This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer File: v85V0V6xGeUtb6_NOXPi9tTyI_I.cer (raw, json) Hash identifier: g6WhXAByZ0Zdtpf9+A5espy3o7YIbYjJEIpr9voDd9E= Subject key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C18876B189EEB59F6A61F59DF3B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200031 IP: 45.159.164.0/22 IP: 91.195.56.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c1:88:76:b1:89:ee:b5:9f:6a:61:f5:9d:f3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:7f:ef:54:0a:79:0c:04:ab:5d:ff:93:c7: 24:52:e3:68:60:11:13:98:51:e0:f9:5f:b9:0d:dd: 79:aa:e6:0f:46:20:48:ee:8d:6f:a0:19:74:49:c5: e1:c8:b8:29:22:ee:9c:b8:d2:f5:36:e1:e3:ed:05: 57:5d:b2:99:49:05:6d:d2:1d:8a:f2:b6:d3:ea:0d: 64:83:d3:62:4a:e7:66:e4:40:b2:09:af:2f:5c:f4: e7:3e:71:aa:f6:25:32:a0:aa:90:37:f1:de:86:9f: f6:60:22:d9:0f:44:41:2a:4e:3a:47:e5:fa:93:38: 0b:77:5c:3a:e7:ce:b1:27:f4:9a:d4:b3:9e:0d:9b: 07:96:63:35:ab:0e:10:08:51:7d:3b:38:42:2f:ed: c6:e7:4d:52:ad:88:d4:5c:7e:c3:e4:ec:62:67:77: 4f:1b:51:60:6f:98:9f:98:de:9b:21:12:b2:11:0c: 38:7a:cd:3b:21:d9:ec:0d:91:3c:17:eb:e9:19:c7: 59:05:f0:0d:72:a2:2f:36:6c:8e:98:de:18:c3:8e: 0c:2f:6b:f2:a1:64:44:61:cb:b4:7c:39:e0:7e:7b: bb:31:98:83:2f:48:9e:70:ec:a1:54:e0:23:b0:1e: 24:cc:8c:ea:f3:8b:ed:00:2b:e0:34:a0:3b:45:2f: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.164.0/22 91.195.56.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200031 Signature Algorithm: sha256WithRSAEncryption 82:94:d0:04:f6:fd:6f:ac:df:1f:28:99:73:9f:4d:1c:cd:1e: e7:09:cf:60:2a:69:99:68:df:90:cf:96:a8:d9:cd:f2:aa:fd: 86:3f:6b:27:38:14:f2:c3:9c:f0:62:36:77:a6:80:ac:64:0d: 26:ca:24:db:40:28:be:9e:2a:5b:27:d5:f5:1a:8e:fa:27:56: 7c:7b:5b:db:47:e3:6a:8e:59:bf:34:59:ef:18:e8:3a:9a:1b: 87:18:f9:6a:5b:19:77:85:37:d6:09:ec:85:c5:23:f7:91:c9: 1b:e4:7f:16:e8:77:b6:57:ec:f5:1b:e9:4b:73:0f:43:05:78: 21:6c:65:8c:48:f8:be:e5:21:c7:b5:43:ad:73:92:6c:5b:20: 20:4d:b1:2e:d8:38:f5:71:ff:57:96:0e:c2:55:84:b6:12:21: ce:07:e7:cf:7d:c2:0c:da:fc:75:fc:ec:67:8d:39:6c:ca:f7: 8b:81:16:d4:34:84:0c:4c:75:c4:2a:07:f8:53:40:a1:a0:c9: 57:ea:f7:ed:9e:75:0e:f8:96:9b:82:f2:da:87:02:e6:59:f1: 08:e8:53:91:94:1e:fc:6c:62:89:3c:cb:c1:4a:0e:b2:fc:75: 51:f4:76:55:e5:29:52:60:32:1c:ae:3b:21:ec:0a:b2:12:0a: 95:74:57:e1 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7pMGIdrGJ7rWfamH1nfOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNlNTVkMTVlYjExOWU1MmQ2ZmFmY2QzOTczZTJmNmQ0ZjIyM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS1/71QKeQwEq13/k8ckUuNoYBET mFHg+V+5Dd15quYPRiBI7o1voBl0ScXhyLgpIu6cuNL1NuHj7QVXXbKZSQVt0h2K 8rbT6g1kg9NiSudm5ECyCa8vXPTnPnGq9iUyoKqQN/Hehp/2YCLZD0RBKk46R+X6 kzgLd1w6586xJ/Sa1LOeDZsHlmM1qw4QCFF9OzhCL+3G501SrYjUXH7D5OxiZ3dP G1Fgb5ifmN6bIRKyEQw4es07IdnsDZE8F+vpGcdZBfANcqIvNmyOmN4Yw44ML2vy oWREYcu0fDngfnu7MZiDL0iecOyhVOAjsB4kzIzq84vtACvgNKA7RS8jmwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFL/OVdFesRnlLW+vzTlz4vbU8iPyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2VjZTVj Ny0yMTQzLTRkYjQtOTg1Ny0wNTJjZjAxZDIwNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZWNlNWM3 LTIxNDMtNGRiNC05ODU3LTA1MmNmMDFkMjA0OC8xL3Y4NVYwVjZ4R2VVdGI2X05P WFBpOXRUeUlfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLZ+kAwQBW8M4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMNXzANBgkqhkiG9w0BAQsFAAOCAQEAgpTQBPb9b6zfHyiZc59NHM0e 5wnPYCppmWjfkM+WqNnN8qr9hj9rJzgU8sOc8GI2d6aArGQNJsok20Aovp4qWyfV 9RqO+idWfHtb20fjao5ZvzRZ7xjoOpobhxj5alsZd4U31gnshcUj95HJG+R/Fuh3 tlfs9RvpS3MPQwV4IWxljEj4vuUhx7VDrXOSbFsgIE2xLtg49XH/V5YOwlWEthIh zgfnz33CDNr8dfzsZ405bMr3i4EW1DSEDEx1xCoH+FNAoaDJV+r37Z51DviWm4Ly 2ocC5lnxCOhTkZQe/GxiiTzLwUoOsvx1UfR2VeUpUmAyHK47IewKshIKlXRX4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:29 2026 by rpki-client