This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer (raw, json) Hash identifier: W8XLZpkTmYntwFsAB2j5EbXeg9rLl04pQEFTEflHUGc= Subject key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C5C0242715AF298C521814B14BCD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35815 AS: 39406 AS: 56947 AS: 207103 AS: 209307 AS: 209746 AS: 209788 IP: 31.25.24.0/21 IP: 45.9.212.0/22 IP: 79.172.16.0/21 IP: 91.212.68.0/24 IP: 91.229.108.0/22 IP: 95.183.40.0/21 IP: 109.198.96.0/19 IP: 185.5.140.0/22 IP: 185.7.116.0/22 IP: 188.68.80.0/20 IP: 192.54.76.0/23 IP: 192.54.186.0/23 IP: 2a01:85e0::/32 IP: 2a02:7fc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c5:c0:24:27:15:af:29:8c:52:18:14:b1:4b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:38:eb:7f:b1:08:78:04:19:79:a9:88:81: 5c:88:4d:9b:44:0e:3a:06:51:a8:49:6c:fe:46:ad: 47:36:c8:72:da:8b:33:88:f0:32:3b:36:2d:11:92: c9:75:43:a5:d3:51:c1:ba:bb:bd:05:58:12:4c:86: 22:2c:d6:e0:78:f6:07:0d:da:58:dc:a7:8c:94:25: 57:24:a0:19:88:7b:28:07:33:cf:ef:ab:0c:06:e2: 20:1d:c0:c5:6c:6e:34:88:3c:46:e2:9e:d1:3b:56: 40:86:82:f3:69:94:5d:a9:41:8f:a5:e5:9c:9b:ea: 09:d2:07:92:44:35:3d:c8:73:d8:c1:96:f3:50:03: 9f:60:d0:d3:f5:04:b8:21:63:ed:84:fa:e3:bd:74: 67:2d:83:20:de:8f:ea:75:9b:15:7a:38:e0:82:15: 2c:b4:79:41:ca:ef:b6:65:e7:72:60:c2:e1:45:a9: 04:1d:3f:b0:05:aa:b4:9d:6c:f1:ef:08:7b:89:10: ec:b7:06:ad:d4:84:a3:bd:27:d4:d2:99:6b:b5:25: 76:14:88:b0:7b:16:eb:cd:8d:d8:a7:df:cc:14:ff: ef:33:f2:15:71:71:bf:30:1b:9e:02:d3:4b:e7:bd: 7b:38:98:ab:1d:5d:b2:4a:ad:7b:f4:24:26:1a:ec: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.24.0/21 45.9.212.0/22 79.172.16.0/21 91.212.68.0/24 91.229.108.0/22 95.183.40.0/21 109.198.96.0/19 185.5.140.0/22 185.7.116.0/22 188.68.80.0/20 192.54.76.0/23 192.54.186.0/23 IPv6: 2a01:85e0::/32 2a02:7fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35815 39406 56947 207103 209307 209746 209788 Signature Algorithm: sha256WithRSAEncryption a6:02:fb:03:ce:3d:d3:a1:86:fb:1f:56:76:05:e2:c4:1c:6e: cc:ac:3b:0f:84:89:6d:b2:7f:c4:ff:52:0e:ab:1c:d3:64:6d: 0d:b0:a6:79:95:61:6c:79:12:7b:0d:df:06:a2:ab:87:b5:e3: 6f:86:93:a7:6a:60:6e:6a:48:8e:ff:12:2c:4b:1f:64:d9:97: 7d:f1:0a:a0:9e:17:db:a4:dc:6f:83:14:28:b1:1d:4a:c0:1b: 68:fb:ec:2b:cc:d7:d3:d9:a4:d5:2f:d3:9b:3e:77:33:86:eb: d6:fd:33:43:84:27:5f:6a:a2:01:2d:d0:13:f4:37:65:20:3c: a1:d0:a5:3f:33:8e:8a:f5:2d:b1:f0:39:ea:b3:a7:c1:c1:cb: 96:30:f8:bf:12:f3:ce:2b:30:35:11:3d:75:bc:0a:3f:1e:97: dd:62:4d:e4:c9:8d:6a:a1:a6:27:8c:57:f7:a0:3c:8c:74:63: 8f:5f:18:9f:ed:a8:57:66:61:b3:7c:b0:7b:e1:a6:b5:30:00: cf:9f:12:42:2c:7d:ee:cc:3f:59:2d:9b:dd:c6:ed:f8:fc:db: f3:80:e7:de:e8:5b:a3:6f:d9:89:23:95:f9:77:d4:65:03:7c: c0:8a:6d:e3:9c:9c:8b:54:be:42:63:50:1d:53:2e:34:8e:24: 4c:37:d2:b4 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISAZt3WMXAJCcVrymMUhgUsUvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJkNTE1NzZiNGE5MzQ2MGE0NjVhZjM1ZTZiZjU1MGY1NTQ4ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuks463+xCHgEGXmpiIFciE2bRA46 BlGoSWz+Rq1HNshy2osziPAyOzYtEZLJdUOl01HBuru9BVgSTIYiLNbgePYHDdpY 3KeMlCVXJKAZiHsoBzPP76sMBuIgHcDFbG40iDxG4p7RO1ZAhoLzaZRdqUGPpeWc m+oJ0geSRDU9yHPYwZbzUAOfYNDT9QS4IWPthPrjvXRnLYMg3o/qdZsVejjgghUs tHlByu+2ZedyYMLhRakEHT+wBaq0nWzx7wh7iRDstwat1ISjvSfU0plrtSV2FIiw exbrzY3Yp9/MFP/vM/IVcXG/MBueAtNL5717OJirHV2ySq179CQmGuwX1QIDAQAB o4IDFjCCAxIwHQYDVR0OBBYEFG29UVdrSpNGCkZa815r9VD1VIiUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzhmZjUz Ny03MWUwLTQwM2ItOTc5ZS0xZWY3ZWYxN2ZhNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvOGZmNTM3 LTcxZTAtNDAzYi05NzllLTFlZjdlZjE3ZmE0My8xL2JiMVJWMnRLazBZS1JscnpY bXYxVVBWVWlKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF BwEHAQH/BGgwZjBOBAIAATBIAwQDHxkYAwQCLQnUAwQDT6wQAwQAW9REAwQCW+Vs AwQDX7coAwQFbcZgAwQCuQWMAwQCuQd0AwQEvERQAwQBwDZMAwQBwDa6MBQEAgAC MA4DBQAqAYXgAwUAKgJ/wDA4BggrBgEFBQcBCAEB/wQpMCegJTAjAgMAi+cCAwCZ 7gIDAN5zAgMDKP8CAwMxmwIDAzNSAgMDM3wwDQYJKoZIhvcNAQELBQADggEBAKYC +wPOPdOhhvsfVnYF4sQcbsysOw+EiW2yf8T/Ug6rHNNkbQ2wpnmVYWx5EnsN3wai q4e142+Gk6dqYG5qSI7/EixLH2TZl33xCqCeF9uk3G+DFCixHUrAG2j77CvM19PZ pNUv05s+dzOG69b9M0OEJ19qogEt0BP0N2UgPKHQpT8zjor1LbHwOeqzp8HBy5Yw +L8S884rMDURPXW8Cj8el91iTeTJjWqhpieMV/egPIx0Y49fGJ/tqFdmYbN8sHvh prUwAM+fEkIsfe7MP1ktm93G7fj82/OA597oW6Nv2Ykjlfl31GUDfMCKbeOcnItU vkJjUB1TLjSOJEw30rQ= -----END CERTIFICATE-----Generated at Mon Jan 19 07:41:54 2026 by rpki-client