This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer (raw, json) Hash identifier: 8GwuI4iCzxYQcyfBKIBDuDBc4qMajwwc/cHL3cr+Vlw= Subject key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF5F72D4B3146C496EDBE229F4DD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204778 IP: 185.120.141.0/24 IP: 185.225.124.0/24 IP: 188.65.164.0/24 IP: 2a13:2180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f5:f7:2d:4b:31:46:c4:96:ed:be:22:9f:4d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d3006dcd289c47f9f58e128eb29757239144bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:e8:57:e0:84:52:34:7e:6f:28:3b:f5:4f: 4a:33:e8:7d:f5:7f:84:e4:f2:46:3e:5d:b3:c0:72: dd:44:7f:36:2b:c8:7a:28:e0:98:bc:f4:79:97:25: d5:27:87:3a:59:7e:7f:d0:01:28:ac:8a:8d:df:20: 27:75:f1:43:b5:83:ba:d2:55:cc:84:5d:ba:dd:a8: 14:e6:bb:35:a5:20:07:42:99:60:ed:f3:6d:09:55: 60:91:7e:bb:61:5a:3a:12:42:2c:07:21:13:fc:ea: 96:4b:07:9e:bb:24:82:c7:bf:b7:66:04:19:03:f3: 99:03:b6:b4:e0:88:35:8f:66:5f:f0:95:47:67:af: 75:82:16:d8:f9:06:b3:6f:99:cd:13:11:92:7c:ce: 34:d0:7e:bc:5c:db:be:c6:09:68:11:6d:65:e2:fc: 50:d3:30:27:e5:ad:e5:58:9b:51:b5:15:ae:a0:19: 16:53:3d:ef:24:31:37:4c:b6:02:92:16:4d:4f:ad: f9:5b:07:7d:99:08:85:a6:3d:d9:4b:31:3f:77:da: 7b:9e:51:6c:cf:c2:16:b3:b7:83:6b:51:7a:d7:ff: 2a:1d:19:5b:4f:96:bf:3a:83:c8:54:f7:2b:b2:c5: de:b6:bc:82:e9:f5:d6:8b:68:a5:57:3d:b8:69:64: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.141.0/24 185.225.124.0/24 188.65.164.0/24 IPv6: 2a13:2180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204778 Signature Algorithm: sha256WithRSAEncryption 44:1e:0d:b8:81:97:bc:dc:b4:4f:96:f6:34:44:e4:a4:4f:c2: bc:d3:12:21:38:2f:b6:f0:16:b2:73:b8:f1:f5:93:f5:63:2d: bd:dd:ad:57:6d:81:b5:60:30:f7:06:e2:eb:7d:e9:fc:67:c9: d8:ae:f1:53:8d:62:76:8c:1e:e2:ae:9d:61:fc:13:47:75:0e: 0f:92:35:60:04:8f:29:e1:f7:03:ce:35:27:a8:26:a3:ee:c8: 58:72:e2:9d:3d:a9:34:9a:02:59:c1:a5:12:dc:da:74:8d:3e: 71:1d:be:e8:ef:27:5a:58:f5:09:be:df:a8:af:a2:05:ee:16: 3c:e3:50:40:97:88:ad:aa:5b:b3:76:36:45:ba:ea:c4:63:00: 7f:34:3f:d0:b6:37:6d:2b:c3:59:22:d1:16:cf:cd:7d:68:80: 59:1c:9c:2e:ca:5e:b1:59:c4:6a:3f:65:cb:54:9c:5e:2c:48: aa:33:1f:b3:8d:64:1e:7e:a3:ce:57:9a:6f:0a:92:2f:6f:f9: 14:12:97:de:4b:f4:66:3e:04:19:56:c4:da:32:6e:9e:8e:3c: 2d:a9:b2:b5:03:d5:26:8e:f7:ca:ef:a6:20:ca:77:8a:aa:c2: a9:02:82:33:3e:85:ee:6f:37:e1:c3:73:c6:f4:8f:5b:e3:bf: 90:fa:ae:dc -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8f/X3LUsxRsSW7b4in03VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDMwMDZkY2QyODljNDdmOWY1OGUxMjhlYjI5NzU3MjM5MTQ0YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPvoV+CEUjR+byg79U9KM+h99X+E 5PJGPl2zwHLdRH82K8h6KOCYvPR5lyXVJ4c6WX5/0AEorIqN3yAndfFDtYO60lXM hF263agU5rs1pSAHQplg7fNtCVVgkX67YVo6EkIsByET/OqWSweeuySCx7+3ZgQZ A/OZA7a04Ig1j2Zf8JVHZ691ghbY+Qazb5nNExGSfM400H68XNu+xgloEW1l4vxQ 0zAn5a3lWJtRtRWuoBkWUz3vJDE3TLYCkhZNT635Wwd9mQiFpj3ZSzE/d9p7nlFs z8IWs7eDa1F61/8qHRlbT5a/OoPIVPcrssXetryC6fXWi2ilVz24aWRp+QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFG0wBtzSicR/n1jhKOspdXI5FEu2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2JmOWU1 MS1jYzJiLTRmZjQtODZhYy0yZjdlNTJmYjhiZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYmY5ZTUx LWNjMmItNGZmNC04NmFjLTJmN2U1MmZiOGJkMy8xL2JUQUczTktKeEgtZldPRW82 eWwxY2prVVM3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuXiNAwQAueF8AwQAvEGkMA0EAgACMAcDBQMq EyGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMf6jANBgkqhkiG9w0BAQsFAAOC AQEARB4NuIGXvNy0T5b2NETkpE/CvNMSITgvtvAWsnO48fWT9WMtvd2tV22BtWAw 9wbi633p/GfJ2K7xU41idowe4q6dYfwTR3UOD5I1YASPKeH3A841J6gmo+7IWHLi nT2pNJoCWcGlEtzadI0+cR2+6O8nWlj1Cb7fqK+iBe4WPONQQJeIrapbs3Y2Rbrq xGMAfzQ/0LY3bSvDWSLRFs/NfWiAWRycLspesVnEaj9ly1ScXixIqjMfs41kHn6j zleabwqSL2/5FBKX3kv0Zj4EGVbE2jJuno48LamytQPVJo73yu+mIMp3iqrCqQKC Mz6F7m834cNzxvSPW+O/kPqu3A== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:40 2026 by rpki-client