This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer (raw, json) Hash identifier: znFCd198vdLYvJZRMIgIHKJi5DtkUGJglS2r898nXoI= Subject key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A599DD6C9D2CA9BEA8D74876A13B6F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198708 IP: 91.239.219.0/24 IP: 2a12:d140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:9d:d6:c9:d2:ca:9b:ea:8d:74:87:6a:13:b6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:e3:8c:e0:29:7c:13:c1:ec:64:e3:a9:28: b8:a2:3c:4f:26:8c:41:83:16:cc:65:22:a0:9d:8a: 43:f4:1a:e7:ef:a9:8c:ea:9e:95:2f:5c:fa:63:65: fa:3a:ef:ef:d7:76:de:2e:65:33:a5:f2:28:46:05: e8:03:88:e0:d9:d5:da:5c:fd:0b:ed:2f:2a:57:9a: 60:14:3b:45:b7:d5:e5:b4:7b:55:15:8c:0c:67:e1: 02:ff:53:7d:ee:8c:80:29:7e:8e:d4:f3:48:f7:ff: cf:3a:02:e2:d6:83:c8:58:ab:7f:aa:1e:92:02:fa: 35:b5:f9:cc:af:07:57:9c:8f:33:08:7d:20:c6:27: ff:2c:81:e1:3b:e9:b6:f9:d1:a4:eb:fc:09:ff:df: 8e:f4:64:c3:dd:ff:3a:4f:14:36:58:0c:d5:21:40: 86:2c:f9:2c:8f:0f:d3:5d:eb:d5:c5:ce:0e:70:bd: aa:e4:c5:30:f1:9a:68:02:af:c7:88:89:5d:9c:97: c2:9a:ef:dd:a1:ee:14:cb:a8:8d:78:ba:65:b3:de: 5f:b6:60:fd:a2:1b:20:aa:6f:0f:14:a5:6f:57:a5: f1:61:dc:c0:63:1a:76:71:7b:61:f9:bd:a7:d4:d1: c8:91:85:7f:93:1a:72:95:ef:cc:6d:70:80:ed:58: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.219.0/24 IPv6: 2a12:d140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198708 Signature Algorithm: sha256WithRSAEncryption 52:68:7a:ba:30:bd:73:80:92:9b:eb:6f:1a:61:fc:1d:42:2a: a5:2b:7d:95:e9:10:cf:d2:57:f8:ca:72:9e:ac:9c:e8:40:b6: d2:56:b6:dd:7b:ba:43:d5:7b:a8:ea:57:89:34:b5:aa:0a:0e: 1a:e3:96:19:8c:bf:a6:83:66:96:5f:e4:8b:31:f6:3d:9b:01: 4c:ec:0c:6d:92:c7:0a:04:0b:b4:1a:59:ec:05:7c:41:01:55: ee:90:d4:44:a3:46:98:5f:b5:5f:37:8d:a5:e8:79:fb:b6:25: c2:d9:a0:3f:f2:00:20:c9:72:99:16:cb:ce:76:2c:81:4c:55: 1a:b5:c4:69:a1:97:27:37:30:0f:6c:8f:68:6f:86:93:29:4e: 8b:a5:4f:18:47:85:74:03:22:62:97:e8:20:bc:56:f5:a8:c0: a6:76:2d:22:f7:a0:ef:5b:74:61:c9:49:db:b1:40:fb:9e:76: 5a:5d:0e:7f:5a:f3:22:f6:f7:eb:57:e8:13:de:3e:58:29:fe: 7b:72:ee:d7:23:68:91:55:17:69:96:4e:9c:61:6c:bb:52:3c: 6a:23:8d:06:eb:c9:78:53:95:9b:1e:79:50:66:00:08:11:d5: a8:7a:29:56:dc:79:5f:3c:b4:c7:96:ad:36:86:a1:0a:62:16: ad:51:68:c9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WZ3WydLKm+qNdIdqE7bxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE1NzhhMmU2MjM3MzZhMDZhNWUxOWQ5MWJkMDk2MjBkMDZhZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+DjjOApfBPB7GTjqSi4ojxPJoxB gxbMZSKgnYpD9Brn76mM6p6VL1z6Y2X6Ou/v13beLmUzpfIoRgXoA4jg2dXaXP0L 7S8qV5pgFDtFt9XltHtVFYwMZ+EC/1N97oyAKX6O1PNI9//POgLi1oPIWKt/qh6S Avo1tfnMrwdXnI8zCH0gxif/LIHhO+m2+dGk6/wJ/9+O9GTD3f86TxQ2WAzVIUCG LPksjw/TXevVxc4OcL2q5MUw8ZpoAq/HiIldnJfCmu/doe4Uy6iNeLpls95ftmD9 ohsgqm8PFKVvV6XxYdzAYxp2cXth+b2n1NHIkYV/kxpyle/MbXCA7Vg4dwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG0VeKLmI3NqBqXhnZG9CWINBq2UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0Lzk0YmY1 Mi03ODM4LTQyNzAtYTkxYy03YWRiZGFkYzZlODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvOTRiZjUy LTc4MzgtNDI3MC1hOTFjLTdhZGJkYWRjNmU4Ni8xL2JSVjRvdVlqYzJvR3BlR2Rr YjBKWWcwR3JaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+/bMA0EAgACMAcDBQMqEtFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMINDANBgkqhkiG9w0BAQsFAAOCAQEAUmh6ujC9c4CS m+tvGmH8HUIqpSt9lekQz9JX+Mpynqyc6EC20la23Xu6Q9V7qOpXiTS1qgoOGuOW GYy/poNmll/kizH2PZsBTOwMbZLHCgQLtBpZ7AV8QQFV7pDURKNGmF+1XzeNpeh5 +7YlwtmgP/IAIMlymRbLznYsgUxVGrXEaaGXJzcwD2yPaG+GkylOi6VPGEeFdAMi YpfoILxW9ajApnYtIveg71t0YclJ27FA+552Wl0Of1rzIvb361foE94+WCn+e3Lu 1yNokVUXaZZOnGFsu1I8aiONBuvJeFOVmx55UGYACBHVqHopVtx5Xzy0x5atNoah CmIWrVFoyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:13 2026 by rpki-client