This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer File: biYdnc3dmGfliSrRpNII32lTEXc.cer (raw, json) Hash identifier: g4Bc+EIpNXcsut2LDiBRi1bGkE1/xvxDzr4RM+TUV2E= Subject key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD9406837CC95C7B19AB657D6EAB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48427 IP: 86.106.17.0/24 IP: 91.242.136.0/21 IP: 94.176.107.0/24 IP: 94.177.24.0/24 IP: 94.177.104.0/24 IP: 185.142.216.0/24 IP: 185.142.219.0/24 IP: 185.145.112.0/24 IP: 185.145.115.0/24 IP: 185.154.196.0/22 IP: 217.29.96.0/20 IP: 2a01:7560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:40:68:37:cc:95:c7:b1:9a:b6:57:d6:ea:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e261d9dcddd9867e5892ad1a4d208df69531177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:41:89:d8:3c:43:60:c0:c7:17:22:41:4f: 1f:b1:b2:8d:c8:fc:fa:a5:61:bd:6d:4b:4d:0e:e8: 76:a8:5c:82:11:e6:f6:95:b6:37:b1:8a:92:3b:94: d5:4f:b6:8d:12:74:73:fb:1e:f0:f0:4d:33:a6:74: 5c:54:51:99:1b:7b:5a:9b:2e:8a:c2:2e:78:52:4e: fc:a4:62:0c:80:ed:cd:95:8e:e6:af:8e:0c:6b:fb: 8c:2c:ec:64:d0:54:14:5a:15:73:fe:4f:9f:99:3c: c3:fd:a5:f8:9b:05:e2:4a:d0:6d:fb:f0:4d:65:7f: 7a:10:f7:ca:54:f9:ed:b8:b7:05:07:bc:35:23:ff: 8a:e8:c5:ca:0f:be:2f:98:c8:b8:d2:08:b5:10:53: 92:91:98:4c:60:c8:36:e8:89:5d:26:18:af:a6:b4: 95:6a:c2:04:22:c5:c6:67:58:9f:a1:07:e0:84:88: 38:38:45:14:d5:4f:a1:2e:f8:77:18:5a:61:4c:fc: 69:2a:87:07:46:b5:19:e9:0d:9e:d6:3d:84:ae:c9: ee:49:33:4e:12:37:40:af:ce:56:ae:ec:3c:a1:fc: 4d:31:5f:cd:0e:7d:69:2d:31:5b:4f:b9:c6:8d:79: 91:33:b0:f7:58:75:3b:38:6c:5b:02:e0:e8:f9:f2: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.17.0/24 91.242.136.0/21 94.176.107.0/24 94.177.24.0/24 94.177.104.0/24 185.142.216.0/24 185.142.219.0/24 185.145.112.0/24 185.145.115.0/24 185.154.196.0/22 217.29.96.0/20 IPv6: 2a01:7560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48427 Signature Algorithm: sha256WithRSAEncryption 21:9e:e8:fc:cd:af:a2:6b:ad:23:8b:a2:ac:56:76:9b:f4:e2: 12:4f:47:45:f9:db:7e:be:9b:11:90:eb:97:98:eb:9d:84:61: 44:0b:57:ea:67:0b:f4:bf:42:01:93:95:8c:d5:e1:e3:2c:4f: 28:07:d9:0b:eb:00:21:47:cd:67:11:ea:61:34:ed:05:99:c3: f5:47:fc:ea:a7:b3:25:c6:62:9e:2a:92:95:00:a3:76:cc:47: cb:06:59:07:1d:f7:91:02:aa:a7:1c:cd:c4:43:aa:d9:59:2f: 09:b8:ec:71:ea:e0:a5:36:5c:f8:40:ea:82:45:b7:c4:88:a1: e2:b7:18:44:fb:6e:08:f0:54:8a:60:d8:9d:61:22:86:73:72: 01:88:cd:be:70:9f:5f:56:cc:ac:30:10:77:f6:e9:98:84:ab: 70:73:15:2f:16:a1:54:20:87:ed:41:13:1a:10:fc:16:1a:d9: 2f:20:1c:6f:da:df:f0:cc:85:2f:e3:cd:1c:33:e1:72:5b:c7: aa:c8:21:ff:ca:c5:a3:75:8a:69:c8:29:6f:40:fd:86:f4:30: ff:99:69:2a:fa:40:19:3b:31:96:1b:01:13:55:0e:b2:18:d8: 9e:04:25:7f:0a:ba:24:68:1e:53:51:11:2f:09:b7:88:f0:78: 07:9d:4c:12 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt26tlAaDfMlcexmrZX1uq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTI2MWQ5ZGNkZGQ5ODY3ZTU4OTJhZDFhNGQyMDhkZjY5NTMxMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ghBidg8Q2DAxxciQU8fsbKNyPz6 pWG9bUtNDuh2qFyCEeb2lbY3sYqSO5TVT7aNEnRz+x7w8E0zpnRcVFGZG3tamy6K wi54Uk78pGIMgO3NlY7mr44Ma/uMLOxk0FQUWhVz/k+fmTzD/aX4mwXiStBt+/BN ZX96EPfKVPntuLcFB7w1I/+K6MXKD74vmMi40gi1EFOSkZhMYMg26IldJhivprSV asIEIsXGZ1ifoQfghIg4OEUU1U+hLvh3GFphTPxpKocHRrUZ6Q2e1j2ErsnuSTNO EjdAr85Wruw8ofxNMV/NDn1pLTFbT7nGjXmRM7D3WHU7OGxbAuDo+fLzqQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFG4mHZ3N3Zhn5Ykq0aTSCN9pUxF3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzdmNTJk OC1jMmNhLTRhN2YtYmQ2My1mYmE1NjUyMzgxMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvN2Y1MmQ4 LWMyY2EtNGE3Zi1iZDYzLWZiYTU2NTIzODEyOS8xL2JpWWRuYzNkbUdmbGlTclJw TklJMzJsVEVYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQAVmoRAwQDW/KIAwQAXrBrAwQAXrEYAwQAXrFo AwQAuY7YAwQAuY7bAwQAuZFwAwQAuZFzAwQCuZrEAwQE2R1gMA0EAgACMAcDBQAq AXVgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9KzANBgkqhkiG9w0BAQsFAAOC AQEAIZ7o/M2vomutI4uirFZ2m/TiEk9HRfnbfr6bEZDrl5jrnYRhRAtX6mcL9L9C AZOVjNXh4yxPKAfZC+sAIUfNZxHqYTTtBZnD9Uf86qezJcZiniqSlQCjdsxHywZZ Bx33kQKqpxzNxEOq2VkvCbjscergpTZc+EDqgkW3xIih4rcYRPtuCPBUimDYnWEi hnNyAYjNvnCfX1bMrDAQd/bpmISrcHMVLxahVCCH7UETGhD8FhrZLyAcb9rf8MyF L+PNHDPhclvHqsgh/8rFo3WKacgpb0D9hvQw/5lpKvpAGTsxlhsBE1UOshjYngQl fwq6JGgeU1ERLwm3iPB4B51MEg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:46 2026 by rpki-client