This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer (raw, json) Hash identifier: 6RnFcy3b9ibwGg0Oy+2hqR/yODkggcXJUoZCWnhf9JM= Subject key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8665892940C1BF9728EA5AA39E1A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203609 IP: 84.240.104.0/21 IP: 185.129.152.0/22 IP: 2a12:71c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:66:58:92:94:0c:1b:f9:72:8e:a5:aa:39:e1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:6f:71:d9:10:b2:c2:81:25:4d:93:da:77: b8:d4:ef:7d:09:bc:f3:ab:a7:d3:cb:e2:2b:16:fd: 07:22:26:cf:97:22:83:63:70:ba:ab:a8:ba:5f:51: 63:58:cb:0f:39:bc:95:2f:b8:64:50:6c:69:40:5b: e8:b8:ce:f2:ff:15:aa:be:b1:fe:e2:a6:c3:50:ea: f9:d0:8e:a8:96:95:36:f5:9a:53:f0:80:09:61:b8: 09:a5:83:49:9c:ea:ce:b8:f0:18:d3:9b:6a:99:a0: 9f:ab:75:d2:01:85:88:6e:64:75:c7:db:42:38:07: 84:ee:52:8d:53:17:e5:0a:49:42:70:b3:c7:bd:ee: 99:1c:ef:65:06:78:2c:f6:70:a8:43:32:c0:67:40: 10:df:64:9a:15:19:a1:42:51:a0:d6:c0:07:5c:08: dc:03:00:b0:85:bd:fa:23:8e:2c:2a:17:97:38:a0: 6f:c0:03:bf:55:00:f5:34:f8:13:1a:dc:59:ff:56: f0:9e:5c:8a:01:7c:7e:18:56:1f:1b:d0:e8:42:2f: 9a:78:7e:ae:52:a9:76:8a:93:4e:1e:58:f6:ff:b9: 40:30:81:40:7f:cf:8d:bc:ed:f0:8f:5f:37:11:72: 7e:f6:ee:25:c2:69:0e:c4:af:a6:2c:eb:a6:45:67: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.240.104.0/21 185.129.152.0/22 IPv6: 2a12:71c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203609 Signature Algorithm: sha256WithRSAEncryption a1:30:19:06:ff:63:36:ff:04:34:07:e2:0b:0e:b4:5e:46:d1: 42:b3:07:4d:a5:f3:94:48:b1:6f:92:06:e4:07:f5:61:cd:a4: 8a:2a:0b:55:00:1a:34:32:da:d9:f4:f3:42:cb:fd:7a:fb:38: 8a:0b:6f:b5:70:3a:b7:75:64:73:c4:ea:be:47:22:b7:bc:1d: bd:66:a2:62:bd:cb:32:b5:b6:67:e2:d0:de:d7:2d:63:72:97: 34:27:76:60:25:a4:f4:95:e1:f9:34:c5:f4:fe:4e:38:4a:4e: c6:43:80:0a:65:88:40:64:33:15:c2:a7:9b:32:aa:c5:38:9c: 47:b7:eb:ae:0e:b4:58:0b:69:fc:1f:93:7c:f8:d7:65:e3:d1: 37:6e:c6:c4:ad:c4:bc:af:e1:60:55:28:8a:cf:99:72:67:f2: 62:56:72:6a:58:15:73:93:81:82:01:32:25:0a:2d:97:ba:af: 63:fd:e9:b6:5b:b2:9e:92:b1:ec:2e:38:49:60:eb:1f:dc:8e: 03:5e:78:1f:e9:4e:3a:05:3f:d9:fc:1c:9a:91:01:24:d6:b0: fb:31:e5:d8:38:44:62:0f:2b:8c:4b:cb:06:28:64:13:dc:f5: 45:d8:1a:e5:6f:ec:35:c3:99:c5:e9:b1:33:82:93:e8:26:f3: 4c:13:69:37 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yGZYkpQMG/lyjqWqOeGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWJjYjU3ZTJkNWU0MDYzMGUxOTNiZDVjZWIxNmYxZWYxODc0M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ORvcdkQssKBJU2T2ne41O99Cbzz q6fTy+IrFv0HIibPlyKDY3C6q6i6X1FjWMsPObyVL7hkUGxpQFvouM7y/xWqvrH+ 4qbDUOr50I6olpU29ZpT8IAJYbgJpYNJnOrOuPAY05tqmaCfq3XSAYWIbmR1x9tC OAeE7lKNUxflCklCcLPHve6ZHO9lBngs9nCoQzLAZ0AQ32SaFRmhQlGg1sAHXAjc AwCwhb36I44sKheXOKBvwAO/VQD1NPgTGtxZ/1bwnlyKAXx+GFYfG9DoQi+aeH6u Uql2ipNOHlj2/7lAMIFAf8+NvO3wj183EXJ+9u4lwmkOxK+mLOumRWdAUwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFG68tX4tXkBjDhk71c6xbx7xh0OjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2U0NWZh MS00MjlkLTRlYWYtYjI3OC05YWQxOGJhMWEzZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTQ1ZmEx LTQyOWQtNGVhZi1iMjc4LTlhZDE4YmExYTNkOS8xL2JyeTFmaTFlUUdNT0dUdlZ6 ckZ2SHZHSFE2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVPBoAwQCuYGYMA0EAgACMAcDBQMqEnHAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbWTANBgkqhkiG9w0BAQsFAAOCAQEAoTAZ Bv9jNv8ENAfiCw60XkbRQrMHTaXzlEixb5IG5Af1Yc2kiioLVQAaNDLa2fTzQsv9 evs4igtvtXA6t3Vkc8Tqvkcit7wdvWaiYr3LMrW2Z+LQ3tctY3KXNCd2YCWk9JXh +TTF9P5OOEpOxkOACmWIQGQzFcKnmzKqxTicR7frrg60WAtp/B+TfPjXZePRN27G xK3EvK/hYFUois+ZcmfyYlZyalgVc5OBggEyJQotl7qvY/3ptluynpKx7C44SWDr H9yOA154H+lOOgU/2fwcmpEBJNaw+zHl2DhEYg8rjEvLBihkE9z1Rdga5W/sNcOZ xemxM4KT6CbzTBNpNw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:14 2026 by rpki-client