This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer (raw, json) Hash identifier: 5EiYHr+8nGf678ORVi0kprscIThyLOQyltZQ1+R65xM= Subject key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775876B48A2C335010950C81FDE12AF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56651 IP: 193.26.220.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:76:b4:8a:2c:33:50:10:95:0c:81:fd:e1:2a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d3756d540e5c17f194c45ca4738665d51accb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:38:78:e6:68:a7:12:8d:ef:ec:e8:67:23: a4:c3:f2:ae:19:20:f0:3d:2f:3a:f4:f7:53:ae:2d: e9:06:ec:e4:b2:5c:08:04:92:b8:cb:2f:b6:1c:71: d1:e9:1f:16:9b:b0:26:23:55:5b:3b:47:f2:8d:a7: 6f:5d:fa:4f:ed:b1:c9:9b:c4:0c:fa:45:fe:32:73: 0f:1d:63:eb:8d:51:a5:69:75:71:25:7a:7b:7d:5e: bd:d7:2f:ea:d8:fd:4c:66:00:9c:fd:43:76:bb:ac: 4f:68:d6:56:a2:bc:4e:00:9d:a1:bc:ca:16:f7:4b: e3:66:36:e1:17:4a:53:f9:60:08:98:9a:20:a6:99: 14:09:e9:a3:ce:69:cb:db:1c:6d:4a:8a:4e:9a:e2: 3a:d5:91:f5:f9:34:a9:54:bd:cd:72:f9:30:fe:00: c1:e5:a3:44:aa:11:af:73:ac:23:f6:cd:79:03:74: 2c:0c:01:e9:47:bc:e6:16:1a:e1:15:15:3d:84:d2: 48:82:a3:cb:d2:22:b3:fc:f0:0b:b5:a8:55:53:fc: ff:38:5a:70:83:a3:02:80:c7:15:b9:9b:b3:06:b0: ca:ee:ab:f9:bf:54:91:75:a8:6e:b0:c6:a9:bb:b8: 8a:28:d8:04:d0:86:b4:fb:d5:6f:62:7a:04:d0:76: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.220.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56651 Signature Algorithm: sha256WithRSAEncryption 2d:a4:83:54:78:22:b7:a7:3e:77:00:90:a8:34:5f:f0:53:06: 66:49:3b:cf:31:e0:5f:34:c2:a0:98:d6:fa:38:31:37:cd:77: 32:7d:0e:96:3d:1e:bc:dd:da:b8:b7:81:1a:ea:ac:dc:68:c6: fa:e0:9a:58:04:5a:98:42:95:ba:44:0b:77:47:ca:43:7c:57: 40:1d:31:e1:59:bb:09:14:4e:34:7d:63:94:c5:90:54:cf:8e: 87:7b:81:b8:c4:b1:f1:28:54:51:f5:c9:26:d1:e1:ad:e8:49: b7:ef:83:58:2d:c7:5e:06:42:e3:41:63:e6:37:a8:ca:e9:4d: 3e:3d:ba:d8:26:1e:03:bb:d7:d9:59:35:f3:ef:1a:a9:67:6e: 50:ca:4c:b8:4d:7a:e3:71:1d:de:89:55:32:38:ba:4b:18:58: 25:6a:f8:5e:d1:1a:f9:28:46:db:dd:dd:68:82:66:2b:a6:e2: 3d:1f:a3:aa:81:ee:c1:b3:96:e9:64:19:8d:8a:6f:26:96:1c: 57:1a:f7:e6:a1:1b:15:b8:a4:a0:97:a2:31:37:05:9c:65:ee: c9:f6:68:9c:47:b7:a8:eb:37:ef:a0:15:3b:fc:c2:94:01:da: 65:31:ca:0a:cf:4f:2b:59:74:02:81:7d:43:91:62:e9:b4:0d: ce:91:d6:fa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WHa0iiwzUBCVDIH94SrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDM3NTZkNTQwZTVjMTdmMTk0YzQ1Y2E0NzM4NjY1ZDUxYWNjYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIQ4eOZopxKN7+zoZyOkw/KuGSDw PS869PdTri3pBuzkslwIBJK4yy+2HHHR6R8Wm7AmI1VbO0fyjadvXfpP7bHJm8QM +kX+MnMPHWPrjVGlaXVxJXp7fV691y/q2P1MZgCc/UN2u6xPaNZWorxOAJ2hvMoW 90vjZjbhF0pT+WAImJogppkUCemjzmnL2xxtSopOmuI61ZH1+TSpVL3Ncvkw/gDB 5aNEqhGvc6wj9s15A3QsDAHpR7zmFhrhFRU9hNJIgqPL0iKz/PALtahVU/z/OFpw g6MCgMcVuZuzBrDK7qv5v1SRdahusMapu7iKKNgE0Ia0+9VvYnoE0HaRFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFG03VtVA5cF/GUxFykc4Zl1RrMtsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0Lzk1ZjY4 Mi1lYWRlLTRjMTgtYWM1Mi1jOGE5ZTM3MmMyMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvOTVmNjgy LWVhZGUtNGMxOC1hYzUyLWM4YTllMzcyYzIyOS8xL2JUZFcxVURsd1g4WlRFWEtS emhtWFZHc3kydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRrcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdSzANBgkqhkiG9w0BAQsFAAOCAQEALaSDVHgit6c+dwCQqDRf8FMGZkk7zzHg XzTCoJjW+jgxN813Mn0Olj0evN3auLeBGuqs3GjG+uCaWARamEKVukQLd0fKQ3xX QB0x4Vm7CRRONH1jlMWQVM+Oh3uBuMSx8ShUUfXJJtHhrehJt++DWC3HXgZC40Fj 5jeoyulNPj262CYeA7vX2Vk18+8aqWduUMpMuE1643Ed3olVMji6SxhYJWr4XtEa +ShG293daIJmK6biPR+jqoHuwbOW6WQZjYpvJpYcVxr35qEbFbikoJeiMTcFnGXu yfZonEe3qOs376AVO/zClAHaZTHKCs9PK1l0AoF9Q5Fi6bQNzpHW+g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:07 2026 by rpki-client