This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer File: RBBkfZUukSEiD0FOiKXd1ivII3s.cer (raw, json) Hash identifier: yzkVVEOg0YpHicreKcL71ctVUSp1W2Pu8qPGVSDHZyw= Subject key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37B6603C1CC651EA657042D751F255 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215735 IP: 193.39.68.0/24 IP: 2a14:6d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b6:60:3c:1c:c6:51:ea:65:70:42:d7:51:f2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4410647d952e9121220f414e88a5ddd62bc8237b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:12:dc:82:01:3b:6a:f7:dc:c5:9f:6b:e1: f2:de:d8:90:9e:a8:85:5b:0a:15:7a:d2:cf:00:6e: 4f:03:f0:e5:ed:38:03:8b:87:85:91:06:7b:ef:a1: 14:6a:88:67:6e:a1:34:16:74:63:02:bb:e6:2f:68: 7a:0b:c5:d9:7b:df:b3:8a:48:6d:60:31:98:e3:c9: 53:94:fd:4c:1e:f4:11:2e:c6:dd:3a:86:8a:5b:e5: 22:7a:21:79:4d:af:1d:86:c2:63:36:88:6c:61:7d: 7a:9b:8b:9d:a0:8e:86:62:b1:92:88:ea:e7:54:60: e7:2e:dc:52:52:18:f4:92:1f:1d:2f:db:db:fb:a0: 0d:bc:b7:b7:4b:fd:01:a6:79:ff:4e:57:64:13:01: 66:d6:b3:34:e1:bd:bb:39:a2:b0:23:62:aa:23:62: b3:ac:aa:5e:38:64:63:db:86:62:29:fb:b8:93:4f: 9c:77:a1:25:fc:e1:b1:8b:b2:08:6d:a6:d1:90:03: 1d:67:23:63:4f:06:65:05:1c:fb:be:a6:1a:f5:56: 01:ad:52:c8:cc:42:72:e1:90:1f:63:b5:7f:9f:77: 68:ba:bf:93:0c:b3:e8:c6:76:58:43:70:74:e7:8e: 58:00:16:e4:ee:b8:f8:83:91:44:24:f2:05:6b:d0: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.68.0/24 IPv6: 2a14:6d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215735 Signature Algorithm: sha256WithRSAEncryption 62:47:ae:a1:9f:07:9a:f4:89:66:c0:3b:f2:c6:e0:6f:59:72: 9c:ee:92:d4:d1:7f:4c:e1:1f:52:0d:11:a7:b1:25:da:ce:b7: 30:30:48:91:eb:0c:0b:5a:95:49:7c:f7:11:25:e7:7e:a2:4c: 1f:bd:bc:3d:cf:5d:5f:a6:05:07:aa:1c:65:4f:4c:fe:9c:1f: fe:4a:e6:d4:16:28:29:b5:9e:33:7c:69:0b:60:e5:5b:f5:e7: 7d:85:c4:e9:2b:fd:63:39:41:48:73:f8:00:a2:e1:91:25:90: e5:6c:fd:93:78:25:a7:40:4c:4a:cd:1d:b0:bb:48:f7:00:de: 03:1d:ba:fe:19:de:19:21:83:6d:ef:fb:be:cc:04:de:9a:71: 34:79:d7:6f:dd:7d:de:88:9f:60:04:43:49:63:4c:97:10:9d: b6:7d:11:83:34:27:08:db:9f:54:ac:1b:cd:3d:de:bd:94:68: 38:d9:d3:71:b1:b7:03:98:df:51:b0:f9:a6:67:70:de:b3:b5: b2:74:a5:2a:46:27:58:71:ff:9d:82:0e:b7:de:ed:32:a7:b0: b8:b9:5b:6b:b5:cf:37:00:4f:c8:f9:0c:78:8d:28:35:d7:c2: b6:33:cc:a3:69:bb:3b:9e:77:4d:08:6b:c2:a6:79:be:48:05: 39:a7:bb:38 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N7ZgPBzGUeplcELXUfJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDEwNjQ3ZDk1MmU5MTIxMjIwZjQxNGU4OGE1ZGRkNjJiYzgyMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiUS3IIBO2r33MWfa+Hy3tiQnqiF WwoVetLPAG5PA/Dl7TgDi4eFkQZ776EUaohnbqE0FnRjArvmL2h6C8XZe9+zikht YDGY48lTlP1MHvQRLsbdOoaKW+UieiF5Ta8dhsJjNohsYX16m4udoI6GYrGSiOrn VGDnLtxSUhj0kh8dL9vb+6ANvLe3S/0Bpnn/TldkEwFm1rM04b27OaKwI2KqI2Kz rKpeOGRj24ZiKfu4k0+cd6El/OGxi7IIbabRkAMdZyNjTwZlBRz7vqYa9VYBrVLI zEJy4ZAfY7V/n3dour+TDLPoxnZYQ3B0545YABbk7rj4g5FEJPIFa9B84QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEQQZH2VLpEhIg9BToil3dYryCN7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzE3Yjg4 ZC0xYWZjLTQ0MDctYjAxOC01NDVkY2E4MGJmNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMTdiODhk LTFhZmMtNDQwNy1iMDE4LTU0NWRjYTgwYmY0OS8xL1JCQmtmWlV1a1NFaUQwRk9p S1hkMWl2SUkzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSdEMA0EAgACMAcDBQMqFG2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKtzANBgkqhkiG9w0BAQsFAAOCAQEAYkeuoZ8HmvSJ ZsA78sbgb1lynO6S1NF/TOEfUg0Rp7El2s63MDBIkesMC1qVSXz3ESXnfqJMH728 Pc9dX6YFB6ocZU9M/pwf/krm1BYoKbWeM3xpC2DlW/XnfYXE6Sv9YzlBSHP4AKLh kSWQ5Wz9k3glp0BMSs0dsLtI9wDeAx26/hneGSGDbe/7vswE3ppxNHnXb9193oif YARDSWNMlxCdtn0RgzQnCNufVKwbzT3evZRoONnTcbG3A5jfUbD5pmdw3rO1snSl KkYnWHH/nYIOt97tMqewuLlba7XPNwBPyPkMeI0oNdfCtjPMo2m7O553TQhrwqZ5 vkgFOae7OA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:39 2026 by rpki-client