This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer File: tBErtZsGJ9ojr5DA8FhLcbUPd48.cer (raw, json) Hash identifier: zyc/uAjA2pW2+yLfXT6tKeMKEoO5eNgslp0FPkARP7E= Subject key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80640227120DE6565434AEB8FFF625 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49537 IP: 194.169.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:02:27:12:0d:e6:56:54:34:ae:b8:ff:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4112bb59b0627da23af90c0f0584b71b50f778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:ec:76:ab:3e:ce:ee:3f:b2:e9:d3:3b:b1: d1:8a:3e:35:3d:c8:d2:af:36:a8:e0:0a:5d:e8:92: f5:40:5f:0a:7a:42:cc:94:70:0d:2e:18:af:c5:d0: 56:87:42:36:f2:6f:18:7c:66:f5:c1:8f:0d:fa:b7: 61:c9:1f:63:16:e8:b9:7f:bc:38:c8:0c:0d:69:18: ce:5e:c6:c6:fb:ce:e2:55:a4:87:9e:6d:9b:36:12: 18:e5:5d:71:29:bb:33:f0:d4:2b:ab:de:e5:67:d4: 8b:cb:55:ee:36:93:e3:c0:3c:50:66:6d:f5:15:b0: 20:3b:09:ec:81:81:89:4f:50:62:3c:ab:01:3f:33: b8:8c:38:bf:fc:63:3c:03:89:3b:cc:b6:3d:24:cd: 66:c2:a4:6a:0a:ef:3c:28:88:0c:eb:02:ce:0a:86: 00:b5:64:1d:73:bf:c2:76:f1:f2:32:35:db:09:b3: ba:7a:5d:3a:cf:d1:d3:c2:5a:3f:e4:df:09:93:c9: 1c:3c:45:92:a3:47:81:e2:f2:a8:56:7a:63:b3:ee: d6:fd:fa:a9:77:5d:50:a9:e6:8a:5c:b4:7f:72:c2: bf:79:20:28:db:e7:56:67:74:e1:c7:a0:84:e2:bf: 36:4d:c7:42:c1:2e:e2:34:15:de:8f:21:48:02:7d: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49537 Signature Algorithm: sha256WithRSAEncryption 01:bd:57:60:69:a8:85:31:50:fa:9b:80:e9:9a:aa:79:13:78: b2:87:e7:ce:0a:ac:42:f6:f9:b5:96:5e:d6:9b:02:45:51:cb: 87:89:fd:a6:eb:9b:d9:67:87:9d:c9:9d:82:f2:0b:98:82:5d: 21:92:ab:0e:c3:59:df:57:59:51:66:80:9e:94:23:25:52:05: 2b:e2:f9:3d:b4:e5:e0:27:9e:c1:1d:53:21:ad:ee:87:e6:6e: 29:04:1d:ca:92:dc:7f:8a:48:3c:d3:50:76:fc:1b:8d:86:1c: a1:a5:a2:3d:77:ab:51:1d:63:8d:9d:b7:e7:67:3b:91:6a:66: 86:58:a6:34:f0:7d:a3:bd:33:9b:f4:c3:2d:72:a1:25:12:5a: 60:05:d0:7f:99:14:8f:89:1d:3f:06:6f:55:70:f2:85:c1:8d: 75:b2:40:ff:0b:c8:ee:e3:b0:c9:61:7f:a3:ef:13:22:33:61: fa:ae:8b:79:b3:e5:b3:e8:dd:ed:53:cd:58:b4:4f:91:d6:06: 75:4e:ac:b0:e2:63:8f:04:4d:e9:73:1f:82:7e:34:e5:9b:11: 7e:70:dd:2c:5f:0f:8f:6c:51:15:d6:9a:1d:8b:66:71:14:99: d0:2f:80:5d:8f:35:0c:4d:16:63:ea:bc:3a:74:d4:b4:10:6d: 78:d5:f0:f4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gGQCJxIN5lZUNK64//YlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDExMmJiNTliMDYyN2RhMjNhZjkwYzBmMDU4NGI3MWI1MGY3NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/zsdqs+zu4/sunTO7HRij41PcjS rzao4Apd6JL1QF8KekLMlHANLhivxdBWh0I28m8YfGb1wY8N+rdhyR9jFui5f7w4 yAwNaRjOXsbG+87iVaSHnm2bNhIY5V1xKbsz8NQrq97lZ9SLy1XuNpPjwDxQZm31 FbAgOwnsgYGJT1BiPKsBPzO4jDi//GM8A4k7zLY9JM1mwqRqCu88KIgM6wLOCoYA tWQdc7/CdvHyMjXbCbO6el06z9HTwlo/5N8Jk8kcPEWSo0eB4vKoVnpjs+7W/fqp d11QqeaKXLR/csK/eSAo2+dWZ3Thx6CE4r82TcdCwS7iNBXejyFIAn2I5wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLQRK7WbBifaI6+QwPBYS3G1D3ePMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzY3ZDU3 ZS1mM2RlLTRkMTAtYmQ5ZC04N2ExMGJjNjhhMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNjdkNTdl LWYzZGUtNGQxMC1iZDlkLTg3YTEwYmM2OGEzNy8xL3RCRXJ0WnNHSjlvanI1REE4 RmhMY2JVUGQ0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwqnWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDBgTANBgkqhkiG9w0BAQsFAAOCAQEAAb1XYGmohTFQ+puA6ZqqeRN4sofnzgqs Qvb5tZZe1psCRVHLh4n9puub2WeHncmdgvILmIJdIZKrDsNZ31dZUWaAnpQjJVIF K+L5PbTl4CeewR1TIa3uh+ZuKQQdypLcf4pIPNNQdvwbjYYcoaWiPXerUR1jjZ23 52c7kWpmhlimNPB9o70zm/TDLXKhJRJaYAXQf5kUj4kdPwZvVXDyhcGNdbJA/wvI 7uOwyWF/o+8TIjNh+q6LebPls+jd7VPNWLRPkdYGdU6ssOJjjwRN6XMfgn405ZsR fnDdLF8Pj2xRFdaaHYtmcRSZ0C+AXY81DE0WY+q8OnTUtBBteNXw9A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:24 2026 by rpki-client