This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer File: bMdYWreoPsgLVauVe_N7eR52UBY.cer (raw, json) Hash identifier: qj836GfQ6lpnbjpI1fWRIOPSTZTIRoXapBa5egVvKic= Subject key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759712AFB1F1342CEC9C80AB97311D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212813 IP: 185.76.158.0/24 IP: 2a10:2680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:2a:fb:1f:13:42:ce:c9:c8:0a:b9:73:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:58:f8:81:52:f3:9e:35:e0:e8:14:b5:68: 1a:49:16:1c:bb:3d:8f:92:0c:d9:27:b3:b4:3b:ef: 29:bb:ee:94:3a:75:35:88:cc:c4:32:27:81:3d:df: 88:d0:06:a7:57:38:94:e6:0a:2f:6c:09:c4:18:7e: 08:99:d7:64:2e:ce:63:f1:64:41:6e:d7:ff:cc:83: 8c:de:3e:d9:b1:c4:d3:a6:7a:d5:7f:d9:2e:7e:6e: 24:41:3b:1e:8e:0d:51:a1:f6:3d:58:cc:dd:04:26: 61:41:08:e7:41:69:f4:11:5a:d3:3f:9e:35:93:28: 87:a4:92:d2:7c:e1:05:9b:ee:b8:55:a4:48:8d:01: e9:34:96:d8:09:71:9c:ab:1f:d3:f3:0c:12:60:03: 51:3b:cc:ef:48:74:25:85:6f:af:14:f9:3b:e8:80: 78:15:7c:16:29:23:b6:ad:8a:6b:dd:dc:70:98:bd: a5:b6:4b:ec:67:28:92:a4:ea:f4:5f:93:5e:83:94: 27:5f:e1:48:f8:35:9a:17:23:a1:3b:08:e9:dc:25: bf:c5:2f:59:17:5d:a9:08:26:f8:67:5e:4b:ad:b5: 67:1e:48:cb:9a:f8:9d:d6:06:40:2a:2d:8b:8a:63: 15:15:73:15:b1:fd:30:35:a5:38:24:e8:ca:8e:3b: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.158.0/24 IPv6: 2a10:2680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212813 Signature Algorithm: sha256WithRSAEncryption a0:c2:56:85:a3:9b:c5:aa:3e:54:fa:cf:4b:74:d2:7a:c7:b7: cc:fa:ec:12:36:7b:e9:6b:c2:65:59:00:90:5e:4e:ae:10:c9: dc:7c:98:ac:2d:a4:ef:64:ae:82:b4:df:0a:b5:a1:21:12:ef: ef:77:6f:d8:44:cf:e1:65:4b:c5:60:0c:7a:b0:ed:03:87:1b: f2:75:ae:b0:fe:f3:df:e1:7c:06:54:3d:3b:17:df:ef:60:9a: d1:71:f6:5c:a3:d4:8c:ac:e5:e7:19:8f:82:41:58:15:59:bb: 66:d2:b6:c5:56:0c:cc:0b:95:f1:fa:25:3a:24:a3:31:65:9f: 53:99:b8:90:53:4e:b4:bf:cd:48:60:36:1c:8e:74:16:23:35: af:11:cb:5f:4d:77:02:8b:ce:fc:e1:9d:e9:f3:c0:b3:dc:c1: f8:aa:a9:37:7e:b8:d9:5f:1b:dc:ea:49:09:b5:47:23:c9:7d: cd:7b:15:cf:06:2c:0b:3a:f9:fc:6a:77:f8:6c:fd:dc:4c:8f: 56:d8:4d:a6:8d:53:11:a0:74:27:13:5d:87:9c:86:d1:cb:c5: a7:70:e5:f5:f3:c5:9b:12:1d:88:d9:f5:3b:e8:c0:7e:6d:e0: 99:af:2b:cf:29:a8:ab:92:60:c4:04:cb:61:b5:9e:8a:a9:29: ea:9b:74:a1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WXEq+x8TQs7JyAq5cxHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M3NTg1YWI3YTgzZWM4MGI1NWFiOTU3YmYzN2I3OTFlNzY1MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVBY+IFS85414OgUtWgaSRYcuz2P kgzZJ7O0O+8pu+6UOnU1iMzEMieBPd+I0AanVziU5govbAnEGH4ImddkLs5j8WRB btf/zIOM3j7ZscTTpnrVf9kufm4kQTsejg1RofY9WMzdBCZhQQjnQWn0EVrTP541 kyiHpJLSfOEFm+64VaRIjQHpNJbYCXGcqx/T8wwSYANRO8zvSHQlhW+vFPk76IB4 FXwWKSO2rYpr3dxwmL2ltkvsZyiSpOr0X5Neg5QnX+FI+DWaFyOhOwjp3CW/xS9Z F12pCCb4Z15LrbVnHkjLmvid1gZAKi2LimMVFXMVsf0wNaU4JOjKjjt1dwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGzHWFq3qD7IC1WrlXvze3kedlAWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzcwNmY0 MS0wNTMxLTQzZGYtYjFlOS02Zjg2ZDBiN2UzZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvNzA2ZjQx LTA1MzEtNDNkZi1iMWU5LTZmODZkMGI3ZTNlMC8xL2JNZFlXcmVvUHNnTFZhdVZl X043ZVI1MlVCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuUyeMA0EAgACMAcDBQMqECaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/TTANBgkqhkiG9w0BAQsFAAOCAQEAoMJWhaObxao+ VPrPS3TSese3zPrsEjZ76WvCZVkAkF5OrhDJ3HyYrC2k72SugrTfCrWhIRLv73dv 2ETP4WVLxWAMerDtA4cb8nWusP7z3+F8BlQ9Oxff72Ca0XH2XKPUjKzl5xmPgkFY FVm7ZtK2xVYMzAuV8folOiSjMWWfU5m4kFNOtL/NSGA2HI50FiM1rxHLX013AovO /OGd6fPAs9zB+KqpN3642V8b3OpJCbVHI8l9zXsVzwYsCzr5/Gp3+Gz93EyPVthN po1TEaB0JxNdh5yG0cvFp3Dl9fPFmxIdiNn1O+jAfm3gma8rzymoq5JgxATLYbWe iqkp6pt0oQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:43 2026 by rpki-client