This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer File: bZYBl_5YkhTCJZ9q6olsThAH6YY.cer (raw, json) Hash identifier: ptWjHViYoWb7HiDG7M5wRWXsweW3cElxUuPmG77fw78= Subject key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1273788CC6C63133917B0D34022D0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60300 IP: 185.1.200.0/24 IP: 185.179.108.0/22 IP: 2001:7f8:10c::/48 IP: 2a00:4d60::/32 IP: 2a00:71e0::/32 IP: 2a02:48::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:73:78:8c:c6:c6:31:33:91:7b:0d:34:02:2d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d960197fe589214c2259f6aea896c4e1007e986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:3b:26:09:62:65:ed:19:9f:d1:ab:95:27: 5e:78:ed:08:ca:0a:25:4f:23:8e:21:6f:02:2f:53: 63:c2:41:42:cf:f0:df:51:de:bd:58:a1:49:d3:bb: e3:b4:d6:a3:c8:fc:21:35:3b:d4:85:c7:8c:99:aa: f7:05:25:8c:ab:ce:bc:37:bc:22:14:55:da:6b:e2: bf:9e:61:9e:73:7f:3a:95:da:fa:02:0e:da:b8:08: 36:90:2b:7d:07:d9:e2:32:43:a7:7f:3e:d7:7a:ac: bd:44:07:2d:39:32:43:c8:b5:b1:48:24:0f:45:46: 36:30:97:b8:a6:66:b7:7c:46:02:ed:01:fd:1f:29: 58:68:6b:41:d3:05:0d:dc:d4:66:be:d1:ae:89:15: b0:a4:54:bc:07:eb:a9:f6:b6:52:d1:a0:3d:a3:22: 9b:fd:6b:bd:8f:6c:71:a8:45:d9:2a:1c:fb:7d:c8: 1f:35:79:f2:e3:97:1d:6f:6b:2a:ef:7e:6c:07:d0: c4:5e:db:64:8e:95:d5:84:48:9a:bd:44:5f:f2:4f: 91:54:67:f1:73:7b:c0:ac:11:e0:60:d7:69:3c:74: eb:5c:4c:78:14:64:ef:a2:04:1b:80:da:0d:56:4a: 0a:2b:7b:83:b3:2f:9f:e1:39:2e:b2:c8:6f:dc:d8: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.200.0/24 185.179.108.0/22 IPv6: 2001:7f8:10c::/48 2a00:4d60::/32 2a00:71e0::/32 2a02:48::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60300 Signature Algorithm: sha256WithRSAEncryption 12:3e:bc:f7:1f:72:a4:75:d6:61:de:81:78:82:38:9d:8e:53: 40:66:28:37:95:68:be:10:a6:0c:97:0f:ed:26:c9:7e:85:05: 40:ab:e3:19:2e:89:60:f1:86:d8:2f:09:37:96:51:f7:24:f1: b7:cd:f3:27:85:86:b9:0f:ad:83:4c:f5:b8:c3:3a:4f:68:bd: 47:cd:75:e3:d6:e7:e0:b1:6f:c5:75:4d:f8:f4:d5:2f:f0:d6: 88:5a:e1:5f:a9:88:89:ac:79:2d:74:70:83:8c:03:53:54:11: 1e:54:e6:5c:d1:a2:4d:fb:cc:84:b3:7a:d9:f6:d9:84:18:d0: 47:de:67:5b:64:3f:9d:44:71:4c:ef:38:44:30:bb:c8:3b:5f: dd:80:29:ea:ad:f2:02:8f:d4:32:90:c4:78:9e:c9:c0:03:e2: 6c:39:3d:aa:61:fa:36:df:31:89:d9:81:40:eb:35:8a:c6:f2: e7:0a:1e:c3:73:bb:4c:98:04:7a:40:a3:53:01:1f:21:07:bc: 0b:71:57:79:e3:d6:40:80:84:27:6a:30:41:7d:bd:29:a4:af: a1:e6:95:5b:71:24:ed:e7:e9:c9:3d:a0:8b:10:bf:73:7d:19: 4b:45:41:34:c3:bc:5a:21:f4:e4:8e:b6:5c:a7:75:ff:cf:41: 7b:fd:04:77 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt8EnN4jMbGMTORew00Ai0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDk2MDE5N2ZlNTg5MjE0YzIyNTlmNmFlYTg5NmM0ZTEwMDdlOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZI7JgliZe0Zn9GrlSdeeO0Iygol TyOOIW8CL1NjwkFCz/DfUd69WKFJ07vjtNajyPwhNTvUhceMmar3BSWMq868N7wi FFXaa+K/nmGec386ldr6Ag7auAg2kCt9B9niMkOnfz7Xeqy9RActOTJDyLWxSCQP RUY2MJe4pma3fEYC7QH9HylYaGtB0wUN3NRmvtGuiRWwpFS8B+up9rZS0aA9oyKb /Wu9j2xxqEXZKhz7fcgfNXny45cdb2sq735sB9DEXttkjpXVhEiavURf8k+RVGfx c3vArBHgYNdpPHTrXEx4FGTvogQbgNoNVkoKK3uDsy+f4Tkusshv3NiuowIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFG2WAZf+WJIUwiWfauqJbE4QB+mGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzg3OWMw Mi1kYmY0LTRlNDAtYTRlZC0zMTM3NTRlNjRlMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvODc5YzAy LWRiZjQtNGU0MC1hNGVkLTMxMzc1NGU2NGUxMy8xL2JaWUJsXzVZa2hUQ0paOXE2 b2xzVGhBSDZZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjASBAIAATAMAwQAuQHIAwQCubNsMCQEAgACMB4DBwAgAQf4AQwD BQAqAE1gAwUAKgBx4AMFAyoCAEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOuM MA0GCSqGSIb3DQEBCwUAA4IBAQASPrz3H3KkddZh3oF4gjidjlNAZig3lWi+EKYM lw/tJsl+hQVAq+MZLolg8YbYLwk3llH3JPG3zfMnhYa5D62DTPW4wzpPaL1HzXXj 1ufgsW/FdU349NUv8NaIWuFfqYiJrHktdHCDjANTVBEeVOZc0aJN+8yEs3rZ9tmE GNBH3mdbZD+dRHFM7zhEMLvIO1/dgCnqrfICj9QykMR4nsnAA+JsOT2qYfo23zGJ 2YFA6zWKxvLnCh7Dc7tMmAR6QKNTAR8hB7wLcVd549ZAgIQnajBBfb0ppK+h5pVb cSTt5+nJPaCLEL9zfRlLRUE0w7xaIfTkjrZcp3X/z0F7/QR3 -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:45 2026 by rpki-client