This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer File: B-rSmInb9i85j2S8YUkWZzBW1F4.cer (raw, json) Hash identifier: Q7divqgM7iZrIfqBlhgB0XvyMxa5zIMe+lsz33gHTgY= Subject key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30F7B961434DD682293D49F7D113C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44668 IP: 77.87.40.0/21 IP: 91.202.104.0/22 IP: 176.122.88.0/21 IP: 185.11.80.0/22 IP: 185.255.48.0/22 IP: 193.168.51.0/24 IP: 193.168.55.0/24 IP: 193.194.112.0/22 IP: 195.5.126.0/24 IP: 195.18.28.0/22 IP: 2a0c:5940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:7b:96:14:34:dd:68:22:93:d4:9f:7d:11:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07ead29889dbf62f398f64bc614916673056d45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:f8:e4:da:a0:98:b1:7e:40:05:4b:18:0e: 84:42:48:d5:59:7f:b9:65:24:4e:02:7c:e7:b7:18: 0b:17:30:75:f9:40:22:24:e9:b3:f2:b5:3e:ca:f6: b2:41:ec:ea:b9:10:ed:aa:fe:34:3f:71:eb:c4:90: e1:bd:57:e1:ab:ef:ff:18:ec:2c:dd:e3:da:5c:4c: 13:f8:cc:a0:e8:d0:69:f0:3b:b7:0f:10:c3:62:e5: db:cc:ca:48:49:e1:3b:3d:65:9f:b6:35:71:d4:b9: 55:99:eb:d2:01:37:b8:46:96:4d:ba:de:97:39:53: 08:01:6c:14:78:9b:ba:d8:51:d4:ca:99:ba:ae:4b: 8b:24:f0:b5:26:a7:62:00:23:dc:b1:3c:28:08:9d: 5d:85:65:7e:f5:01:9c:95:99:3a:28:b5:d5:1d:a8: 60:46:3b:69:47:7e:66:3d:92:13:50:3a:6f:de:53: de:58:27:8c:91:e5:a0:67:41:91:e5:f9:53:f8:43: f4:0b:7d:ee:f3:1b:68:83:1e:87:75:1f:ee:5d:d7: da:c6:11:79:8b:da:d0:23:3e:5f:15:49:a3:40:41: be:88:18:d8:77:43:3a:27:d6:40:04:c1:d6:49:7a: fb:df:d3:2e:3f:f9:8c:5b:3a:7d:9f:13:9e:6b:38: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.40.0/21 91.202.104.0/22 176.122.88.0/21 185.11.80.0/22 185.255.48.0/22 193.168.51.0/24 193.168.55.0/24 193.194.112.0/22 195.5.126.0/24 195.18.28.0/22 IPv6: 2a0c:5940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44668 Signature Algorithm: sha256WithRSAEncryption 48:65:88:43:4e:c8:1e:d3:e3:ff:4d:f3:89:7d:05:7a:c9:32: e0:13:17:43:2e:81:7e:78:cc:45:a3:2b:d1:36:ba:a5:87:a8: 86:97:bc:73:f5:78:21:7e:ca:d4:3d:a4:70:b7:85:20:2b:2b: 79:22:f1:28:76:7b:1e:b2:37:0c:7a:c4:21:b7:58:e0:27:2a: 5c:b5:fc:d6:73:25:07:de:6d:c6:21:1c:fe:db:1a:da:7a:d7: ff:0d:d8:bb:00:41:23:37:82:d3:d5:36:10:39:db:13:c0:46: 6b:11:40:a6:8d:91:56:14:08:3a:3e:4d:17:2a:2c:df:02:ba: 80:38:84:a3:ad:ed:ff:80:00:44:e4:29:a8:8d:73:3c:13:a0: 81:fe:44:d3:28:88:28:0e:76:18:0d:7e:76:6b:1a:ae:62:6a: 4a:d0:9b:ea:54:0f:38:80:79:3d:7b:40:5c:49:63:fb:8e:de: cc:34:1d:11:8c:4d:be:7a:b5:d7:ce:46:ff:be:86:c2:2f:39: 92:80:a6:94:c1:1c:a8:93:80:9b:0a:10:0d:83:77:76:08:3c: 0a:12:a5:46:00:81:5c:09:be:08:68:8d:f4:59:21:0f:6a:da: 8f:70:bd:8c:a3:ea:03:2b:51:b8:b5:42:2b:1c:e8:8c:bc:1f: 44:95:ac:39 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZt4ow97lhQ03Wgik9SffRE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2VhZDI5ODg5ZGJmNjJmMzk4ZjY0YmM2MTQ5MTY2NzMwNTZkNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7T45NqgmLF+QAVLGA6EQkjVWX+5 ZSROAnzntxgLFzB1+UAiJOmz8rU+yvayQezquRDtqv40P3HrxJDhvVfhq+//GOws 3ePaXEwT+Myg6NBp8Du3DxDDYuXbzMpISeE7PWWftjVx1LlVmevSATe4RpZNut6X OVMIAWwUeJu62FHUypm6rkuLJPC1JqdiACPcsTwoCJ1dhWV+9QGclZk6KLXVHahg RjtpR35mPZITUDpv3lPeWCeMkeWgZ0GR5flT+EP0C33u8xtogx6HdR/uXdfaxhF5 i9rQIz5fFUmjQEG+iBjYd0M6J9ZABMHWSXr739MuP/mMWzp9nxOeaziXCwIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFAfq0piJ2/YvOY9kvGFJFmcwVtReMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzZhYmNk MS1lZWVlLTQ2ZDUtOWY2Yy1kZjY4NzFlMmY3MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNmFiY2Qx LWVlZWUtNDZkNS05ZjZjLWRmNjg3MWUyZjczNS8xL0ItclNtSW5iOWk4NWoyUzhZ VWtXWnpCVzFGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQDTVcoAwQCW8poAwQDsHpYAwQCuQtQAwQCuf8w AwQAwagzAwQAwag3AwQCwcJwAwQAwwV+AwQCwxIcMA0EAgACMAcDBQMqDFlAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCufDANBgkqhkiG9w0BAQsFAAOCAQEASGWI Q07IHtPj/03ziX0Fesky4BMXQy6BfnjMRaMr0Ta6pYeohpe8c/V4IX7K1D2kcLeF ICsreSLxKHZ7HrI3DHrEIbdY4CcqXLX81nMlB95txiEc/tsa2nrX/w3YuwBBIzeC 09U2EDnbE8BGaxFApo2RVhQIOj5NFyos3wK6gDiEo63t/4AAROQpqI1zPBOggf5E 0yiIKA52GA1+dmsarmJqStCb6lQPOIB5PXtAXElj+47ezDQdEYxNvnq1185G/76G wi85koCmlMEcqJOAmwoQDYN3dgg8ChKlRgCBXAm+CGiN9FkhD2raj3C9jKPqAytR uLVCKxzojLwfRJWsOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:16 2026 by rpki-client