This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer (raw, json) Hash identifier: sRglU9tHh21jMi0jyMN5MCp8GW23RmY0UfBmZ4gl8xM= Subject key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84476E3F009EE0E57AD33A318F2F5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8968 AS: 12797 IP: 31.170.40.0/21 IP: 62.85.192.0/18 IP: 62.123.0.0/16 IP: 78.4.0.0/14 IP: 85.20.0.0/16 IP: 89.118.0.0/15 IP: 212.17.192.0/19 IP: 213.199.0.0/19 IP: 213.213.0.0/17 IP: 213.217.128.0/18 IP: 213.234.128.0/18 IP: 213.255.0.0/17 IP: 217.220.0.0/15 IP: 2a02:4d80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:47:6e:3f:00:9e:e0:e5:7a:d3:3a:31:8f:2f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:bf:16:01:33:d0:76:e8:5a:81:ee:66:44: c4:20:f2:8b:fb:80:20:f5:c2:ad:70:43:8b:30:d0: 94:86:2c:67:e2:e1:06:d3:b3:45:fa:64:8b:1f:90: d7:ff:69:89:17:f8:53:28:32:46:63:8c:98:22:86: 47:6d:9d:ab:44:e5:fc:94:e3:67:1d:f2:8b:ca:20: f6:77:44:3e:6b:bb:6c:64:b3:0b:dd:ad:25:60:00: ae:b2:8b:ea:58:ee:71:a6:d0:e1:6e:fe:68:1a:2f: 31:ee:3f:8b:c8:99:dc:9c:60:eb:71:67:24:5d:4f: c8:80:06:8f:9d:4a:53:9f:47:c7:dc:c0:b7:2e:29: 8d:e4:10:73:08:af:10:c8:a7:7e:8e:8a:73:5d:02: 43:3c:4b:6e:04:3b:16:07:42:13:0c:9f:ea:2b:a1: 61:a9:52:d9:f1:84:d4:05:a6:70:5b:a6:2d:df:ce: 34:b7:86:68:e0:79:ab:a5:2d:60:e0:8b:5b:18:5b: 8c:9d:99:ef:af:d4:f3:6a:bd:96:81:fd:29:b8:db: 9c:ec:8c:c9:7b:1a:34:29:74:6f:8b:0e:e4:33:6b: 63:11:52:a7:28:78:16:4b:11:85:69:8f:23:0c:05: 1f:0b:40:33:9a:e0:dc:60:61:fb:c5:96:6f:92:09: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.40.0/21 62.85.192.0/18 62.123.0.0/16 78.4.0.0/14 85.20.0.0/16 89.118.0.0/15 212.17.192.0/19 213.199.0.0/19 213.213.0.0/17 213.217.128.0/18 213.234.128.0/18 213.255.0.0/17 217.220.0.0/15 IPv6: 2a02:4d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8968 12797 Signature Algorithm: sha256WithRSAEncryption ab:c2:d3:5c:22:ec:b2:eb:1b:dc:c4:1c:80:e7:19:c0:49:3a: 55:9d:91:99:be:20:3b:03:02:86:6f:52:ed:2c:52:b7:4e:d1: 26:49:48:ad:e0:d0:6c:fe:8a:25:21:82:d6:0c:91:b2:c9:e3: ec:d7:2d:9a:bb:7e:1e:8a:9b:53:95:64:50:a2:f8:c2:35:69: e6:6b:79:6d:1e:94:5a:65:40:ca:6e:47:84:e4:58:a5:27:5e: d3:b1:2b:fd:89:76:34:d8:09:bb:4f:72:b5:f7:f2:24:96:77: 0d:c0:16:a7:88:16:81:67:8f:37:62:ef:b9:05:82:84:a2:0d: 91:50:81:18:1a:03:af:60:c2:f4:bb:7e:54:e2:5e:c0:52:0f: 13:56:ab:d8:aa:e8:cb:3e:5c:8e:01:1b:5a:23:9c:ec:dc:ff: 14:22:4c:ee:0b:c8:97:4f:f2:d3:22:05:1f:a1:60:22:0a:cc: c2:0a:80:24:27:28:26:4c:7a:d9:4e:76:0f:a9:ac:26:52:09: ac:eb:90:15:d2:51:bf:1b:9c:89:5a:1a:2e:d2:16:ca:b3:e5: 08:23:c8:b9:30:5c:7b:0f:5d:d9:b7:b0:26:49:e5:af:1a:a2: 87:e2:b1:c3:f3:c7:64:9c:61:b6:8d:66:38:eb:fe:97:bd:52: c9:ea:8e:64 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZt/hEduPwCe4OV60zoxjy9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGIyZjU4M2Y4ODlkZDRiMTM0ZGE1NmRiNDVhM2UyNTU4MGIxYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksu/FgEz0HboWoHuZkTEIPKL+4Ag 9cKtcEOLMNCUhixn4uEG07NF+mSLH5DX/2mJF/hTKDJGY4yYIoZHbZ2rROX8lONn HfKLyiD2d0Q+a7tsZLML3a0lYACusovqWO5xptDhbv5oGi8x7j+LyJncnGDrcWck XU/IgAaPnUpTn0fH3MC3LimN5BBzCK8QyKd+jopzXQJDPEtuBDsWB0ITDJ/qK6Fh qVLZ8YTUBaZwW6Yt3840t4Zo4HmrpS1g4ItbGFuMnZnvr9Tzar2Wgf0puNuc7IzJ exo0KXRviw7kM2tjEVKnKHgWSxGFaY8jDAUfC0AzmuDcYGH7xZZvkgk3zwIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFK2y9YP4id1LE02lbbRaPiVYCxsdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzM1MDQ1 NS1kZDU0LTRkZWYtOGU5MS1hZGQxNTE2NjZlMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMzUwNDU1 LWRkNTQtNGRlZi04ZTkxLWFkZDE1MTY2NmUyYS8xL3JiTDFnX2lKM1VzVFRhVnR0 Rm8tSlZnTEd4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF BwEHAQH/BGIwYDBPBAIAATBJAwQDH6ooAwQGPlXAAwMAPnsDAwJOBAMDAFUUAwMB WXYDBAXUEcADBAXVxwADBAfV1QADBAbV2YADBAbV6oADBAfV/wADAwHZ3DANBAIA AjAHAwUAKgJNgDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIjCAICMf0wDQYJKoZI hvcNAQELBQADggEBAKvC01wi7LLrG9zEHIDnGcBJOlWdkZm+IDsDAoZvUu0sUrdO 0SZJSK3g0Gz+iiUhgtYMkbLJ4+zXLZq7fh6Km1OVZFCi+MI1aeZreW0elFplQMpu R4TkWKUnXtOxK/2JdjTYCbtPcrX38iSWdw3AFqeIFoFnjzdi77kFgoSiDZFQgRga A69gwvS7flTiXsBSDxNWq9iq6Ms+XI4BG1ojnOzc/xQiTO4LyJdP8tMiBR+hYCIK zMIKgCQnKCZMetlOdg+prCZSCazrkBXSUb8bnIlaGi7SFsqz5QgjyLkwXHsPXdm3 sCZJ5a8aoofiscPzx2ScYbaNZjjr/pe9UsnqjmQ= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:17 2026 by rpki-client