This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer File: bZ_0pTo9sPQyggzXN9VD-Gepctg.cer (raw, json) Hash identifier: ZQscdQd9fdUgJCotkuKKJu/o+lNnRqvY1oBcctcZmio= Subject key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B54C13FFA17897654538F4BC8231E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41902 IP: 46.17.128.0/21 IP: 194.36.160.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:54:c1:3f:fa:17:89:76:54:53:8f:4b:c8:23:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:37:4a:24:62:62:32:d4:f3:38:28:43:dd: f8:c4:ba:ac:3f:5b:2d:81:33:e8:f3:a1:e4:34:99: 68:90:93:2f:1c:8f:6a:c4:c9:2e:16:7e:02:51:d1: 80:36:c6:0d:2e:31:5f:4c:44:63:9d:f6:4a:09:24: 4d:75:89:81:7f:cc:e2:7d:9e:19:66:49:9e:7e:6b: fb:9f:38:79:cf:c3:d6:bd:69:09:ca:02:2c:a9:4d: e1:32:62:a7:cf:d6:1b:70:bb:2c:3b:d6:78:ba:48: e9:76:79:66:6f:11:60:ca:70:93:e5:1e:87:b2:32: 77:77:67:88:60:34:c5:00:d3:8a:c0:2c:8b:db:01: c4:70:e2:c8:51:43:d8:b3:eb:06:04:68:7e:1e:06: d7:59:aa:62:eb:dd:a5:a3:2a:eb:6e:6f:a2:ae:24: 14:48:d2:7b:8d:24:17:17:de:04:11:76:04:75:00: 40:e2:e5:94:95:65:f7:88:a6:b4:ce:9d:88:a5:43: d8:fb:81:94:9d:e2:0f:66:1f:16:7e:a6:e5:2b:f7: 8c:e2:84:68:da:4b:3a:a6:5e:91:4f:81:c4:9c:90: 12:a7:c2:7c:dc:05:f0:b8:dc:ab:62:7e:80:6a:73: 70:07:e4:57:31:39:92:43:5d:7e:2a:c7:17:e2:48: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.128.0/21 194.36.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41902 Signature Algorithm: sha256WithRSAEncryption 17:08:ee:08:2a:33:24:27:d6:95:e2:14:99:f3:d2:30:64:9b: 3d:11:ba:74:51:ff:91:01:f4:e4:06:d5:70:c0:3f:b3:27:2e: 59:86:40:ee:a7:69:70:06:4f:71:95:16:f6:8a:1a:45:e5:a4: 3c:58:9c:3d:2b:c9:2c:92:45:b2:59:a5:9c:a3:cc:c8:f9:62: 45:93:39:64:6c:3d:be:20:57:7f:dd:5b:49:de:da:ae:e0:ca: 28:3f:ac:ba:1a:ce:5e:90:e8:59:10:54:cb:2f:c6:19:1d:8b: 3a:3d:0c:72:28:72:c6:93:a7:2c:44:02:8a:6a:0d:b5:4a:f3: e7:6f:65:db:c3:2f:eb:5e:16:06:97:68:5e:10:e4:6f:3b:ac: 32:96:89:6c:72:35:b9:7b:08:27:af:62:db:e7:04:20:b4:a1: d5:4c:9e:6c:f9:02:79:9d:17:59:5c:77:84:80:39:9c:eb:6e: 2e:8c:cd:df:67:69:b1:e1:83:e4:46:24:09:38:5e:b4:85:ea: 7e:d9:05:22:c2:a4:e8:84:44:ce:ef:ae:cf:ed:39:df:ab:9a: fe:8c:a7:59:1d:d6:3f:a5:20:ff:bb:ad:b0:0c:48:c7:87:a7: 61:6b:d9:69:9f:a5:92:a7:c9:bb:64:d6:ac:5e:31:e2:c9:14: 51:a0:58:22 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6W1TBP/oXiXZUU49LyCMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDlmZjRhNTNhM2RiMGY0MzI4MjBjZDczN2Q1NDNmODY3YTk3MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruQ3SiRiYjLU8zgoQ934xLqsP1st gTPo86HkNJlokJMvHI9qxMkuFn4CUdGANsYNLjFfTERjnfZKCSRNdYmBf8zifZ4Z Zkmefmv7nzh5z8PWvWkJygIsqU3hMmKnz9YbcLssO9Z4ukjpdnlmbxFgynCT5R6H sjJ3d2eIYDTFANOKwCyL2wHEcOLIUUPYs+sGBGh+HgbXWapi692loyrrbm+iriQU SNJ7jSQXF94EEXYEdQBA4uWUlWX3iKa0zp2IpUPY+4GUneIPZh8WfqblK/eM4oRo 2ks6pl6RT4HEnJASp8J83AXwuNyrYn6AanNwB+RXMTmSQ11+KscX4kgM6QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFG2f9KU6PbD0MoIM1zfVQ/hnqXLYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzYxOTc5 YS1lYTgzLTRlZTctYjdmNy1lMTY4ZGIyYzU0YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNjE5Nzlh LWVhODMtNGVlNy1iN2Y3LWUxNjhkYjJjNTRiNC8xL2JaXzBwVG85c1BReWdnelhO OVZELUdlcGN0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDLhGAAwQAwiSgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCjrjANBgkqhkiG9w0BAQsFAAOCAQEAFwjuCCozJCfWleIUmfPSMGSb PRG6dFH/kQH05AbVcMA/sycuWYZA7qdpcAZPcZUW9ooaReWkPFicPSvJLJJFslml nKPMyPliRZM5ZGw9viBXf91bSd7aruDKKD+suhrOXpDoWRBUyy/GGR2LOj0Mcihy xpOnLEQCimoNtUrz529l28Mv614WBpdoXhDkbzusMpaJbHI1uXsIJ69i2+cEILSh 1UyebPkCeZ0XWVx3hIA5nOtuLozN32dpseGD5EYkCThetIXqftkFIsKk6IREzu+u z+0536ua/oynWR3WP6Ug/7utsAxIx4enYWvZaZ+lkqfJu2TWrF4x4skUUaBYIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:39 2026 by rpki-client