This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer File: bVVebBS5TXVtk6g6UCx_FXf5r0k.cer (raw, json) Hash identifier: Z+KXwYiVBSilziehyf2yYQPuFYIQA56N2fX4PYNmHJ8= Subject key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C685F2F71B45B921691961C01EB828 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42307 IP: 91.192.28.0/22 IP: 194.55.248.0/22 IP: 2001:67c:274::/48 IP: 2a0c:ccc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:f2:f7:1b:45:b9:21:69:19:61:c0:1e:b8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:96:e4:7a:46:38:88:98:f8:58:19:bc:6f: 97:55:79:5d:ee:16:18:b7:10:ce:ed:a0:17:76:b1: ba:8c:e3:31:1b:43:0a:51:b3:9b:bb:6b:4e:f7:20: e2:2a:1d:33:ea:62:f3:53:61:21:25:73:66:8b:93: af:4c:d2:47:2d:03:df:84:86:9f:eb:51:20:cf:93: 99:e1:c2:bd:c2:e8:ef:f9:0a:02:fd:ee:52:c6:6b: 11:cd:a7:78:b4:aa:80:72:13:42:86:33:6d:7d:8b: f8:27:02:fe:da:66:8a:27:16:13:ea:54:d9:23:db: b0:79:12:11:4f:56:bb:d7:b4:7b:53:bb:ab:d3:b5: 89:13:bf:b9:a0:64:bf:67:36:3d:bd:72:b1:26:e3: 44:bb:b5:c2:63:f1:6e:68:65:16:2f:7d:32:01:b0: 65:d9:c5:81:65:a3:33:ae:98:47:ed:de:2c:60:01: ab:4b:e8:c0:a4:06:5c:4c:7d:41:cc:ed:54:82:c4: 66:e6:d3:9f:26:a2:eb:62:a8:b0:b5:32:6b:67:ed: ad:60:7d:62:88:68:c4:7e:6e:42:95:b6:6a:1a:76: e1:1f:71:47:7a:73:1c:a6:c7:54:96:53:e4:a0:8f: 43:f8:06:67:fe:2b:9e:5e:e0:99:99:34:b1:3b:01: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.28.0/22 194.55.248.0/22 IPv6: 2001:67c:274::/48 2a0c:ccc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42307 Signature Algorithm: sha256WithRSAEncryption 07:63:85:88:79:42:26:17:73:33:02:37:89:f2:39:b9:ad:17: d6:bb:cb:66:e3:56:b9:0b:52:39:43:4a:07:1d:8d:b4:a1:a3: f9:fc:30:09:0e:e8:39:d1:8c:05:96:91:1f:fc:19:b5:56:a6: da:c5:66:e8:a3:7d:c9:f3:be:e3:13:ce:25:fe:3d:21:b0:95: 36:a7:35:40:c5:fa:84:f5:31:ff:64:71:31:c8:44:d8:ba:94: 23:10:8e:97:a4:be:49:62:39:42:9b:cc:4f:f9:72:1b:5c:53: 84:47:a8:51:05:f8:d0:6e:c7:d0:77:22:47:49:ad:bc:46:0e: 47:53:4d:33:d2:78:97:fa:73:7a:d1:48:ae:c6:04:f4:94:b5: e2:ca:c5:31:1e:a0:b8:4b:af:1b:c0:95:e8:e8:32:9f:28:c5: eb:c9:0b:e1:e7:7d:b4:98:b7:a8:d3:5c:92:9b:9f:e7:4f:c9: ec:cf:fa:f6:a0:8f:c4:b8:d1:ab:53:4f:45:3c:d7:dd:79:2d: 0f:24:ba:41:97:eb:b2:d7:88:8e:f5:51:50:9e:10:83:bc:7e: 00:e0:81:03:b9:07:a7:b5:7d:c1:4f:6c:68:9d:41:05:fd:4a: a9:99:bf:c0:9c:1e:2b:69:65:04:1b:60:69:a6:7b:99:55:98: 67:72:dc:2d -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt3xoXy9xtFuSFpGWHAHrgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDU1NWU2YzE0Yjk0ZDc1NmQ5M2E4M2E1MDJjN2YxNTc3ZjlhZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a2W5HpGOIiY+FgZvG+XVXld7hYY txDO7aAXdrG6jOMxG0MKUbObu2tO9yDiKh0z6mLzU2EhJXNmi5OvTNJHLQPfhIaf 61Egz5OZ4cK9wujv+QoC/e5SxmsRzad4tKqAchNChjNtfYv4JwL+2maKJxYT6lTZ I9uweRIRT1a717R7U7ur07WJE7+5oGS/ZzY9vXKxJuNEu7XCY/FuaGUWL30yAbBl 2cWBZaMzrphH7d4sYAGrS+jApAZcTH1BzO1UgsRm5tOfJqLrYqiwtTJrZ+2tYH1i iGjEfm5ClbZqGnbhH3FHenMcpsdUllPkoI9D+AZn/iueXuCZmTSxOwFnfwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFG1VXmwUuU11bZOoOlAsfxV3+a9JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2EzMjU2 Ny03ODBmLTQ1MDktYjcxMC05N2VhZjlhYTc4NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYTMyNTY3 LTc4MGYtNDUwOS1iNzEwLTk3ZWFmOWFhNzg2Zi8xL2JWVmViQlM1VFhWdGs2ZzZV Q3hfRlhmNXIway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCW8AcAwQCwjf4MBYEAgACMBADBwAgAQZ8AnQD BQMqDMzAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClQzANBgkqhkiG9w0BAQsF AAOCAQEAB2OFiHlCJhdzMwI3ifI5ua0X1rvLZuNWuQtSOUNKBx2NtKGj+fwwCQ7o OdGMBZaRH/wZtVam2sVm6KN9yfO+4xPOJf49IbCVNqc1QMX6hPUx/2RxMchE2LqU IxCOl6S+SWI5QpvMT/lyG1xThEeoUQX40G7H0HciR0mtvEYOR1NNM9J4l/pzetFI rsYE9JS14srFMR6guEuvG8CV6OgynyjF68kL4ed9tJi3qNNckpuf50/J7M/69qCP xLjRq1NPRTzX3XktDyS6QZfrsteIjvVRUJ4Qg7x+AOCBA7kHp7V9wU9saJ1BBf1K qZm/wJweK2llBBtgaaZ7mVWYZ3LcLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:30 2026 by rpki-client