This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer File: zBEL75xblqgxx6v5VZJ0S7rx7mc.cer (raw, json) Hash identifier: 3E2SJSXi4OqZDoC6AmUFKhyCZamUxeczFN5dR3pzWP0= Subject key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A306AC58FE49F5B1C2D13C3E24A467 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205500 IP: 45.152.168.0/22 IP: 185.216.16.0/22 IP: 2a0f:5000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:06:ac:58:fe:49:f5:b1:c2:d1:3c:3e:24:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:19:60:aa:c3:98:2d:2d:eb:db:14:bd:32: 8e:7e:bc:48:cc:d7:e9:0f:27:50:b1:ce:c3:d0:12: 27:0a:f4:20:1d:d4:8b:16:06:6d:0e:60:ca:d1:d0: 2b:2f:45:fb:f7:c4:2f:cc:39:13:e3:d2:1a:45:13: 12:93:c9:e4:db:5b:14:e6:ed:42:95:a1:77:ec:b2: 88:ac:29:97:0e:f4:19:b7:d1:36:ff:2f:7a:ed:02: 24:3e:2a:ad:b4:ef:4e:45:00:ae:eb:45:f4:8b:cc: 92:44:e0:e4:6d:7c:a9:5b:b1:9d:08:73:c0:cb:67: e4:ec:3b:b7:ff:63:c1:f7:39:9a:a7:5d:a4:0f:d0: b7:8b:e5:31:1c:f8:0d:76:43:33:db:d3:99:1e:16: 7d:66:c5:d4:22:9a:76:47:ca:e1:39:4f:24:49:8f: eb:89:b6:c3:17:2a:ef:e4:04:2e:8b:d9:54:d4:c9: 10:a2:d6:d4:1c:23:31:3b:14:5e:87:ab:0a:77:94: 6d:67:a1:35:85:a7:bb:4f:c8:27:55:ad:fa:dc:c0: 0e:72:09:4e:80:52:f7:cc:f9:2e:b2:45:e6:01:8f: e5:81:59:e0:eb:9a:d6:f5:02:c5:02:ee:3c:af:2a: cd:69:77:91:60:dd:6c:20:c1:a6:91:4d:e0:da:ed: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.168.0/22 185.216.16.0/22 IPv6: 2a0f:5000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205500 Signature Algorithm: sha256WithRSAEncryption aa:1c:5e:2d:eb:02:99:13:18:6c:69:b3:89:7f:6f:02:eb:7f: 83:bc:bd:3f:bd:89:e8:f4:83:1a:2e:4e:6d:fb:9e:76:d7:79: 99:de:0a:08:be:c6:30:a1:36:6d:35:48:91:f8:d3:3b:2e:7b: 0b:cb:df:de:d9:65:d5:14:25:5c:ad:27:6b:8d:71:da:d2:29: 91:b4:ea:56:6e:d1:8f:b1:47:2d:ed:fe:6e:b1:f9:09:87:7c: ab:b8:e0:82:6e:28:fe:60:9d:4b:3b:da:ed:00:04:2e:9c:eb: 86:b6:54:cc:8d:02:48:6b:2b:82:5d:89:cd:73:5d:6e:12:03: 20:20:d6:37:24:68:03:be:ee:73:96:ba:2c:55:1d:1b:04:bc: 89:32:f8:e8:b6:60:44:71:85:ca:6c:b2:1c:d7:0f:2d:ba:31: 73:6d:61:71:c0:3b:19:55:56:9c:b7:d6:d2:33:17:66:cd:80: e7:95:7f:23:33:ba:cd:04:4c:4a:05:8b:12:ea:3e:b9:0a:24: 8d:a4:40:c5:e2:5d:6d:3b:23:53:41:1a:62:70:3d:41:76:a1: 58:70:a9:ee:f7:b6:28:ce:2e:74:f4:12:cd:88:67:50:ef:3f: f3:e4:5f:27:b5:f8:e2:45:a9:93:69:ac:dd:b8:7f:8f:f2:da: bd:be:63:8b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4owasWP5J9bHC0Tw+JKRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzExMGJlZjljNWI5NmE4MzFjN2FiZjk1NTkyNzQ0YmJhZjFlZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWIZYKrDmC0t69sUvTKOfrxIzNfp DydQsc7D0BInCvQgHdSLFgZtDmDK0dArL0X798QvzDkT49IaRRMSk8nk21sU5u1C laF37LKIrCmXDvQZt9E2/y967QIkPiqttO9ORQCu60X0i8ySRODkbXypW7GdCHPA y2fk7Du3/2PB9zmap12kD9C3i+UxHPgNdkMz29OZHhZ9ZsXUIpp2R8rhOU8kSY/r ibbDFyrv5AQui9lU1MkQotbUHCMxOxReh6sKd5RtZ6E1hae7T8gnVa363MAOcglO gFL3zPkuskXmAY/lgVng65rW9QLFAu48ryrNaXeRYN1sIMGmkU3g2u1KLQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMwRC++cW5aoMcer+VWSdEu68e5nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzUyOWJl OS0xZmNmLTQ2YTMtYjEzZC1jOGFjYjcxNzNiNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvNTI5YmU5 LTFmY2YtNDZhMy1iMTNkLWM4YWNiNzE3M2I2Mi8xL3pCRUw3NXhibHFneHg2djVW WkowUzdyeDdtYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZioAwQCudgQMA0EAgACMAcDBQMqD1AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMivDANBgkqhkiG9w0BAQsFAAOCAQEAqhxe LesCmRMYbGmziX9vAut/g7y9P72J6PSDGi5Obfuedtd5md4KCL7GMKE2bTVIkfjT Oy57C8vf3tll1RQlXK0na41x2tIpkbTqVm7Rj7FHLe3+brH5CYd8q7jggm4o/mCd Szva7QAELpzrhrZUzI0CSGsrgl2JzXNdbhIDICDWNyRoA77uc5a6LFUdGwS8iTL4 6LZgRHGFymyyHNcPLboxc21hccA7GVVWnLfW0jMXZs2A55V/IzO6zQRMSgWLEuo+ uQokjaRAxeJdbTsjU0EaYnA9QXahWHCp7ve2KM4udPQSzYhnUO8/8+RfJ7X44kWp k2ms3bh/j/Lavb5jiw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:08 2026 by rpki-client