This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer File: cbbQ4ActDKspv6hzfeKlPlFBgnY.cer (raw, json) Hash identifier: 6aOJH7bp9E0aa2edxZLJrr7YjpkJJ+bkiVN+ingaaoE= Subject key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15C1A5DDD223158AE8930FE41B4BF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208718 IP: 45.87.192.0/22 IP: 2a05:6100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c1:a5:dd:d2:23:15:8a:e8:93:0f:e4:1b:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:62:27:5b:b0:0b:5f:0d:01:9c:28:17:67: d5:7d:9d:1f:6e:7a:88:23:0e:1a:e9:27:53:30:e7: aa:71:33:e6:6e:6a:2e:e7:cb:c9:bc:4c:95:d8:fe: 2a:2c:73:5b:fc:fb:25:1d:7f:19:69:f4:dd:e9:60: fa:b7:e4:e7:52:8c:72:bb:4b:98:97:43:22:27:a6: 62:90:af:8d:48:05:ab:ec:1d:c6:00:62:75:c3:fc: 5b:06:dc:8e:87:40:22:46:0d:00:0b:77:88:6a:88: 9a:c8:84:f9:67:f0:6b:36:41:fd:8c:aa:80:09:f2: 1f:f1:67:60:18:01:27:28:d4:bc:e9:99:b4:2d:33: d0:7c:b1:be:4a:ae:8f:e9:ed:0e:cc:43:c6:c1:1f: e5:ea:4e:cb:cd:13:64:05:15:4b:b2:a9:f2:a6:cb: 8a:6c:14:81:7a:65:b5:e9:2b:c2:0b:09:f3:de:05: 59:69:19:27:63:0a:0b:e8:ea:b4:8c:e2:32:73:52: 34:c6:dd:48:7f:8d:7e:32:6d:d9:55:5b:bc:a2:61: 01:ef:45:23:0b:bf:a6:1f:d5:e2:2c:66:4b:06:02: 78:e8:0a:bd:1e:a0:d9:19:1b:86:84:1e:0d:39:5e: b3:9a:e1:b8:ca:5e:36:b1:44:f9:a3:07:82:fc:d0: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.192.0/22 IPv6: 2a05:6100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208718 Signature Algorithm: sha256WithRSAEncryption ac:b5:2a:b7:9c:ea:08:63:b2:93:5a:21:b1:d6:bd:17:43:8a: c5:16:e1:52:c6:3f:78:7e:0e:5e:99:39:ab:2a:f7:1a:de:34: f7:b4:ef:0e:8d:89:5a:aa:d1:cb:7e:8b:12:97:57:b3:a4:57: 50:6e:0f:0b:c0:76:f2:2f:9c:14:21:63:8e:b8:27:9b:4f:14: a5:6c:b8:d6:4a:5f:bd:22:7d:5a:f3:0c:cd:b8:20:17:4f:3c: 6e:44:2f:63:5a:ae:19:51:03:a2:47:99:17:a3:cf:d6:44:37: e7:3b:c0:d5:a9:44:8c:8d:17:e0:0b:28:e3:7e:15:be:2c:f6: da:b8:60:58:35:30:af:bc:60:e7:84:5e:3b:9f:09:80:9a:17: d3:a7:e8:35:e1:aa:f0:a1:1c:37:2e:62:2b:8e:7c:3f:f3:5b: 5a:21:7e:51:73:a2:92:8d:d1:c6:ea:4c:98:d2:45:fc:7d:9f: d6:d6:f3:88:e9:63:7b:a0:bc:b7:51:39:5c:18:a3:27:29:78: f3:34:26:84:6a:35:6f:ec:49:87:71:e9:cb:83:99:67:b5:1a: 71:9a:0a:b2:9c:38:e9:28:4b:33:a7:3f:99:37:3e:04:dd:a8: c0:f9:73:97:92:8b:9c:af:91:7b:16:3a:3d:7c:8c:fc:e9:39: 64:29:61:24 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FcGl3dIjFYrokw/kG0v0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWI2ZDBlMDA3MmQwY2FiMjliZmE4NzM3ZGUyYTUzZTUxNDE4Mjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyFiJ1uwC18NAZwoF2fVfZ0fbnqI Iw4a6SdTMOeqcTPmbmou58vJvEyV2P4qLHNb/PslHX8ZafTd6WD6t+TnUoxyu0uY l0MiJ6ZikK+NSAWr7B3GAGJ1w/xbBtyOh0AiRg0AC3eIaoiayIT5Z/BrNkH9jKqA CfIf8WdgGAEnKNS86Zm0LTPQfLG+Sq6P6e0OzEPGwR/l6k7LzRNkBRVLsqnypsuK bBSBemW16SvCCwnz3gVZaRknYwoL6Oq0jOIyc1I0xt1If41+Mm3ZVVu8omEB70Uj C7+mH9XiLGZLBgJ46Aq9HqDZGRuGhB4NOV6zmuG4yl42sUT5oweC/NBotwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHG20OAHLQyrKb+oc33ipT5RQYJ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzBjMzU1 NC1jY2FkLTQ2OTgtYmY5Zi1iMWZjZjM4OTY5OTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMGMzNTU0 LWNjYWQtNDY5OC1iZjlmLWIxZmNmMzg5Njk5OS8xL2NiYlE0QWN0REtzcHY2aHpm ZUtsUGxGQmduWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVfAMA0EAgACMAcDBQAqBWEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvTjANBgkqhkiG9w0BAQsFAAOCAQEArLUqt5zqCGOy k1ohsda9F0OKxRbhUsY/eH4OXpk5qyr3Gt4097TvDo2JWqrRy36LEpdXs6RXUG4P C8B28i+cFCFjjrgnm08UpWy41kpfvSJ9WvMMzbggF088bkQvY1quGVEDokeZF6PP 1kQ35zvA1alEjI0X4Aso434Vviz22rhgWDUwr7xg54ReO58JgJoX06foNeGq8KEc Ny5iK458P/NbWiF+UXOiko3RxupMmNJF/H2f1tbziOlje6C8t1E5XBijJyl48zQm hGo1b+xJh3Hpy4OZZ7UacZoKspw46ShLM6c/mTc+BN2owPlzl5KLnK+RexY6PXyM /Ok5ZClhJA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:53 2026 by rpki-client