This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer File: bBt3vE7dikuDdEdqc0dxm2drdV4.cer (raw, json) Hash identifier: bam8ZmUaptz3fQIFfMsw5W2dgJPO4b0pkYfd8q9HjRA= Subject key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3834B803BFFA5301F0578D7A80CCEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196645 IP: 77.83.100.0/22 IP: 88.218.28.0/22 IP: 91.223.223.0/24 IP: 91.239.232.0/22 IP: 185.67.0.0/22 IP: 185.156.40.0/22 IP: 193.169.188.0/23 IP: 194.28.84.0/22 IP: 194.33.180.0/24 IP: 195.191.24.0/23 IP: 2a05:b00::/29 IP: 2a09:7e80::/29 IP: 2a09:9780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:34:b8:03:bf:fa:53:01:f0:57:8d:7a:80:cc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:fa:9c:85:54:d8:11:91:36:c3:20:fe:ed: fb:47:13:b6:8d:50:e2:ca:29:e5:f4:97:90:b6:ca: ee:a8:14:77:13:6a:f0:59:23:c0:e9:f2:b8:a0:2f: b9:0e:2b:f0:c6:3a:df:77:6c:6e:4b:cd:91:52:56: 06:dd:1c:e0:21:79:0a:85:49:ec:43:53:2b:66:b4: 24:73:d4:f2:d2:59:39:8c:f4:27:15:c5:ee:dc:6c: 2b:d0:37:97:b6:c2:4a:88:5c:1b:b9:e3:e9:2f:2c: a0:8e:e5:e2:69:c9:4a:57:5e:42:90:bd:29:8b:03: 02:83:7b:bc:e5:41:a8:86:a6:e8:bc:4c:3b:78:dc: fa:dc:9f:5e:06:9e:c6:57:43:6f:81:22:19:83:1d: 9e:24:5b:95:16:19:50:8b:21:3c:4e:71:44:d7:2d: 37:86:2f:cd:73:59:45:05:d2:17:22:b9:87:4f:dc: be:a7:75:48:6b:10:99:72:51:47:87:ba:4e:74:26: a1:6b:05:6b:df:51:92:81:50:cc:3e:07:3c:f7:d8: d5:f6:fe:9e:f8:71:b4:d2:0a:f4:fc:d8:eb:03:7c: 2a:6f:6e:5d:7a:b2:3e:be:dc:2a:ab:36:ca:cc:73: e8:c4:a5:76:6d:59:b9:5a:5f:f9:80:0f:2d:8c:7e: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.100.0/22 88.218.28.0/22 91.223.223.0/24 91.239.232.0/22 185.67.0.0/22 185.156.40.0/22 193.169.188.0/23 194.28.84.0/22 194.33.180.0/24 195.191.24.0/23 IPv6: 2a05:b00::/29 2a09:7e80::/29 2a09:9780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196645 Signature Algorithm: sha256WithRSAEncryption 38:35:5b:de:3d:9c:af:b9:52:52:18:66:17:65:f6:da:2d:9c: 65:05:c3:d5:d2:ed:49:93:8e:dc:ca:7f:92:86:13:54:f2:a3: af:d2:fb:94:2d:2f:af:8f:b1:ca:c8:e5:4d:a6:b5:18:5c:3f: d1:78:09:d6:98:22:f8:7a:10:f2:86:91:fb:0c:db:97:28:b4: 5e:3c:b9:7f:1e:c3:de:92:8c:39:ee:5d:c7:c6:ff:89:5b:f8: 55:29:77:a2:86:89:13:e8:72:99:1d:07:6b:92:8b:86:f6:63: 1e:5f:00:f5:09:09:e7:24:68:cc:d8:d6:da:0d:b6:c3:55:37: c6:bb:42:bc:36:a5:77:6f:2f:90:c5:4b:90:5d:57:18:d8:1e: d7:ce:37:59:82:f5:d3:a8:42:1c:73:1d:f9:cf:25:9a:50:b0: 78:15:34:ca:85:84:16:f2:36:b5:43:40:86:fc:f7:22:98:42: fe:99:d9:5a:b6:ab:a6:8d:7a:98:69:5e:9d:3d:62:ac:72:19: 18:ba:8e:d8:0b:aa:33:b2:40:59:ff:4e:99:81:40:f9:0d:b7: db:c1:63:e5:6f:f9:0c:1b:3e:81:f2:2e:0b:7e:00:7b:7a:db: 31:f9:a6:e8:ac:c8:5b:a0:82:44:5d:3c:08:ba:a8:72:f9:06: 84:57:e6:9d -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt+ODS4A7/6UwHwV416gMzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzFiNzdiYzRlZGQ4YTRiODM3NDQ3NmE3MzQ3NzE5YjY3NmI3NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyob6nIVU2BGRNsMg/u37RxO2jVDi yinl9JeQtsruqBR3E2rwWSPA6fK4oC+5Divwxjrfd2xuS82RUlYG3RzgIXkKhUns Q1MrZrQkc9Ty0lk5jPQnFcXu3Gwr0DeXtsJKiFwbuePpLyygjuXiaclKV15CkL0p iwMCg3u85UGohqbovEw7eNz63J9eBp7GV0NvgSIZgx2eJFuVFhlQiyE8TnFE1y03 hi/Nc1lFBdIXIrmHT9y+p3VIaxCZclFHh7pOdCahawVr31GSgVDMPgc899jV9v6e +HG00gr0/NjrA3wqb25derI+vtwqqzbKzHPoxKV2bVm5Wl/5gA8tjH7rWQIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFGwbd7xO3YpLg3RHanNHcZtna3VeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzM2N2Qz OS04YmU0LTRlY2ItOWJiNi1mZmQ5MWI0MjVhMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMzY3ZDM5 LThiZTQtNGVjYi05YmI2LWZmZDkxYjQyNWEwMC8xL2JCdDN2RTdkaWt1RGRFZHFj MGR4bTJkcmRWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF BwEHAQH/BGMwYTBCBAIAATA8AwQCTVNkAwQCWNocAwQAW9/fAwQCW+/oAwQCuUMA AwQCuZwoAwQBwam8AwQCwhxUAwQAwiG0AwQBw78YMBsEAgACMBUDBQMqBQsAAwUD Kgl+gAMFAyoJl4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwAlMA0GCSqGSIb3 DQEBCwUAA4IBAQA4NVvePZyvuVJSGGYXZfbaLZxlBcPV0u1Jk47cyn+ShhNU8qOv 0vuULS+vj7HKyOVNprUYXD/ReAnWmCL4ehDyhpH7DNuXKLRePLl/HsPekow57l3H xv+JW/hVKXeihokT6HKZHQdrkouG9mMeXwD1CQnnJGjM2NbaDbbDVTfGu0K8NqV3 by+QxUuQXVcY2B7XzjdZgvXTqEIccx35zyWaULB4FTTKhYQW8ja1Q0CG/PcimEL+ mdlatqumjXqYaV6dPWKschkYuo7YC6ozskBZ/06ZgUD5DbfbwWPlb/kMGz6B8i4L fgB7etsx+aborMhboIJEXTwIuqhy+QaEV+ad -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:16 2026 by rpki-client