This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer File: bb1csplArCqFU7bsCozsfCCffOc.cer (raw, json) Hash identifier: 9HGxNcsJ58hQelergYhYJ04pOdUeDxzNR3jZNEnEPeM= Subject key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE5B58BCB563757B771E1ECDD530D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43791 IP: 185.212.220.0/22 IP: 2a0b:7c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5b:58:bc:b5:63:75:7b:77:1e:1e:cd:d5:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:6b:74:c4:f8:f1:7d:44:95:4f:1d:2f:1a: 58:78:0d:b2:17:45:44:49:8a:81:2f:6c:0a:6c:44: 1a:40:13:00:00:18:ea:f2:dd:4e:2d:8e:7b:7d:fc: de:3d:37:f3:08:84:9b:bf:df:2c:00:da:35:bc:cb: f3:a0:14:8f:46:0d:1f:53:5b:2b:f7:b7:9c:9a:76: 1f:20:18:b8:52:1b:b9:3f:59:cc:84:81:cb:e2:07: a8:65:2f:1f:88:6c:6f:f1:dd:c3:bb:fa:64:59:7c: f6:97:65:fc:ef:bc:69:50:3c:61:b1:f0:cf:f3:9d: f4:b2:3d:06:ab:41:a6:95:a4:28:84:c7:4c:2a:e1: ac:40:3f:11:76:0b:7f:4e:c2:af:56:3b:06:06:fb: dd:d9:a1:7f:c2:16:22:9c:8f:e9:1a:20:37:53:ce: 37:a4:58:e7:6f:26:a8:22:80:14:7c:0a:eb:93:77: fb:35:cf:5e:39:e8:97:b1:82:1a:c8:14:fd:84:30: 0f:24:b4:2a:34:c7:36:84:6d:57:09:0c:aa:96:98: f6:10:4e:fb:ec:03:47:6d:2d:94:c2:e5:b4:b6:74: dd:21:03:71:27:d0:5c:62:ed:9a:34:8f:e9:a3:bd: 24:26:a1:6a:56:e0:fb:ee:de:96:2e:99:9d:9b:36: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.220.0/22 IPv6: 2a0b:7c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43791 Signature Algorithm: sha256WithRSAEncryption 41:ff:88:30:42:d1:94:a0:51:91:41:e6:05:81:ae:cd:af:9f: 2a:59:90:b9:40:9e:a5:f9:c8:55:5e:68:d4:72:02:ab:cc:2f: 6f:18:c2:8f:e3:a3:0b:57:93:d4:10:15:e1:16:b0:85:26:d9: 9d:92:1d:34:62:05:44:40:da:4a:4e:f7:93:03:b5:db:65:80: 6b:39:f2:b5:0f:3e:2d:fa:a3:63:29:8c:87:6c:d8:8b:5c:24: 38:d7:33:e3:52:9d:86:d1:4a:03:7a:53:ab:f7:7e:f0:2b:b3: 03:80:eb:7b:d4:64:1d:0d:6c:fd:18:d0:91:a8:1c:6d:15:f8: e8:39:18:21:f3:67:ad:1f:ea:de:58:c3:a9:c9:3b:fd:f0:72: a3:18:0e:82:c5:f2:9b:f3:8f:f1:0b:af:8b:0d:f9:19:9b:a2: 68:e6:53:c4:83:50:fd:c6:2c:16:56:40:84:95:08:0a:39:69: 70:d3:3d:82:7e:28:b0:b9:49:e6:4c:ac:78:3c:44:e8:4d:59: bb:0a:50:46:1f:85:e5:3b:b1:d0:9f:40:45:f3:f2:97:cd:8f: bd:c5:91:90:b6:19:d1:c2:49:56:4c:df:2e:38:1e:e8:b7:c3: c6:33:62:a2:64:07:59:06:3f:cb:86:7a:57:58:d0:d7:66:46: 8a:87:bf:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87ltYvLVjdXt3Hh7N1TDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJkNWNiMjk5NDBhYzJhODU1M2I2ZWMwYThjZWM3YzIwOWY3Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnztrdMT48X1ElU8dLxpYeA2yF0VE SYqBL2wKbEQaQBMAABjq8t1OLY57ffzePTfzCISbv98sANo1vMvzoBSPRg0fU1sr 97ecmnYfIBi4Uhu5P1nMhIHL4geoZS8fiGxv8d3Du/pkWXz2l2X877xpUDxhsfDP 8530sj0Gq0GmlaQohMdMKuGsQD8Rdgt/TsKvVjsGBvvd2aF/whYinI/pGiA3U843 pFjnbyaoIoAUfArrk3f7Nc9eOeiXsYIayBT9hDAPJLQqNMc2hG1XCQyqlpj2EE77 7ANHbS2UwuW0tnTdIQNxJ9BcYu2aNI/po70kJqFqVuD77t6WLpmdmzarfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG29XLKZQKwqhVO27AqM7Hwgn3znMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzYxNGIw NS03NDQ1LTQwNDYtOWZiMS0yZmRlODA0MzVmNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNjE0YjA1 LTc0NDUtNDA0Ni05ZmIxLTJmZGU4MDQzNWY0ZC8xL2JiMWNzcGxBckNxRlU3YnND b3pzZkNDZmZPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudTcMA0EAgACMAcDBQMqC3xAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCrDzANBgkqhkiG9w0BAQsFAAOCAQEAQf+IMELRlKBR kUHmBYGuza+fKlmQuUCepfnIVV5o1HICq8wvbxjCj+OjC1eT1BAV4RawhSbZnZId NGIFREDaSk73kwO122WAaznytQ8+LfqjYymMh2zYi1wkONcz41KdhtFKA3pTq/d+ 8CuzA4Dre9RkHQ1s/RjQkagcbRX46DkYIfNnrR/q3ljDqck7/fByoxgOgsXym/OP 8Quviw35GZuiaOZTxINQ/cYsFlZAhJUICjlpcNM9gn4osLlJ5kyseDxE6E1ZuwpQ Rh+F5Tux0J9ARfPyl82PvcWRkLYZ0cJJVkzfLjge6LfDxjNiomQHWQY/y4Z6V1jQ 12ZGioe/cA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:45 2026 by rpki-client