This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer File: b7u17BJ6BjLSJq8H-snE0oS9G6w.cer (raw, json) Hash identifier: njMH90ss1j+qer4iXXtvViHoigfQUTudMuITor2h9VE= Subject key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA4DD35313983EC8FBB2641F7B39DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204281 IP: 94.26.4.0 -- 94.26.23.255 IP: 94.26.26.0/24 IP: 94.26.30.0/24 IP: 94.26.45.0/24 IP: 94.26.66.0/24 IP: 94.26.72.0/24 IP: 94.26.74.0/23 IP: 94.26.86.0/23 IP: 94.26.94.0/24 IP: 94.26.96.0/24 IP: 94.26.100.0/24 IP: 94.26.102.0/24 IP: 94.26.108.0/24 IP: 185.108.140.0/22 IP: 2a01:b760::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4d:d3:53:13:98:3e:c8:fb:b2:64:1f:7b:39:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:07:0e:e5:15:e1:e0:0f:2a:fa:4f:f9:b0: 22:ef:49:e7:de:7d:6b:7e:1c:a8:9b:25:8e:8d:2c: 2e:3f:8b:23:64:6e:f2:c9:76:bb:c0:9b:bd:50:75: 20:a7:68:f2:c6:51:d9:f6:4f:7e:3a:c8:51:73:bf: e6:1a:56:85:c8:e0:fe:53:77:1a:37:8c:1a:81:a6: c5:46:e2:0b:c3:46:70:1a:b5:8a:9c:71:8e:22:78: c9:bb:95:a9:7d:53:e3:6f:37:53:27:ce:0d:2c:7c: 37:e9:1a:94:52:fc:0d:59:aa:c5:8e:b4:98:7a:23: ce:63:53:fd:3d:1b:fb:ac:cc:61:42:55:06:a6:c2: 8b:f9:a0:3d:86:81:c9:ef:3e:62:2f:f2:4a:e2:68: c9:0a:ce:4f:3a:ed:65:ae:7d:75:56:1e:1e:22:f3: a0:b1:ab:9a:91:83:ad:1b:a9:c4:40:2f:94:df:5c: 7a:3e:83:de:aa:20:f6:3c:24:95:bf:2c:e2:5a:23: 6d:c3:d1:15:f8:62:d8:69:bd:8c:a9:67:14:3b:09: ff:39:87:04:6b:af:07:24:05:46:62:3e:95:ed:a5: ac:a4:d2:61:c0:ca:d4:35:1c:73:7b:8c:36:92:b2: da:94:60:9a:83:a0:79:3f:aa:e0:e8:45:73:4e:34: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.4.0-94.26.23.255 94.26.26.0/24 94.26.30.0/24 94.26.45.0/24 94.26.66.0/24 94.26.72.0/24 94.26.74.0/23 94.26.86.0/23 94.26.94.0/24 94.26.96.0/24 94.26.100.0/24 94.26.102.0/24 94.26.108.0/24 185.108.140.0/22 IPv6: 2a01:b760::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204281 Signature Algorithm: sha256WithRSAEncryption a3:5a:56:e9:e4:90:c4:78:ee:54:30:f7:5d:03:0b:3a:77:30: 08:2b:62:21:bb:77:73:af:5a:3d:3a:9d:95:85:7c:e1:fe:cf: 1c:76:67:e0:12:bb:27:25:4e:c2:7a:ce:03:a9:df:b3:c2:bf: 5a:4d:3e:a6:0d:b7:ff:6f:b3:f2:e7:ca:40:1a:e5:3c:e6:3d: f5:11:8a:ce:ce:1a:4c:24:14:57:86:08:9b:8c:69:82:3e:1a: 16:f5:3f:17:ac:de:37:40:b9:58:c1:5d:83:7f:2f:a3:7c:76: b3:41:d3:dc:de:1f:8d:4c:ef:2c:3d:b8:ba:0a:9c:3a:0e:f8: 0d:70:2b:53:3c:dc:af:5d:ed:bb:5d:39:1b:0d:45:38:36:5e: 70:1c:59:fb:25:b4:8a:73:cb:33:13:b0:15:1e:ae:55:9f:d7: ec:e6:af:38:39:b5:2e:4e:6d:4b:07:cc:8e:2b:89:0a:32:9f: 29:47:9f:40:04:ac:be:f6:9d:4d:b1:46:c4:a1:40:da:fd:d5: 24:df:13:15:81:dc:b1:c9:18:76:43:90:70:3c:3a:01:d4:19: 34:c1:26:99:35:1d:c5:6c:37:74:36:fb:aa:f0:0f:a6:4a:b2: ba:58:e0:55:92:06:8b:63:7d:ff:e7:cf:fc:c1:3a:6f:86:7c: 44:32:0e:95 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISAZt9yk3TUxOYPsj7smQfeznaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmJiYjVlYzEyN2EwNjMyZDIyNmFmMDdmYWM5YzRkMjg0YmQxYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqUHDuUV4eAPKvpP+bAi70nn3n1r fhyomyWOjSwuP4sjZG7yyXa7wJu9UHUgp2jyxlHZ9k9+OshRc7/mGlaFyOD+U3ca N4wagabFRuILw0ZwGrWKnHGOInjJu5WpfVPjbzdTJ84NLHw36RqUUvwNWarFjrSY eiPOY1P9PRv7rMxhQlUGpsKL+aA9hoHJ7z5iL/JK4mjJCs5POu1lrn11Vh4eIvOg sauakYOtG6nEQC+U31x6PoPeqiD2PCSVvyziWiNtw9EV+GLYab2MqWcUOwn/OYcE a68HJAVGYj6V7aWspNJhwMrUNRxze4w2krLalGCag6B5P6rg6EVzTjT1HwIDAQAB o4IDBjCCAwIwHQYDVR0OBBYEFG+7tewSegYy0iavB/rJxNKEvRusMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzM2NGUy Ny01N2YwLTQ2YTctOTM5YS02NTQ5MDgzODRkZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzY0ZTI3 LTU3ZjAtNDZhNy05MzlhLTY1NDkwODM4NGRkOC8xL2I3dTE3Qko2QmpMU0pxOEgt c25FMG9TOUc2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGEBggrBgEF BQcBBwEB/wR1MHMwYgQCAAEwXDAMAwQCXhoEAwQDXhoQAwQAXhoaAwQAXhoeAwQA XhotAwQAXhpCAwQAXhpIAwQBXhpKAwQBXhpWAwQAXhpeAwQAXhpgAwQAXhpkAwQA XhpmAwQAXhpsAwQCuWyMMA0EAgACMAcDBQAqAbdgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMd+TANBgkqhkiG9w0BAQsFAAOCAQEAo1pW6eSQxHjuVDD3XQMLOncw CCtiIbt3c69aPTqdlYV84f7PHHZn4BK7JyVOwnrOA6nfs8K/Wk0+pg23/2+z8ufK QBrlPOY99RGKzs4aTCQUV4YIm4xpgj4aFvU/F6zeN0C5WMFdg38vo3x2s0HT3N4f jUzvLD24ugqcOg74DXArUzzcr13tu105Gw1FODZecBxZ+yW0inPLMxOwFR6uVZ/X 7OavODm1Lk5tSwfMjiuJCjKfKUefQASsvvadTbFGxKFA2v3VJN8TFYHcsckYdkOQ cDw6AdQZNMEmmTUdxWw3dDb7qvAPpkqyuljgVZIGi2N9/+fP/ME6b4Z8RDIOlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:12 2026 by rpki-client