This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer File: xBCR00cDwD74-NKcu9zZjD5wb4Q.cer (raw, json) Hash identifier: bW1H+7aIrzuayLcCpiDXruQ0+AP7O4vL8ABXQfSCWkg= Subject key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B3C59F49C3EC0E3A55DEE087F45A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.77.145.0/24 IP: 2a0d:7640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3c:59:f4:9c:3e:c0:e3:a5:5d:ee:08:7f:45:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:3e:f7:54:fb:f6:b5:48:e0:82:44:51:74: 1d:67:a8:bd:96:a0:55:3e:47:8e:29:e4:82:20:05: 1e:21:2a:d3:9e:86:51:db:35:1a:00:d2:89:33:bc: a1:a2:ec:76:9b:7a:3a:1a:e4:ee:11:36:76:6c:c2: d3:2f:cf:ea:b0:c5:a2:9d:4f:6c:c4:20:25:e6:10: 7b:07:69:62:74:6c:bd:f6:ee:61:57:aa:c2:83:90: 34:fd:89:b8:d4:62:8a:35:3e:e9:c8:97:ee:c4:b0: d3:7d:8d:a1:6d:e9:aa:e5:74:aa:02:a3:64:e4:d5: 47:29:aa:d4:7b:9c:01:9f:6d:ee:c1:f4:5a:4e:73: 8c:d8:63:58:ad:08:6e:b8:1e:c6:95:97:e2:e2:96: a8:d3:9d:11:7e:12:cd:34:6d:8b:48:86:22:24:5d: 2c:11:a4:67:4b:cf:20:c4:9d:ad:99:35:58:13:57: 08:38:4c:fa:dc:53:64:e3:87:12:23:b4:29:ee:7e: 18:6f:f2:74:46:6f:98:34:dc:a5:4d:af:f8:77:fb: 0c:b7:f4:26:f5:83:c6:a0:1c:e6:e5:be:6d:bf:9c: 44:e1:f1:b2:0b:8c:23:b9:78:59:f2:23:51:b8:32: 1e:3e:10:45:87:3d:1a:85:8f:95:55:f7:b3:2b:f8: c5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.145.0/24 IPv6: 2a0d:7640::/29 Signature Algorithm: sha256WithRSAEncryption 82:99:7b:30:ab:18:b7:f5:b4:0f:f1:ce:fe:d2:06:8a:25:7e: d2:e7:be:84:60:22:5a:f7:3e:c5:43:cd:5f:18:a8:f3:bd:8e: 82:56:66:6d:4a:8e:2f:04:69:8e:ca:7b:35:bd:83:a4:fe:34: f5:44:ff:21:14:e6:5a:3c:00:ee:e4:df:c4:87:6c:21:93:1e: 44:25:65:3f:ca:82:78:01:2b:e2:39:76:02:4c:42:a2:52:ac: eb:e9:db:28:cd:8f:b4:f9:1e:a7:93:31:b4:7f:f4:c1:43:c5: be:f1:24:de:77:75:8e:22:32:a3:d1:ee:b3:ff:15:fa:fc:f7: 27:54:f3:05:76:43:4f:f1:bb:10:3a:85:0d:08:a7:2e:31:68: cb:64:c5:15:04:dc:9d:1e:fd:ac:37:52:24:17:f7:9e:c9:e4: c6:0a:b2:16:f7:fd:76:21:f2:bd:aa:a8:1d:a7:91:06:9e:e3: 24:7c:5f:c5:52:1c:7b:0f:a9:bb:10:f6:7a:18:d8:f5:93:27: cf:f0:9f:8b:ea:07:64:9b:c6:f5:73:c6:67:2e:c6:2f:b6:36: 1b:82:0c:dd:da:04:83:3c:56:bc:8d:f7:26:5f:32:0e:a9:bf: 08:ff:fd:fd:a2:15:5f:e9:72:2d:c2:b5:62:8b:79:e0:68:e2: 1c:41:f0:b7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WzxZ9Jw+wOOlXe4If0WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDEwOTFkMzQ3MDNjMDNlZjhmOGQyOWNiYmRjZDk4YzNlNzA2Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHU+91T79rVI4IJEUXQdZ6i9lqBV PkeOKeSCIAUeISrTnoZR2zUaANKJM7yhoux2m3o6GuTuETZ2bMLTL8/qsMWinU9s xCAl5hB7B2lidGy99u5hV6rCg5A0/Ym41GKKNT7pyJfuxLDTfY2hbemq5XSqAqNk 5NVHKarUe5wBn23uwfRaTnOM2GNYrQhuuB7GlZfi4pao050RfhLNNG2LSIYiJF0s EaRnS88gxJ2tmTVYE1cIOEz63FNk44cSI7Qp7n4Yb/J0Rm+YNNylTa/4d/sMt/Qm 9YPGoBzm5b5tv5xE4fGyC4wjuXhZ8iNRuDIePhBFhz0ahY+VVfezK/jFxQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMQQkdNHA8A++PjSnLvc2Yw+cG+EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzI3ODk1 Mi05MzUzLTRhZmQtYTAwZC1mN2U3YmIwMTRkYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMjc4OTUy LTkzNTMtNGFmZC1hMDBkLWY3ZTdiYjAxNGRiOC8xL3hCQ1IwMGNEd0Q3NC1OS2N1 OXpaakQ1d2I0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAJU2RMA0EAgACMAcDBQMqDXZAMA0GCSqGSIb3 DQEBCwUAA4IBAQCCmXswqxi39bQP8c7+0gaKJX7S576EYCJa9z7FQ81fGKjzvY6C VmZtSo4vBGmOyns1vYOk/jT1RP8hFOZaPADu5N/Eh2whkx5EJWU/yoJ4ASviOXYC TEKiUqzr6dsozY+0+R6nkzG0f/TBQ8W+8STed3WOIjKj0e6z/xX6/PcnVPMFdkNP 8bsQOoUNCKcuMWjLZMUVBNydHv2sN1IkF/eeyeTGCrIW9/12IfK9qqgdp5EGnuMk fF/FUhx7D6m7EPZ6GNj1kyfP8J+L6gdkm8b1c8ZnLsYvtjYbggzd2gSDPFa8jfcm XzIOqb8I//39ohVf6XItwrVii3ngaOIcQfC3 -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:36 2026 by rpki-client