This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer File: bRRgVvD7veYYv_ARwPIrp0pYMrc.cer (raw, json) Hash identifier: rRM7fDph7oQyleefRCbAuCnJcQ69Jzh4ifagog8wJCM= Subject key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E382BED5908029F3BCFCEE9D74B9CC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.101.8.0/22 IP: 2a00:abc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:ed:59:08:02:9f:3b:cf:ce:e9:d7:4b:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:1b:29:2a:54:0e:47:2a:91:1a:bf:38:62: dd:38:14:0b:7f:a1:f2:fb:84:73:43:89:9d:26:c3: f5:2c:c7:7c:0c:8e:68:ff:80:1f:39:74:f4:e1:90: 1a:b7:68:3d:ff:14:f0:2a:e8:57:c2:98:a7:05:57: ed:89:50:84:b9:92:db:1c:32:c7:1d:16:88:a3:45: 4f:6a:fd:36:0b:a3:13:63:82:d7:d6:6a:af:01:f9: ce:63:b3:c7:7d:db:e8:e3:22:e9:2f:fb:17:2e:90: 48:ab:5c:ea:3c:62:eb:5c:3c:6a:c0:4e:d7:67:6f: 0d:e8:6c:28:65:b1:45:6c:eb:5a:56:8b:01:f4:68: 1d:9f:75:89:6a:c6:23:32:85:81:2d:d6:8d:98:ba: fa:bf:3b:ed:26:2e:0e:cb:c2:03:fd:e6:18:b8:2d: 73:dd:1b:97:ab:a8:7f:9f:63:07:5a:4a:77:70:06: fc:d2:26:c0:58:d7:6c:28:d7:2c:4a:03:63:ee:44: 49:2c:53:e2:31:34:04:67:f4:d8:58:9f:df:88:4b: 0f:69:d7:4d:19:0d:3d:1a:a0:d0:92:15:25:ab:44: 5f:1c:29:42:93:30:e4:79:aa:53:14:d3:08:0f:bd: 45:df:87:1b:e7:95:ab:79:c4:a0:e8:83:5d:eb:b0: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.8.0/22 IPv6: 2a00:abc0::/32 Signature Algorithm: sha256WithRSAEncryption 52:0f:81:0e:38:45:e8:c6:4a:8f:f7:14:44:59:96:c1:61:01: 80:9c:a0:47:7f:ab:ab:fb:53:f4:f4:f5:70:27:e0:1f:46:4f: 9b:a9:9d:dc:97:89:5e:73:74:c7:9e:9c:37:65:fe:b0:84:52: 85:b9:d9:35:8a:60:52:2a:d0:84:a5:43:44:15:17:ac:c6:17: 6f:f6:7f:ed:41:99:a2:65:19:78:d0:c7:0e:6b:bb:36:ac:63: e7:26:9f:ea:b7:5e:19:92:cc:dc:bf:ca:d7:0a:13:00:f7:22: 82:78:a4:2e:e7:06:18:c4:d6:d9:c4:f8:32:a1:0f:10:8a:cc: 18:b0:fe:5f:05:a8:50:b1:4d:46:1f:39:d1:10:5a:48:9c:82: 72:b8:b3:ec:01:8d:c8:bd:2d:48:b6:bc:c0:f6:96:18:e6:42: 45:6f:3d:74:5e:b6:f1:c6:eb:aa:ed:a4:83:21:c9:2c:71:bb: 1f:7b:ab:aa:80:e0:32:6e:33:32:4e:e9:1d:46:df:6a:fc:b0: fe:31:6d:53:5d:4e:12:63:0c:ae:83:7d:79:a0:89:1a:f8:ca: 0d:04:07:eb:d2:cc:6d:4c:ed:ea:e0:86:fe:3e:82:04:08:c7: 8a:c1:02:a9:5b:05:a3:06:01:5c:5e:08:20:04:f4:6f:e6:0a: 70:3d:02:42 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OCvtWQgCnzvPzunXS5zDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE0NjA1NmYwZmJiZGU2MThiZmYwMTFjMGYyMmJhNzRhNTgzMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78kbKSpUDkcqkRq/OGLdOBQLf6Hy +4RzQ4mdJsP1LMd8DI5o/4AfOXT04ZAat2g9/xTwKuhXwpinBVftiVCEuZLbHDLH HRaIo0VPav02C6MTY4LX1mqvAfnOY7PHfdvo4yLpL/sXLpBIq1zqPGLrXDxqwE7X Z28N6GwoZbFFbOtaVosB9Ggdn3WJasYjMoWBLdaNmLr6vzvtJi4Oy8ID/eYYuC1z 3RuXq6h/n2MHWkp3cAb80ibAWNdsKNcsSgNj7kRJLFPiMTQEZ/TYWJ/fiEsPaddN GQ09GqDQkhUlq0RfHClCkzDkeapTFNMID71F34cb55WrecSg6INd67BaQwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFG0UYFbw+73mGL/wEcDyK6dKWDK3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzU4OWRi OS1lMjJiLTRkNjQtOTRiNC04ZWNmNzUxMDU3YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNTg5ZGI5 LWUyMmItNGQ2NC05NGI0LThlY2Y3NTEwNTdhYy8xL2JSUmdWdkQ3dmVZWXZfQVJ3 UElycDBwWU1yYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWUIMA0EAgACMAcDBQAqAKvAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSD4EOOEXoxkqP9xREWZbBYQGAnKBHf6ur+1P09PVwJ+AfRk+b qZ3cl4lec3THnpw3Zf6whFKFudk1imBSKtCEpUNEFResxhdv9n/tQZmiZRl40McO a7s2rGPnJp/qt14Zkszcv8rXChMA9yKCeKQu5wYYxNbZxPgyoQ8QiswYsP5fBahQ sU1GHznREFpInIJyuLPsAY3IvS1ItrzA9pYY5kJFbz10Xrbxxuuq7aSDIckscbsf e6uqgOAybjMyTukdRt9q/LD+MW1TXU4SYwyug315oIka+MoNBAfr0sxtTO3q4Ib+ PoIECMeKwQKpWwWjBgFcXgggBPRv5gpwPQJC -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:52 2026 by rpki-client