This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer File: G57Ppx7--bsb_nsuQCFc2lsjHl0.cer (raw, json) Hash identifier: ziUZxu02IfYdKqwFLZdrjid1r94q9kaqJvKCuNJT4C8= Subject key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDBB53075240D1EF7C8CFFF708C9610EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 14:00:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205888 IP: 95.214.96.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:b5:30:75:24:0d:1e:f7:c8:cf:ff:70:8c:96:10:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 14:00:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:29:59:bf:19:cf:4d:4d:61:9b:ad:28:45: ec:d7:ff:d1:20:69:41:c1:22:3d:c1:92:85:2c:a2: be:6e:e0:75:75:02:cd:76:cd:44:9a:41:26:00:74: 90:3f:1a:64:32:90:97:82:28:08:f2:7a:2e:5e:2a: be:01:7b:2e:9d:e3:63:42:db:25:a1:35:ba:59:88: dd:4e:59:06:3f:d5:5e:94:a6:13:d1:37:df:34:24: 44:44:f7:68:ec:51:01:a2:3e:5b:ac:49:4b:95:6d: 32:e6:6d:df:f1:07:59:a6:cb:14:80:04:7e:8c:7a: 68:f7:de:e8:07:ac:9c:f2:db:eb:9c:02:c2:8c:f4: 69:f3:aa:3a:67:3e:af:38:b0:e2:76:3e:fa:ac:54: 11:cf:57:f7:ba:10:50:cc:9c:7b:80:4f:dd:27:a1: 37:61:93:5f:a9:c5:cc:cf:07:64:c2:52:4f:b5:fb: 9a:5c:ad:40:ba:7d:91:37:8a:ab:9d:23:6b:ed:1d: 86:4c:67:90:34:b5:3f:ea:f2:aa:ee:80:be:8d:8d: 65:f6:74:15:ed:f7:e2:05:f6:5e:8c:1b:8d:bd:61: fa:a9:71:e8:d4:13:d4:dc:fd:36:3b:1c:d3:3e:02: 86:49:f0:f0:33:83:92:2c:8a:a5:94:65:d0:cf:95: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205888 Signature Algorithm: sha256WithRSAEncryption 73:af:e6:6a:fd:11:f8:1d:b9:52:16:d4:53:23:c2:30:0a:ac: 1a:09:a5:80:e5:5f:74:6a:fe:8e:58:c3:94:6b:a6:3c:0c:39: 39:e8:0a:8e:3e:6e:05:2a:de:33:2c:8d:e4:7b:aa:42:f0:ad: 1c:eb:44:15:9e:8b:fe:40:99:79:52:88:a5:4f:f0:2c:b3:da: 8f:f0:b1:ea:ba:49:e2:2b:85:4b:b8:17:c6:11:f2:9c:fa:8b: 5c:7a:d0:a0:83:9d:e0:e0:42:99:69:06:51:5e:2a:6d:fc:6e: 25:a3:b0:bf:30:9d:8f:b4:8e:fc:67:82:cd:71:71:d6:6a:3f: 53:7a:a2:e3:5f:0b:43:6f:ea:38:7d:56:e2:1e:32:81:57:c7: 50:22:b0:c7:44:1b:c8:c3:14:65:6b:ca:63:29:3d:3a:9b:b7: 49:50:a8:10:19:f7:c8:4c:5a:56:12:f3:67:cf:be:23:07:04: 8b:f3:ad:10:f7:6f:e3:b8:08:ac:c0:b2:af:f3:54:51:9f:82: ee:ed:46:b1:6b:7e:23:d4:36:58:c5:9f:65:99:d8:22:ac:52: 39:c0:3c:7e:d5:51:c5:4f:fb:91:e9:33:9d:d0:3a:91:fd:f0: 6d:9d:c9:1c:ee:2d:92:b0:2e:a0:e3:26:af:15:d1:33:5c:8c: 36:cf:c1:b1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZvbtTB1JA0e98jP/3CMlhDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTQwMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjllY2ZhNzFlZmVmOWJiMWJmZTdiMmU0MDIxNWNkYTViMjMxZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyScpWb8Zz01NYZutKEXs1//RIGlB wSI9wZKFLKK+buB1dQLNds1EmkEmAHSQPxpkMpCXgigI8nouXiq+AXsuneNjQtsl oTW6WYjdTlkGP9VelKYT0TffNCRERPdo7FEBoj5brElLlW0y5m3f8QdZpssUgAR+ jHpo997oB6yc8tvrnALCjPRp86o6Zz6vOLDidj76rFQRz1f3uhBQzJx7gE/dJ6E3 YZNfqcXMzwdkwlJPtfuaXK1Aun2RN4qrnSNr7R2GTGeQNLU/6vKq7oC+jY1l9nQV 7ffiBfZejBuNvWH6qXHo1BPU3P02OxzTPgKGSfDwM4OSLIqllGXQz5XS7QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBuez6ce/vm7G/57LkAhXNpbIx5dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2VkMTYw OS0xMDg2LTQ3YjQtYTQ5ZC1mMTBkMjZlM2MzZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZWQxNjA5 LTEwODYtNDdiNC1hNDlkLWYxMGQyNmUzYzNkZi8xL0c1N1BweDctLWJzYl9uc3VR Q0ZjMmxzakhsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCX9ZgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMkQDANBgkqhkiG9w0BAQsFAAOCAQEAc6/mav0R+B25UhbUUyPCMAqsGgmlgOVf dGr+jljDlGumPAw5OegKjj5uBSreMyyN5HuqQvCtHOtEFZ6L/kCZeVKIpU/wLLPa j/Cx6rpJ4iuFS7gXxhHynPqLXHrQoIOd4OBCmWkGUV4qbfxuJaOwvzCdj7SO/GeC zXFx1mo/U3qi418LQ2/qOH1W4h4ygVfHUCKwx0QbyMMUZWvKYyk9Opu3SVCoEBn3 yExaVhLzZ8++IwcEi/OtEPdv47gIrMCyr/NUUZ+C7u1GsWt+I9Q2WMWfZZnYIqxS OcA8ftVRxU/7kekzndA6kf3wbZ3JHO4tkrAuoOMmrxXRM1yMNs/BsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:45:44 2026 by rpki-client