This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer (raw, json) Hash identifier: yY+whA8zDKPP+6jO+UkU56HtUGqhw7ETFc96NL8RfZs= Subject key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F91BB4FC5E82CF8808021683D837A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.14.196.0/22 IP: 86.104.26.0/24 IP: 95.178.37.0/24 IP: 212.118.58.0/23 IP: 2a0e:1480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:91:bb:4f:c5:e8:2c:f8:80:80:21:68:3d:83:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07ea4e88466de4c896094028f1cf0db665360d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:9e:74:11:12:70:70:70:69:81:bc:58:a2: bd:98:a8:f2:97:8e:02:9c:bb:27:52:9b:f8:24:17: 2b:a9:6c:d1:9f:61:e4:2f:9b:ef:32:ea:8c:eb:42: 13:15:3e:76:7e:ed:fa:be:69:c2:23:56:59:5f:aa: 9d:52:dc:47:10:4b:3e:43:12:31:49:c1:a7:de:d2: 80:44:08:1c:e7:a6:79:7a:c3:1c:10:d0:43:04:f9: f4:71:dd:07:df:19:f6:02:37:1a:7d:12:eb:c9:45: 9d:58:b3:bd:45:97:2c:af:51:f3:d9:92:e6:b7:93: bc:72:1a:e5:60:0f:3d:6a:8d:8d:4c:cc:b8:87:57: 6f:9f:6a:26:c2:85:3f:d6:2f:3d:42:a4:8d:20:8e: 7f:64:35:ed:39:31:01:74:be:ed:f5:5a:37:81:1e: 1f:46:2c:fc:41:bb:4e:5b:84:98:ff:61:93:79:47: df:42:e2:65:2c:ed:d3:24:eb:81:2c:8f:ea:0a:c2: 93:9e:69:18:9e:ae:c2:60:ca:f5:7e:d3:99:0f:41: 76:a6:bf:b7:9d:30:24:5e:10:56:6b:6b:b9:9b:df: 22:b7:1f:92:1c:ca:20:2c:72:62:7a:45:21:b2:ed: ad:23:74:07:f9:43:d9:d0:c0:4b:5e:e1:dc:0b:54: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.196.0/22 86.104.26.0/24 95.178.37.0/24 212.118.58.0/23 IPv6: 2a0e:1480::/29 Signature Algorithm: sha256WithRSAEncryption 00:55:98:d6:94:51:60:78:a8:c9:70:71:3e:c5:69:6a:b8:06: 97:5f:b7:2b:cb:ab:ac:01:01:2a:5b:b4:f1:95:ba:44:17:c3: 2e:e4:98:79:b7:03:7b:4c:4c:8d:59:5b:7b:e0:62:fc:a0:3e: 43:1f:87:72:a8:33:d7:33:c8:12:2f:3b:e1:52:d8:8d:9e:46: 14:c5:58:9b:af:85:10:6a:de:b6:c5:c8:96:66:8b:70:fe:dc: 81:c8:f3:a0:84:60:3f:70:cc:fb:b6:2f:c1:46:20:a2:88:2b: e6:0a:76:3d:1d:97:ab:77:f8:93:2e:96:76:dd:26:3c:a2:84: 58:66:fc:71:94:c2:14:54:cd:f3:08:ae:6d:88:ed:1f:29:05: 6f:65:e7:1c:01:29:fc:ed:62:77:a4:fd:16:87:78:a5:56:7a: ba:dd:e7:fa:10:8b:c6:64:80:b8:c6:9f:f7:4d:5b:20:e7:00: 29:f6:c1:49:50:58:c1:ba:9b:ec:63:76:75:41:6c:b3:b8:cd: d4:5b:84:1b:b4:44:39:4d:dd:e6:7f:83:c0:e5:0e:ff:26:e1: bf:9b:42:78:d3:b3:ef:16:1f:57:a6:d1:82:25:d4:e6:b2:26: 35:56:c1:72:72:f7:7f:53:30:d2:89:fa:e4:77:0f:77:e3:d0: 61:61:75:8a -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt8f5G7T8XoLPiAgCFoPYN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2VhNGU4ODQ2NmRlNGM4OTYwOTQwMjhmMWNmMGRiNjY1MzYwZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmKedBEScHBwaYG8WKK9mKjyl44C nLsnUpv4JBcrqWzRn2HkL5vvMuqM60ITFT52fu36vmnCI1ZZX6qdUtxHEEs+QxIx ScGn3tKARAgc56Z5esMcENBDBPn0cd0H3xn2AjcafRLryUWdWLO9RZcsr1Hz2ZLm t5O8chrlYA89ao2NTMy4h1dvn2omwoU/1i89QqSNII5/ZDXtOTEBdL7t9Vo3gR4f Riz8QbtOW4SY/2GTeUffQuJlLO3TJOuBLI/qCsKTnmkYnq7CYMr1ftOZD0F2pr+3 nTAkXhBWa2u5m98itx+SHMogLHJiekUhsu2tI3QH+UPZ0MBLXuHcC1SW0QIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAfqTohGbeTIlglAKPHPDbZlNg0yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2Y4MDBm MS03NGFlLTRjMTktYTdjZi0zMWIzNmY1NzlmMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjgwMGYx LTc0YWUtNGMxOS1hN2NmLTMxYjM2ZjU3OWYwNi8xL0ItcE9pRVp0NU1pV0NVQW84 YzhOdG1VMkRUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLQ7EAwQAVmgaAwQAX7IlAwQB1HY6MA0EAgAC MAcDBQMqDhSAMA0GCSqGSIb3DQEBCwUAA4IBAQAAVZjWlFFgeKjJcHE+xWlquAaX X7cry6usAQEqW7TxlbpEF8Mu5Jh5twN7TEyNWVt74GL8oD5DH4dyqDPXM8gSLzvh UtiNnkYUxVibr4UQat62xciWZotw/tyByPOghGA/cMz7ti/BRiCiiCvmCnY9HZer d/iTLpZ23SY8ooRYZvxxlMIUVM3zCK5tiO0fKQVvZeccASn87WJ3pP0Wh3ilVnq6 3ef6EIvGZIC4xp/3TVsg5wAp9sFJUFjBupvsY3Z1QWyzuM3UW4QbtEQ5Td3mf4PA 5Q7/JuG/m0J407PvFh9XptGCJdTmsiY1VsFycvd/UzDSifrkdw9349BhYXWK -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:16 2026 by rpki-client