This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer File: bevRnamMJ_q6t7LylLz57Gr0SQU.cer (raw, json) Hash identifier: Rm/WYK3vI9Cd3icpg6HQXdFELcuMPUPrRnso9zkJ+lg= Subject key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F38BC0D4D8ED5F1B4379FEB41BC79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.0.64.0/21 IP: 185.56.48.0/22 IP: 185.183.228.0/22 IP: 2a0b:2080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:38:bc:0d:4d:8e:d5:f1:b4:37:9f:eb:41:bc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:89:01:48:4b:01:8c:26:f1:d7:15:5f:fd: 9d:35:72:a3:1e:9e:e7:9e:c3:39:84:17:1f:61:ff: 40:84:63:bc:04:e2:aa:f3:fb:4b:6c:3c:61:eb:49: 59:ea:0b:06:56:39:8b:7e:71:ae:85:4d:77:2c:e9: 85:ef:c5:39:de:28:09:38:ba:2e:2d:43:ef:b8:38: b8:be:45:3a:17:d9:3d:bf:f7:b1:da:d1:0b:ff:90: af:dc:71:e5:5b:4d:9f:0d:5b:52:0a:cc:22:9a:75: fb:b5:c3:a6:65:22:91:83:e8:40:93:0a:b2:19:73: 64:c9:38:c0:68:3f:1e:11:78:36:30:0f:8b:ee:94: 6f:73:8e:98:95:e3:03:c2:91:9a:4f:e6:00:09:a7: 4e:6e:37:5f:91:66:65:7c:dc:86:6c:70:03:a2:b6: f0:ad:1c:9e:1a:5f:7f:1e:f2:a8:7c:2e:4f:c3:0d: 21:93:03:82:3a:11:40:ca:60:c1:bb:8d:3c:bf:93: e6:d6:fa:49:58:4b:7b:1d:7f:b1:27:6f:b1:6e:25: 7f:ce:b7:99:1d:c5:fa:ed:83:2a:6a:35:69:eb:07: b1:6d:80:40:e5:f6:b1:49:ea:ad:a3:74:a9:e9:96: a3:b1:7b:f7:bc:3a:d2:71:4b:42:f5:a4:04:9e:f5: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.64.0/21 185.56.48.0/22 185.183.228.0/22 IPv6: 2a0b:2080::/29 Signature Algorithm: sha256WithRSAEncryption 2a:de:79:2b:45:d2:e0:07:72:94:a2:d7:d4:7e:a5:fe:ec:47: 8d:e9:b3:d9:64:91:92:02:10:42:01:ac:0b:07:a9:01:eb:c8: 55:52:fa:4a:39:2c:e7:1d:b2:6d:46:2a:db:87:e9:d7:ba:8c: b5:f1:f2:75:c1:38:02:04:bf:67:d8:d2:29:4a:9a:ce:e7:94: 78:7a:43:60:46:84:8a:bd:21:ff:c6:a4:d9:b4:31:29:44:1a: 67:6b:03:24:7d:ae:97:e4:a4:7a:47:d8:6b:7e:77:31:12:80: aa:7b:ec:cf:d1:da:b1:75:c5:82:37:e3:52:70:4f:7b:5e:29: b2:40:44:da:8a:f4:0f:a6:7e:dd:47:5a:1a:43:bb:53:1d:30: d2:a3:ad:c3:69:ac:80:af:95:40:6f:0d:77:e1:73:3e:b3:6c: 6e:de:8e:f0:4a:a5:7e:c4:d4:f2:83:f1:f1:d9:f7:77:6f:78: 7f:be:58:bb:ac:47:fe:fd:12:e3:df:ad:0e:fb:b7:2a:bb:3d: 94:54:45:b3:54:81:2a:2b:38:1a:20:04:e5:51:ad:cf:7e:88: d2:35:71:80:60:1d:2f:c1:6d:67:f0:c1:60:b3:95:5c:d5:f2: 62:06:16:09:ef:2d:59:92:db:88:52:80:1b:5e:a9:61:2e:b9: d4:75:20:80 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fzi8DU2O1fG0N5/rQbx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGViZDE5ZGE5OGMyN2ZhYmFiN2IyZjI5NGJjZjllYzZhZjQ0OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq+JAUhLAYwm8dcVX/2dNXKjHp7n nsM5hBcfYf9AhGO8BOKq8/tLbDxh60lZ6gsGVjmLfnGuhU13LOmF78U53igJOLou LUPvuDi4vkU6F9k9v/ex2tEL/5Cv3HHlW02fDVtSCswimnX7tcOmZSKRg+hAkwqy GXNkyTjAaD8eEXg2MA+L7pRvc46YleMDwpGaT+YACadObjdfkWZlfNyGbHADorbw rRyeGl9/HvKofC5Pww0hkwOCOhFAymDBu408v5Pm1vpJWEt7HX+xJ2+xbiV/zreZ HcX67YMqajVp6wexbYBA5faxSeqto3Sp6ZajsXv3vDrScUtC9aQEnvUhgwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFG3r0Z2pjCf6urey8pS8+exq9EkFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzFhZDM0 OS1lZGZlLTQxNTAtOWQzNy0yNjRhYjkzMzdmYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMWFkMzQ5 LWVkZmUtNDE1MC05ZDM3LTI2NGFiOTMzN2ZhMC8xL2JldlJuYW1NSl9xNnQ3THls THo1N0dyMFNRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDkgBAAwQCuTgwAwQCubfkMA0EAgACMAcDBQMq CyCAMA0GCSqGSIb3DQEBCwUAA4IBAQAq3nkrRdLgB3KUotfUfqX+7EeN6bPZZJGS AhBCAawLB6kB68hVUvpKOSznHbJtRirbh+nXuoy18fJ1wTgCBL9n2NIpSprO55R4 ekNgRoSKvSH/xqTZtDEpRBpnawMkfa6X5KR6R9hrfncxEoCqe+zP0dqxdcWCN+NS cE97XimyQETaivQPpn7dR1oaQ7tTHTDSo63DaayAr5VAbw134XM+s2xu3o7wSqV+ xNTyg/Hx2fd3b3h/vli7rEf+/RLj360O+7cquz2UVEWzVIEqKzgaIATlUa3PfojS NXGAYB0vwW1n8MFgs5Vc1fJiBhYJ7y1ZktuIUoAbXqlhLrnUdSCA -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:21 2026 by rpki-client