This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer (raw, json) Hash identifier: x/sNEdyKqa8bDL4qYK1BEvCsQiDSYuxNQFLwq30frPQ= Subject key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E393BDD33A51E97D5CF71124338AAF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3b:dd:33:a5:1e:97:d5:cf:71:12:43:38:aa:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:be:78:fe:12:9e:f9:68:06:70:40:90:b4: 4c:19:24:f5:7e:b6:aa:02:91:a7:18:98:ee:ec:06: 82:f4:73:1f:00:b6:c3:0d:79:64:a4:ba:bb:bb:e4: ed:05:82:6f:5b:c1:2f:bc:96:d6:c7:c9:64:13:b1: 90:2a:f9:6a:54:1c:a9:f1:fd:62:45:be:ce:22:d0: a3:34:a0:ec:31:30:f5:cb:71:49:db:15:2c:5f:5a: f5:61:41:bf:7f:71:30:b2:aa:29:aa:a6:9c:8b:4b: 72:27:c2:80:c8:d4:2c:5f:63:48:54:60:de:a9:d2: fa:f2:1c:f5:16:45:5e:32:7d:cf:1f:d6:b8:ce:66: 47:c0:d7:a0:7d:c1:6d:7e:e3:1a:dd:af:d2:59:5d: 58:e6:68:bc:99:e9:77:50:20:0b:bc:f0:c4:10:5f: 6e:ff:8e:93:34:a2:80:b8:53:bf:cb:17:c0:be:1e: 3e:50:bc:a3:45:1b:b9:8a:a1:9d:0d:52:e1:09:34: df:dd:7b:53:86:e4:6b:ab:af:f4:51:52:15:d0:f0: 99:e7:47:32:a1:dd:09:62:96:2c:35:a7:68:c6:08: 5c:f9:f4:bd:79:d8:bf:11:9c:c5:20:db:4f:32:37: 03:07:28:01:a5:9c:a9:f8:6e:cd:a4:d1:6e:ea:96: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.83.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ed:32:27:69:69:f5:f4:15:54:83:e7:3b:f4:d2:cb:67:23: d3:e5:10:29:7f:4b:ae:1c:c3:59:cc:81:19:30:b9:de:77:4b: c7:12:4e:86:3e:93:ac:26:48:26:04:f6:30:3c:b5:bd:5e:a3: 97:0d:47:7e:8a:84:ed:4d:a6:53:41:b8:24:47:7f:73:d1:c5: 27:bc:de:13:0e:70:a7:aa:6e:2a:ed:b7:56:72:3f:91:e3:46: 2f:86:12:1e:f4:ca:e9:50:9c:d5:06:10:ff:f5:0d:0b:8e:f4: 9b:ce:3b:2a:98:7d:4f:70:52:71:3f:9b:c9:ef:93:2b:0a:07: 3d:96:9a:b1:28:f8:ee:46:31:30:d5:45:05:51:5d:0e:f8:35: f5:b4:4e:c4:60:f6:6d:9c:9c:3b:10:12:8d:5c:1e:be:bc:7f: 6b:14:7c:31:d1:0f:c4:e3:32:98:b3:ec:ec:78:45:9f:89:5b: bc:4f:9e:99:dd:2f:7e:24:d0:b0:f3:4e:eb:dd:60:b0:63:d2: 76:70:d2:f7:57:0a:47:35:70:fb:05:03:03:cd:ec:fb:5d:a0: 59:cd:da:2b:db:96:ee:56:dc:9a:d2:09:64:ca:4c:db:7d:18: 44:d9:52:d8:a5:07:39:24:4e:e5:b5:fd:3c:f3:3c:04:5a:f9: a0:8a:fc:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OTvdM6Uel9XPcRJDOKrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTIxM2RiNmQyYjFlNGYzMGI2MmVkMTE2N2UyNTIyMzYyNjM2MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSS+eP4SnvloBnBAkLRMGST1fraq ApGnGJju7AaC9HMfALbDDXlkpLq7u+TtBYJvW8EvvJbWx8lkE7GQKvlqVByp8f1i Rb7OItCjNKDsMTD1y3FJ2xUsX1r1YUG/f3Ewsqopqqaci0tyJ8KAyNQsX2NIVGDe qdL68hz1FkVeMn3PH9a4zmZHwNegfcFtfuMa3a/SWV1Y5mi8mel3UCALvPDEEF9u /46TNKKAuFO/yxfAvh4+ULyjRRu5iqGdDVLhCTTf3XtThuRrq6/0UVIV0PCZ50cy od0JYpYsNadoxghc+fS9edi/EZzFINtPMjcDBygBpZyp+G7NpNFu6pbqEwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFG4hPbbSseTzC2LtEWfiUiNiY2C5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzEzMjc2 YS1jNTc1LTQ3OWYtOTM5Zi1jYzQ0NzRjMzIxMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTMyNzZh LWM1NzUtNDc5Zi05MzlmLWNjNDQ3NGMzMjExYS8xL2JpRTl0dEt4NVBNTFl1MFJa LUpTSTJKallMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VTMA0GCSqGSIb3DQEBCwUAA4IBAQCA7TIn aWn19BVUg+c79NLLZyPT5RApf0uuHMNZzIEZMLned0vHEk6GPpOsJkgmBPYwPLW9 XqOXDUd+ioTtTaZTQbgkR39z0cUnvN4TDnCnqm4q7bdWcj+R40YvhhIe9MrpUJzV BhD/9Q0LjvSbzjsqmH1PcFJxP5vJ75MrCgc9lpqxKPjuRjEw1UUFUV0O+DX1tE7E YPZtnJw7EBKNXB6+vH9rFHwx0Q/E4zKYs+zseEWfiVu8T56Z3S9+JNCw807r3WCw Y9J2cNL3VwpHNXD7BQMDzez7XaBZzdor25buVtya0glkykzbfRhE2VLYpQc5JE7l tf088zwEWvmgivy4 -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:38 2026 by rpki-client