This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer (raw, json) Hash identifier: TtaQvIVlY2+XSCVOnqVfcYUgGnbuBs1o32AwPLiJdkU= Subject key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB898A748D7F369A2A57D98862FD68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29317 IP: 195.137.210.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:8a:74:8d:7f:36:9a:2a:57:d9:88:62:fd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:bf:c8:62:6d:0a:95:14:13:86:b0:9c:91: e0:66:b5:c6:14:fa:ea:45:a4:e8:fc:c3:5c:81:14: 40:93:02:78:16:af:52:a9:62:d3:36:0a:be:27:8e: b0:7c:16:c1:ca:c5:6e:9f:51:fb:b6:6e:2a:f5:9c: 92:19:df:d6:49:77:c9:f2:2a:29:b7:c4:90:55:8a: be:1f:62:47:bd:41:bb:16:a7:0b:f5:d3:3f:47:df: 01:38:1f:fa:94:86:37:d4:e9:19:47:30:69:df:2b: 4c:66:94:4d:64:33:ec:dc:a5:cf:4e:c5:8b:d7:ec: 14:e3:81:48:98:d1:6a:d8:bb:51:0b:d4:86:73:a7: 03:a5:09:a2:c3:38:14:c0:29:d1:2c:eb:6e:ca:f2: cd:ee:03:e9:32:46:0f:30:10:55:5c:9e:b4:4f:c6: b0:13:ff:74:42:45:3d:d3:ad:a4:fa:46:de:3f:5a: 93:21:5a:9a:4c:16:92:4d:4d:64:15:a8:71:94:20: 33:03:e9:4f:fb:93:35:d7:48:f3:06:f4:7b:f0:3c: a0:58:99:d0:74:fe:63:35:89:98:e5:a2:cf:0e:4b: 62:77:1e:b4:c9:cf:d0:24:bf:f5:1e:2e:81:be:95: 58:92:46:74:7e:0a:d9:76:f4:69:d7:8e:3a:27:ba: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.210.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29317 Signature Algorithm: sha256WithRSAEncryption 50:58:5b:de:e5:da:64:2f:f2:44:2f:c5:3e:f2:ca:77:8b:2e: b3:6f:03:92:81:d3:4f:e0:7b:1d:32:3b:1c:a4:e9:a9:27:75: ac:78:94:83:75:ee:84:d8:71:c4:82:85:27:db:73:0b:5a:fa: 88:38:5c:3d:20:ae:d7:4c:3d:38:40:57:13:da:0a:3b:ae:97: aa:e6:c9:cf:01:49:32:27:ac:90:e8:1e:20:81:d3:35:49:f4: 2f:aa:26:24:56:fe:53:f8:75:ea:1b:fa:33:72:dc:a6:ba:69: 95:34:02:0c:54:d5:2b:da:2c:16:e4:ca:0f:b9:a2:ee:9a:ee: 22:22:4c:2a:74:a4:dc:9d:ef:1d:9b:76:fb:2f:39:2a:73:37: ab:b3:f9:5e:ab:ab:b3:b7:af:72:eb:6c:de:5c:0a:83:c1:c9: 5e:f2:6a:ff:20:a3:b4:a7:d4:47:d4:ca:83:78:84:56:52:70: 63:8e:6d:8c:f7:d3:a8:47:cc:fe:f3:54:7d:16:12:7f:6b:53: 5d:58:bd:7b:f4:31:17:b0:04:96:1a:56:20:60:92:34:f0:6d: d4:1a:2b:17:db:38:6c:b8:69:ee:45:fd:31:bb:78:46:de:de: e9:f5:bf:f5:22:94:f4:63:d8:99:55:dc:d3:84:15:2e:60:cb: 67:69:7e:c4 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt264mKdI1/NpoqV9mIYv1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2ZmM2Q4OTllMjZmYzg0ZmI0Mzc5ZmIzMjVmMTc0YjUwNzVjZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6e/yGJtCpUUE4awnJHgZrXGFPrq RaTo/MNcgRRAkwJ4Fq9SqWLTNgq+J46wfBbBysVun1H7tm4q9ZySGd/WSXfJ8iop t8SQVYq+H2JHvUG7FqcL9dM/R98BOB/6lIY31OkZRzBp3ytMZpRNZDPs3KXPTsWL 1+wU44FImNFq2LtRC9SGc6cDpQmiwzgUwCnRLOtuyvLN7gPpMkYPMBBVXJ60T8aw E/90QkU9062k+kbeP1qTIVqaTBaSTU1kFahxlCAzA+lP+5M110jzBvR78DygWJnQ dP5jNYmY5aLPDktidx60yc/QJL/1Hi6BvpVYkkZ0fgrZdvRp1446J7qX7wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGz/PYmeJvyE+0N5+zJfF0tQdc4NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2IwYzg3 NS0yNGUxLTQ0NGQtYjAxZC01NDA4ZjhkOWRmYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvYjBjODc1 LTI0ZTEtNDQ0ZC1iMDFkLTU0MDhmOGQ5ZGZiMS8xL2JQODlpWjRtX0lUN1EzbjdN bDhYUzFCMXpnMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw4nSMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnKFMA0GCSqGSIb3DQEBCwUAA4IBAQBQWFve5dpkL/JEL8U+8sp3iy6zbwOSgdNP 4HsdMjscpOmpJ3WseJSDde6E2HHEgoUn23MLWvqIOFw9IK7XTD04QFcT2go7rpeq 5snPAUkyJ6yQ6B4ggdM1SfQvqiYkVv5T+HXqG/ozctymummVNAIMVNUr2iwW5MoP uaLumu4iIkwqdKTcne8dm3b7Lzkqczers/leq6uzt69y62zeXAqDwcle8mr/IKO0 p9RH1MqDeIRWUnBjjm2M99OoR8z+81R9FhJ/a1NdWL179DEXsASWGlYgYJI08G3U GisX2zhsuGnuRf0xu3hG3t7p9b/1IpT0Y9iZVdzThBUuYMtnaX7E -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:13 2026 by rpki-client