This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer File: B1lFaGGImKn7cgrgm-0O0b5PhX4.cer (raw, json) Hash identifier: duikuXZR3v3+K/w+hnADG3r1kDfpR7XUfBC0mYlDh2I= Subject key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363AF59BD4A2D0BED2BA9361F4DC2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.254.107.0/24 IP: 84.246.80.0/24 IP: 176.111.33.0/24 IP: 195.14.122.0/24 IP: 2a11:b100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3a:f5:9b:d4:a2:d0:be:d2:ba:93:61:f4:dc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07594568618898a9fb720ae09bed0ed1be4f857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:13:19:87:81:04:47:7b:14:b3:8d:5a:69: 4b:9d:45:17:9b:54:01:9e:d8:0a:cb:33:9a:a8:da: 7d:5a:bb:2d:ee:71:fc:de:59:f3:ab:8c:9b:76:e0: c3:d1:7e:1e:94:ad:1a:06:fc:04:4f:7c:73:94:29: 29:84:18:c5:49:59:97:00:f8:21:27:19:80:ac:c5: c2:cf:05:fb:98:a8:c7:aa:29:69:0b:47:d6:60:b1: 5a:3d:13:b8:e7:db:e8:d9:2f:2b:d4:80:4d:8b:1d: 56:d0:9e:4b:58:e0:82:99:3a:a5:82:5b:b0:da:73: 42:20:34:ab:4d:6c:15:5c:24:49:71:84:e3:7a:88: 7a:b6:6a:14:65:df:fb:73:e7:ae:74:86:7c:b3:8d: c5:d9:9e:f7:40:5f:17:55:be:6b:2b:ff:59:f2:c2: de:5b:51:a7:7e:09:05:ca:62:d4:bd:0d:0c:ad:c3: d1:45:c8:3d:ee:df:f6:9b:d6:3a:6e:ad:a6:a6:31: 3f:62:a6:8d:db:df:0b:9d:dc:7a:57:14:9b:17:31: df:f8:79:ed:44:1e:fe:ce:68:1c:39:5d:bc:2a:3d: 96:c6:c5:80:97:e8:80:22:96:d1:d8:ab:cf:a4:39: 21:36:8c:be:66:79:1e:83:97:24:4a:3c:fd:2c:3a: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.107.0/24 84.246.80.0/24 176.111.33.0/24 195.14.122.0/24 IPv6: 2a11:b100::/32 Signature Algorithm: sha256WithRSAEncryption 8a:3d:9a:2f:c6:e8:1d:d2:f8:e5:72:6d:f7:19:e3:c4:66:05: 8e:eb:44:57:28:57:d0:03:e6:4e:05:bc:92:11:98:0c:6d:5c: da:f7:42:70:81:eb:07:39:44:f1:b2:ce:c2:e9:47:af:4c:37: f8:e8:4a:1e:a3:2c:1c:5d:ff:f7:77:7b:b4:b5:39:5d:20:8b: 27:ba:b9:0f:f6:e7:76:11:f4:a6:bb:02:61:9d:5e:e5:04:91: f8:8c:3b:95:d4:aa:65:ae:eb:2a:ed:08:ef:69:b3:7b:ff:d4: 1b:63:8e:e0:d4:2c:cf:08:dd:9a:fb:99:fe:00:4f:6d:fb:93: e0:de:d9:e0:6d:90:fc:12:93:f4:f4:99:9b:d7:2a:d8:b6:a5: 79:4e:9e:21:14:da:72:19:f1:25:af:e3:14:0c:a0:b3:eb:5b: b4:0b:06:07:34:84:5f:01:30:dd:26:8c:5f:5d:57:28:d8:43: 3c:7e:fd:ad:2b:e3:a9:fe:f4:09:37:d7:cf:6e:41:23:f3:a9: ed:83:cf:e1:a3:88:a7:b7:fd:2a:d6:46:d0:ab:76:01:4f:fa: fb:6f:82:1e:4b:87:6d:37:f8:1d:c5:43:44:e6:ec:f8:0c:2c: e9:2a:3f:ed:da:e0:c9:39:e0:aa:5d:e2:f2:b4:56:02:a9:f5: e8:2f:16:44 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7Njr1m9Si0L7SupNh9NwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU5NDU2ODYxODg5OGE5ZmI3MjBhZTA5YmVkMGVkMWJlNGY4NTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBATGYeBBEd7FLONWmlLnUUXm1QB ntgKyzOaqNp9Wrst7nH83lnzq4ybduDD0X4elK0aBvwET3xzlCkphBjFSVmXAPgh JxmArMXCzwX7mKjHqilpC0fWYLFaPRO459vo2S8r1IBNix1W0J5LWOCCmTqlgluw 2nNCIDSrTWwVXCRJcYTjeoh6tmoUZd/7c+eudIZ8s43F2Z73QF8XVb5rK/9Z8sLe W1GnfgkFymLUvQ0MrcPRRcg97t/2m9Y6bq2mpjE/YqaN298Lndx6VxSbFzHf+Hnt RB7+zmgcOV28Kj2WxsWAl+iAIpbR2KvPpDkhNoy+Znkeg5ckSjz9LDoqVwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAdZRWhhiJip+3IK4JvtDtG+T4V+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzlmYWRh MS02MGY5LTRlZjctODFkOC0xZWNjYmU2N2M2NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvOWZhZGEx LTYwZjktNGVmNy04MWQ4LTFlY2NiZTY3YzY2MS8xL0IxbEZhR0dJbUtuN2Nncmdt LTBPMGI1UGhYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQALv5rAwQAVPZQAwQAsG8hAwQAww56MA0EAgAC MAcDBQAqEbEAMA0GCSqGSIb3DQEBCwUAA4IBAQCKPZovxugd0vjlcm33GePEZgWO 60RXKFfQA+ZOBbySEZgMbVza90JwgesHOUTxss7C6UevTDf46EoeoywcXf/3d3u0 tTldIIsnurkP9ud2EfSmuwJhnV7lBJH4jDuV1Kplrusq7QjvabN7/9QbY47g1CzP CN2a+5n+AE9t+5Pg3tngbZD8EpP09Jmb1yrYtqV5Tp4hFNpyGfElr+MUDKCz61u0 CwYHNIRfATDdJoxfXVco2EM8fv2tK+Op/vQJN9fPbkEj86ntg8/ho4int/0q1kbQ q3YBT/r7b4IeS4dtN/gdxUNE5uz4DCzpKj/t2uDJOeCqXeLytFYCqfXoLxZE -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:56 2026 by rpki-client