:b8:47:ae:84:23:3e:15:af: 58:d9:8b:5e:65:7e:74:d7:3d:fd:9e:3e:91:c0:7c:ba:fe:66: c4:6e:ff:ca:10:81:de:51:d9:79:74:88:17:60:76:c4:c4:f2: bf:48:c8:f6:a5:c8:70:32:e2:8f:cf:3f:6c:d8:93:d4:83:25: 77:0a:f2:11:44:c3:6c:33:2d:3e:e0:aa:0c:44:49:40:12:90: e3:07:cd:9e:66:a7:16:76:f4:2a:10:18:4a:cd:4f:ed:69:f0: fa:f8:6a:15:a3:b5:af:8d:73:8f:54:95:4f:a0:b9:9e:c1:9a: 16:7d:1a:4b:0f:f2:2a:99:de:99:03:02:f5:ec:50:fa:88:4f: 27:4d:19:d0:7c:49:50:f8:89:96:52:df:69:3a:c5:16:19:13: 1c:37:10:f4:f5:75:88:93:d9:8a:70:90:2e:4f:be:0a:92:03: 94:b2:35:d4:03:86:d9:a3:9c:62:e5:bb:a0:cc:9f:9f:7a:e5: 7f:11:2b:6c:74:90:a5:16:c2:66:7b:8d:c0:59:f5:da:2b:85: e9:aa:59:34:e5:b0:d6:85:7c:49:d4:6e:90:af:e0:bc:d9:98: d4:78:89:7e:e4:43:24:3f:a2:cb:8c:3c:52:14:0f:0a:ca:3a: a6:db:f3:eb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hB/TZXq436kyLyKQ9YyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M2OWMzZDcwMzBjZWMxOWY4ZmI2NmU1NDNiZGU2NTU5NTcwOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Y1qbBy5AURQPD4HCNTdIf7864e K+b7M6z/AkrV7TxX5e3NPHSRhpIcm1ElJT2gxg32fFtcxCNZAqciNYKT3PIyPu93 WnYfZBoVkJRcHP/PXOlNgWkEzMRwM7Np7KSfMmGKFX0Y2bDXQnxjFSVB/q2GnbwX vwAcj82JpzeS3XHLXYDP/7yksSQ4JLff+lacHDZH3nAa4bArsB/7F/jc/NwV8fgS 9E3x83MAFmmWabnvFgybFOBvHLNc+oXi7KAvyNylRSneeYUSzmIdnyCz7yOODqtI 48pb8wYQ52N//n4/LgZk/tQPLhzIMQcHKM5nsXqxxvaM9UqezT3JJQaoBwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGzGnD1wMM7Bn4+2blQ73mVZVwiiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzljYTU4 ZS05ZTMyLTQyOGYtODQxMS0xYWViNmE0ZTQ1YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvOWNhNThl LTllMzItNDI4Zi04NDExLTFhZWI2YTRlNDVhZC8xL2JNYWNQWEF3enNHZmo3WnVW RHZlWlZsWENLSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAsH5/AwQAuRQHMA0EAgACMAcDBQMqEz0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdATANBgkqhkiG9w0BAQsFAAOCAQEAA6jO BJb6UxMiurhHroQjPhWvWNmLXmV+dNc9/Z4+kcB8uv5mxG7/yhCB3lHZeXSIF2B2 xMTyv0jI9qXIcDLij88/bNiT1IMldwryEUTDbDMtPuCqDERJQBKQ4wfNnmanFnb0 KhAYSs1P7Wnw+vhqFaO1r41zj1SVT6C5nsGaFn0aSw/yKpnemQMC9exQ+ohPJ00Z 0HxJUPiJllLfaTrFFhkTHDcQ9PV1iJPZinCQLk++CpIDlLI11AOG2aOcYuW7oMyf n3rlfxErbHSQpRbCZnuNwFn12iuF6apZNOWw1oV8SdRukK/gvNmY1HiJfuRDJD+i y4w8UhQPCso6ptvz6w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client