This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.cer (raw, json) Hash identifier: Gsd644p/vXlR53d+6qFOqMiTDSAvubWi4bxCbR5ED4Y= Subject key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35CB9062404C4DDBED013CA191D7B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.169.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:90:62:40:4c:4d:db:ed:01:3c:a1:91:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:dc:9b:de:78:3e:61:14:db:42:4c:aa:a1: 7a:0a:5d:43:fc:2e:f8:fc:18:b0:8a:5f:ae:30:bd: da:f6:bc:e1:29:8a:cd:41:3a:05:4c:57:c3:4a:38: 0a:0b:1c:a5:ab:29:3b:8f:b2:98:61:f4:31:5f:a4: 6c:9a:2f:1d:c2:84:28:87:ef:d0:81:f4:fc:3d:4a: 05:1a:ef:e9:07:d3:36:b6:9c:98:6c:f4:96:d5:39: e2:d5:8a:4f:ed:54:da:e1:29:c9:ad:9c:19:a0:69: 14:f0:3d:91:9f:0f:7c:11:c3:5c:b0:3e:6f:13:9a: 41:80:3a:17:3a:95:34:10:b5:03:6b:4f:7c:8d:88: 1c:ff:4b:58:6c:d6:3a:f0:10:19:47:58:13:2e:0d: d8:98:90:69:bc:0d:74:fa:16:da:ea:9e:27:ee:a6: 82:05:16:08:42:4e:d9:84:03:4e:6a:26:98:f9:2a: c3:b8:0b:70:cd:32:9f:f2:1b:49:db:a9:54:b1:8a: 03:6b:93:73:42:0b:bd:4d:5b:e0:1d:1a:e4:4d:bd: ca:0e:f8:59:6d:6b:48:30:35:28:a0:55:94:34:6c: 70:1e:69:84:e7:c4:fe:23:cc:cb:cd:ae:1b:6f:40: 3f:b7:be:78:cb:ab:0b:16:12:d3:fd:bd:8a:73:9d: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:2c:31:1e:28:ca:e0:61:f9:28:55:3c:c6:66:a8:fb:f9:2f: 0d:40:30:66:e9:b8:ff:df:84:3a:f8:58:08:41:1b:26:0d:48: 7d:77:df:ba:d3:f5:86:37:72:a0:4c:82:bf:be:bd:62:14:15: 3e:20:09:8c:c7:6c:e9:98:2b:cc:ef:4f:9d:c5:af:3f:30:ac: 4e:27:c7:60:e0:72:ad:47:4e:54:fc:c1:2c:26:31:a4:bc:4e: fc:98:d0:ad:79:0a:83:74:0f:fa:4c:77:dd:24:79:b9:76:3b: 5f:a9:81:6e:d4:4d:3a:0a:80:94:21:a0:7f:5f:ba:de:d5:ab: 1e:9e:c7:d1:64:b6:6c:06:0b:1b:85:74:9b:35:13:cc:74:37: 89:9d:74:f6:45:41:0b:59:b6:42:c6:1a:7f:4b:18:e0:d9:3b: 59:3d:1b:70:a9:5c:3a:fa:cc:07:ed:07:db:25:23:ac:0b:3b: 18:f1:f4:52:c8:c8:e8:45:7d:22:a0:07:de:60:0e:e6:54:e8: 02:dd:19:6f:6e:e4:a3:5b:69:12:8b:06:3b:fa:7e:cc:a8:8c: a1:6d:c5:75:ea:ab:a6:c3:8d:ec:10:21:e3:ad:1b:4b:1b:17: 37:c9:d0:12:d5:09:0c:ee:1c:0e:a1:65:5a:e6:4f:13:01:08: 2e:40:69:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NcuQYkBMTdvtATyhkde1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzYwNTQwOTI1ZGJjYjFhMDlmYjY1ZjNiMjkwMDNkNjhmMjNkZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3cm954PmEU20JMqqF6Cl1D/C74 /Biwil+uML3a9rzhKYrNQToFTFfDSjgKCxylqyk7j7KYYfQxX6Rsmi8dwoQoh+/Q gfT8PUoFGu/pB9M2tpyYbPSW1Tni1YpP7VTa4SnJrZwZoGkU8D2Rnw98EcNcsD5v E5pBgDoXOpU0ELUDa098jYgc/0tYbNY68BAZR1gTLg3YmJBpvA10+hba6p4n7qaC BRYIQk7ZhANOaiaY+SrDuAtwzTKf8htJ26lUsYoDa5NzQgu9TVvgHRrkTb3KDvhZ bWtIMDUooFWUNGxwHmmE58T+I8zLza4bb0A/t754y6sLFhLT/b2Kc52MBwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPNgVAkl28saCftl87KQA9aPI95rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzRkYWU3 Zi1iYTBlLTQyNzctOWU5Mi1iNGYwMDdlZjdlODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNGRhZTdm LWJhMGUtNDI3Ny05ZTkyLWI0ZjAwN2VmN2U4Ni8xLzgyQlVDU1hieXhvSi0yWHpz cEFEMW84ajNtcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCualQMA0GCSqGSIb3DQEBCwUAA4IBAQB8LDEe KMrgYfkoVTzGZqj7+S8NQDBm6bj/34Q6+FgIQRsmDUh9d9+60/WGN3KgTIK/vr1i FBU+IAmMx2zpmCvM70+dxa8/MKxOJ8dg4HKtR05U/MEsJjGkvE78mNCteQqDdA/6 THfdJHm5djtfqYFu1E06CoCUIaB/X7re1asensfRZLZsBgsbhXSbNRPMdDeJnXT2 RUELWbZCxhp/Sxjg2TtZPRtwqVw6+swH7QfbJSOsCzsY8fRSyMjoRX0ioAfeYA7m VOgC3RlvbuSjW2kSiwY7+n7MqIyhbcV16qumw43sECHjrRtLGxc3ydAS1QkM7hwO oWVa5k8TAQguQGn8 -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:26 2026 by rpki-client