This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer File: brYQV7gmVB0hbNWVz4bGoG-yrhE.cer (raw, json) Hash identifier: sDVvvf19AolohQ88PrpurgvCfUJYf+br6lfFOHeJFNg= Subject key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA693F00E372598E9626280D355F12C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.146.242.0/24 IP: 192.160.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:93:f0:0e:37:25:98:e9:62:62:80:d3:55:f1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:66:26:77:a0:2b:87:8b:08:cf:a3:55:1e: 29:4d:40:a2:b0:0b:60:64:3f:d2:bc:ff:85:d4:3d: 77:60:33:3a:6e:39:6e:9f:0b:d8:16:9f:ca:95:25: 89:0e:a7:7a:38:65:28:a4:b4:64:77:88:b7:57:14: ee:90:f3:27:e8:a4:83:cc:ca:e4:1b:5f:72:6c:e5: 96:06:88:d8:2c:fa:57:35:e7:33:ee:d0:5a:9f:a4: bc:ac:e7:02:3a:5a:65:db:e2:08:9b:d9:de:8a:33: 49:2b:88:62:e9:3a:5a:ad:0a:fb:e1:cb:ff:7d:e7: 1e:7e:35:e0:d2:71:07:be:c3:00:d3:e0:4e:09:2a: c1:4d:a1:df:15:3c:9b:9e:b7:82:99:7f:ba:e9:c0: a6:1a:ac:a7:60:69:c3:15:27:26:47:05:bf:bf:ad: ff:aa:4b:a2:41:c7:59:fd:8b:5b:9e:4e:1f:39:f0: 6e:cf:c0:b7:87:22:37:78:8f:67:85:55:88:bd:55: 3e:b8:c5:84:6b:85:eb:de:d8:7e:c0:fb:0d:d5:20: ea:5a:f9:64:30:52:4e:cc:6d:08:e0:06:47:cd:9d: ed:be:ad:82:87:0a:73:4d:bd:e4:7d:66:92:7f:23: f9:a2:96:ae:78:b3:97:fa:aa:eb:2c:69:00:c9:cc: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.146.242.0/24 192.160.156.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:97:1f:56:ce:bd:b7:2b:f7:7a:68:87:c1:5d:e1:30:8b:d5: fa:bb:bf:b5:8a:2b:ea:aa:a6:28:6a:0e:2e:7e:03:ae:02:2e: a0:a3:98:a1:f5:e4:51:37:97:4f:6a:a4:d9:96:8c:80:33:0d: b5:bd:5a:fb:77:5c:a9:11:11:57:43:60:a6:9d:9c:35:e0:a1: 8d:51:9f:f4:27:69:90:f3:74:d8:39:11:99:e1:d6:68:2f:97: 1e:a5:4c:c0:4b:cb:5a:0a:5d:cf:27:be:89:85:3f:f7:4b:f7: 02:ea:34:cb:8f:cd:ec:af:52:8c:5b:37:0a:94:08:0d:4d:fe: 98:7e:35:a3:3a:3b:49:94:cd:aa:de:27:fc:f8:c0:13:1a:89: 82:a3:c8:9a:9b:27:bc:34:30:43:bd:1d:3a:ab:61:c6:07:3c: 40:c8:10:77:36:95:09:f4:2f:3d:89:b7:5a:4e:7d:e7:fe:05: d9:ee:66:7c:d9:d8:7f:d7:28:bb:b1:9b:e4:65:75:11:f1:3a: 4a:d8:2c:58:b3:a4:23:f4:5e:7e:24:f2:a0:21:f3:3a:8b:a0: 81:7a:97:6a:7f:25:d3:fd:cb:a8:dc:6a:6d:9a:d5:3a:f4:ca: ae:98:90:d7:f8:3f:5b:7e:b2:f9:c0:39:74:3b:f2:37:99:ec: e8:3c:96:87 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+ppPwDjclmOliYoDTVfEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWI2MTA1N2I4MjY1NDFkMjE2Y2Q1OTVjZjg2YzZhMDZmYjJhZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1JmJnegK4eLCM+jVR4pTUCisAtg ZD/SvP+F1D13YDM6bjlunwvYFp/KlSWJDqd6OGUopLRkd4i3VxTukPMn6KSDzMrk G19ybOWWBojYLPpXNecz7tBan6S8rOcCOlpl2+IIm9neijNJK4hi6TparQr74cv/ fecefjXg0nEHvsMA0+BOCSrBTaHfFTybnreCmX+66cCmGqynYGnDFScmRwW/v63/ qkuiQcdZ/Ytbnk4fOfBuz8C3hyI3eI9nhVWIvVU+uMWEa4Xr3th+wPsN1SDqWvlk MFJOzG0I4AZHzZ3tvq2ChwpzTb3kfWaSfyP5opaueLOX+qrrLGkAycx7ZwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFG62EFe4JlQdIWzVlc+GxqBvsq4RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzY2Y2E2 NC02ZmNlLTRiODQtOGMxNS1jYjg2ODEyN2E5YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNjZjYTY0 LTZmY2UtNGI4NC04YzE1LWNiODY4MTI3YTliMS8xL2JyWVFWN2dtVkIwaGJOV1Z6 NGJHb0cteXJoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwJLyAwQAwKCcMA0GCSqGSIb3DQEBCwUAA4IB AQB8lx9Wzr23K/d6aIfBXeEwi9X6u7+1iivqqqYoag4ufgOuAi6go5ih9eRRN5dP aqTZloyAMw21vVr7d1ypERFXQ2CmnZw14KGNUZ/0J2mQ83TYORGZ4dZoL5cepUzA S8taCl3PJ76JhT/3S/cC6jTLj83sr1KMWzcKlAgNTf6YfjWjOjtJlM2q3if8+MAT GomCo8iamye8NDBDvR06q2HGBzxAyBB3NpUJ9C89ibdaTn3n/gXZ7mZ82dh/1yi7 sZvkZXUR8TpK2CxYs6Qj9F5+JPKgIfM6i6CBepdqfyXT/cuo3GptmtU69MqumJDX +D9bfrL5wDl0O/I3mezoPJaH -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:25 2026 by rpki-client