This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer File: mXFUBuche_wTgSpHBMYq4JnnyP8.cer (raw, json) Hash identifier: GM9bmbDLX8wSA9yZt4F2uiTCZwiK9/Ip9oMqqubQqJU= Subject key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107A9C3A46116C3F8824318DC0F09E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.254.208.0/22 IP: 2a0c:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:9c:3a:46:11:6c:3f:88:24:31:8d:c0:f0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99715406e7217bfc13812a4704c62ae099e7c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:c1:83:97:c5:a6:0b:2c:48:5b:0e:e4:4f: 8b:d1:12:0d:3e:5c:b8:36:17:a8:be:1d:26:1d:58: 5a:5b:6c:6a:2f:92:87:6a:47:97:a8:c7:d3:16:1b: 5c:f6:38:9f:b6:e7:02:34:6d:29:a6:e4:d2:97:5e: e9:1c:dd:8f:99:d4:50:fd:bb:6b:35:76:7c:21:51: 29:c5:11:c2:6b:dd:de:bd:f6:35:eb:f1:76:4d:2a: 2f:59:b4:dd:20:4e:3e:e5:58:1d:2c:46:64:1c:82: 96:ae:d5:f5:8a:fd:0c:ff:fb:15:9f:c6:10:8d:ee: 34:7c:3a:b2:28:44:3c:af:58:94:f5:ab:2e:63:cb: 7e:07:9e:36:22:55:05:a7:11:94:aa:af:b4:da:e0: 80:39:2d:40:e8:fd:ea:1e:94:79:1f:a4:67:c2:b7: ac:33:69:89:83:f1:38:4c:84:d3:32:b4:02:8d:d3: 42:77:c3:a8:35:d7:73:e1:8d:a1:7b:44:bc:2f:d2: 48:fc:f2:04:ba:43:07:d2:3f:4f:af:80:79:4b:f4: 10:ad:94:71:3d:b7:7b:70:81:2a:46:b3:89:1f:66: c2:80:a6:95:ed:f1:eb:3b:08:48:75:4a:e3:0b:a7: 94:ee:38:b3:08:b1:3e:67:37:f6:71:cb:8a:89:5e: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.208.0/22 IPv6: 2a0c:5340::/29 Signature Algorithm: sha256WithRSAEncryption 97:3e:4c:82:8e:8f:0a:c7:d2:22:b5:83:82:8b:d6:b7:47:3a: ac:55:34:80:28:2b:0d:82:d9:bd:66:9c:57:e5:c3:4f:34:ca: 32:df:1f:4b:16:74:fc:d7:ac:c3:90:27:09:df:20:2c:32:27: fe:33:02:a0:0b:31:6f:78:e2:cf:2e:b3:c5:af:05:a9:cf:a2: a0:92:38:f7:f7:66:89:22:3f:ea:d0:3d:94:b7:97:b2:b2:fd: ef:10:d5:ca:ce:7f:9b:88:39:69:90:4d:5c:71:ad:5c:9b:77: 6f:52:74:f9:86:0c:ec:b9:e5:19:5d:ca:a7:52:00:62:de:6c: 13:be:93:2e:85:ae:5a:f2:4d:dc:d5:36:7e:eb:6c:cf:83:21: 70:b5:1d:dd:99:3a:8e:92:39:97:13:7b:3b:6d:e0:70:78:bf: 82:96:5f:78:b8:22:ba:65:57:96:aa:2b:f7:25:f0:df:93:c4: 8e:c6:0d:76:96:5a:d6:1a:59:4a:41:6f:af:9e:90:77:93:41: db:04:40:f8:01:96:d8:57:fb:35:e2:a6:13:01:68:a2:3c:c8: b1:71:48:de:a8:a3:e0:3b:7f:dc:11:b7:fe:f5:d9:e2:ad:c3: ad:e6:61:1f:7d:d8:6e:8d:53:15:a5:62:f5:84:43:2f:9e:d6: 89:98:50:5f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EHqcOkYRbD+IJDGNwPCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTcxNTQwNmU3MjE3YmZjMTM4MTJhNDcwNGM2MmFlMDk5ZTdjOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSnBg5fFpgssSFsO5E+L0RINPly4 Nheovh0mHVhaW2xqL5KHakeXqMfTFhtc9jiftucCNG0ppuTSl17pHN2PmdRQ/btr NXZ8IVEpxRHCa93evfY16/F2TSovWbTdIE4+5VgdLEZkHIKWrtX1iv0M//sVn8YQ je40fDqyKEQ8r1iU9asuY8t+B542IlUFpxGUqq+02uCAOS1A6P3qHpR5H6Rnwres M2mJg/E4TITTMrQCjdNCd8OoNddz4Y2he0S8L9JI/PIEukMH0j9Pr4B5S/QQrZRx Pbd7cIEqRrOJH2bCgKaV7fHrOwhIdUrjC6eU7jizCLE+Zzf2ccuKiV5znwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJlxVAbnIXv8E4EqRwTGKuCZ58j/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzRlOWUz Ny02ZTY2LTQxYjEtYWE5OS0xNTE2YjZkODJlMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNGU5ZTM3 LTZlNjYtNDFiMS1hYTk5LTE1MTZiNmQ4MmUyZC8xL21YRlVCdWNoZV93VGdTcEhC TVlxNEpubnlQOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf7QMA0EAgACMAcDBQMqDFNAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXPkyCjo8Kx9IitYOCi9a3RzqsVTSAKCsNgtm9ZpxX5cNPNMoy 3x9LFnT816zDkCcJ3yAsMif+MwKgCzFveOLPLrPFrwWpz6Kgkjj392aJIj/q0D2U t5eysv3vENXKzn+biDlpkE1cca1cm3dvUnT5hgzsueUZXcqnUgBi3mwTvpMuha5a 8k3c1TZ+62zPgyFwtR3dmTqOkjmXE3s7beBweL+Cll94uCK6ZVeWqiv3JfDfk8SO xg12llrWGllKQW+vnpB3k0HbBED4AZbYV/s14qYTAWiiPMixcUjeqKPgO3/cEbf+ 9dnircOt5mEffdhujVMVpWL1hEMvntaJmFBf -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:20 2026 by rpki-client