This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer File: BrjtmF7yA06OMHxEfzSWwyra0sg.cer (raw, json) Hash identifier: ZxpwhujyZ+w9IMmeb6WHJpyarQYbhc/owHnUk/0XQxM= Subject key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BBF516549706BCECE3ECE0478C32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.99.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bb:f5:16:54:97:06:bc:ec:e3:ec:e0:47:8c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:cb:2a:a7:a9:5e:b7:e4:62:e6:6a:e6:23: 72:71:e0:af:de:cd:a8:7f:34:71:bb:cb:9d:0f:0f: 6e:ae:08:f1:57:48:92:c6:0e:80:fd:a4:4e:3b:b8: 07:7e:f0:66:4b:01:1a:7f:8f:20:47:fb:75:ad:5c: 07:0e:90:4c:1b:18:76:a3:42:0e:08:55:6a:b6:d2: a9:80:b5:4e:67:65:5f:1d:a8:9a:4f:ed:92:78:ea: ae:e9:a5:c7:24:c9:5b:22:f6:60:8e:4b:c5:97:31: f1:05:7e:e2:3a:ef:df:64:23:b0:63:ab:0d:b2:e0: 2e:9e:47:d4:59:20:69:86:09:c7:50:ad:59:92:72: 55:91:c0:1b:e2:9b:7a:6d:6e:6e:41:fb:0f:3f:2b: fb:de:1c:63:95:9d:dd:64:85:e2:68:97:c5:08:7f: df:04:8d:a0:9d:57:bc:c5:47:12:a0:8b:78:08:1b: 2c:2c:b8:8c:fa:fe:d9:dc:bd:cb:0a:95:06:c5:63: 06:30:02:3b:3f:19:2a:aa:3e:f4:60:81:05:57:2f: c7:57:bd:29:5e:d0:a0:b9:0d:8d:37:38:b7:88:40: 43:9a:0a:f0:7e:11:72:3e:1b:83:bf:e1:cc:4b:ac: f2:ce:6b:0a:cd:72:66:9c:3f:79:b6:d6:b3:b0:63: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:82:b5:bd:91:9b:fa:6b:e8:28:ec:95:00:90:3c:01:29:a0: 72:9b:c7:c4:37:9d:36:4b:3b:54:9a:95:14:9f:67:a3:9a:ff: 2f:05:9c:d1:51:ca:cf:75:8a:fb:f5:fb:a0:7f:22:10:88:f4: eb:b3:cc:ed:c0:3e:90:a8:65:86:94:77:40:5a:3d:50:46:0a: d7:61:f1:b7:84:93:fa:7c:3b:25:e6:26:4e:fd:c1:44:61:d2: 5a:0f:49:8d:33:b7:e7:e1:81:06:7d:54:5c:f3:6a:a6:75:9c: 26:89:cb:99:e8:d2:06:20:c6:31:dd:01:d4:11:8f:a1:dd:38: 8d:31:09:59:3e:35:b5:2c:f6:0a:ff:34:d9:7a:24:b8:91:7c: 5e:29:91:78:20:43:7f:b2:81:cb:57:60:1a:d6:ea:3f:3b:86: 07:47:73:e0:76:4e:f0:84:1c:3d:fc:e7:21:a2:68:4a:21:16: 49:07:b9:b4:3b:09:e7:5f:ee:dd:58:e8:fa:eb:1e:e5:3c:e8: 7b:eb:ee:2b:3f:5a:60:19:ef:4e:78:af:e2:13:99:4a:72:96: 6a:82:1e:66:73:c7:a3:c7:eb:08:f4:c3:a6:09:63:64:17:e8: b6:30:0c:96:f9:ed:25:c3:d7:f2:48:22:be:29:0f:53:e0:79: d4:36:bb:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/Fbv1FlSXBrzs4+zgR4wyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmI4ZWQ5ODVlZjIwMzRlOGUzMDdjNDQ3ZjM0OTZjMzJhZGFkMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5jLKqepXrfkYuZq5iNyceCv3s2o fzRxu8udDw9urgjxV0iSxg6A/aROO7gHfvBmSwEaf48gR/t1rVwHDpBMGxh2o0IO CFVqttKpgLVOZ2VfHaiaT+2SeOqu6aXHJMlbIvZgjkvFlzHxBX7iOu/fZCOwY6sN suAunkfUWSBphgnHUK1ZknJVkcAb4pt6bW5uQfsPPyv73hxjlZ3dZIXiaJfFCH/f BI2gnVe8xUcSoIt4CBssLLiM+v7Z3L3LCpUGxWMGMAI7Pxkqqj70YIEFVy/HV70p XtCguQ2NNzi3iEBDmgrwfhFyPhuDv+HMS6zyzmsKzXJmnD95ttazsGMtxwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAa47Zhe8gNOjjB8RH80lsMq2tLIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2ZjNWFm NS0wYjUwLTQ1MzEtOTM3NC1lYmViOWE5OTE0ODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZmM1YWY1 LTBiNTAtNDUzMS05Mzc0LWViZWI5YTk5MTQ4OC8xL0JyanRtRjd5QTA2T01IeEVm elNXd3lyYTBzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuWOUMA0GCSqGSIb3DQEBCwUAA4IBAQBsgrW9 kZv6a+go7JUAkDwBKaBym8fEN502SztUmpUUn2ejmv8vBZzRUcrPdYr79fugfyIQ iPTrs8ztwD6QqGWGlHdAWj1QRgrXYfG3hJP6fDsl5iZO/cFEYdJaD0mNM7fn4YEG fVRc82qmdZwmicuZ6NIGIMYx3QHUEY+h3TiNMQlZPjW1LPYK/zTZeiS4kXxeKZF4 IEN/soHLV2Aa1uo/O4YHR3Pgdk7whBw9/OchomhKIRZJB7m0OwnnX+7dWOj66x7l POh76+4rP1pgGe9OeK/iE5lKcpZqgh5mc8ejx+sI9MOmCWNkF+i2MAyW+e0lw9fy SCK+KQ9T4HnUNrt/ -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:38 2026 by rpki-client