This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer File: brZPqOBaLX9WSs8omudXxATN2dA.cer (raw, json) Hash identifier: 2OG9MYB36xpVoPSkRKBSUPOr71JEtkeNKPNzHxZMzvA= Subject key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C561C17AC5694FE47E6002D3E40D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 164.152.232.0/21 IP: 194.164.246.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:56:1c:17:ac:56:94:fe:47:e6:00:2d:3e:40:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:28:79:3a:0a:c1:4b:db:cb:a6:77:23:3c: dd:bc:93:bd:74:b4:e9:60:db:42:ca:5d:56:0f:fc: dd:b1:06:e0:cd:fd:21:82:ba:b4:82:06:35:74:c8: 24:e9:97:e4:21:ad:ea:ed:0f:0d:ea:d2:16:67:fc: c2:39:27:ef:c1:2a:1c:7c:45:5f:a6:48:40:0c:65: 9a:5b:fc:a2:15:c5:66:c1:2f:31:6b:d5:f5:52:f1: ee:2b:ce:0c:df:6e:d4:8b:51:e0:d2:88:4e:6c:f9: 95:e8:d3:e2:d0:7f:69:9a:d6:1e:ac:46:8c:05:18: 2e:fc:98:79:e5:e4:ff:71:aa:69:a2:ec:58:1b:bb: 8c:4b:bf:e8:f8:f7:40:51:14:ab:18:18:cd:b4:e9: 64:c2:53:e3:ad:9e:ca:aa:d1:c2:86:04:cb:2c:fa: 8f:f4:6f:74:cf:ff:ba:22:08:1e:4a:ea:13:43:21: 5f:41:a3:eb:b6:9c:93:c7:69:be:65:64:62:e4:59: f2:84:23:fa:d0:dd:fa:15:eb:53:21:b6:60:14:b3: ed:9e:03:b0:bb:6b:5b:55:0c:c5:94:30:a7:e0:dc: 31:6f:0c:81:1a:40:02:70:33:16:87:47:61:9f:bd: c5:36:ba:dc:35:9c:93:c3:31:54:e6:be:07:d0:7f: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.232.0/21 194.164.246.0/24 Signature Algorithm: sha256WithRSAEncryption a0:34:4e:ea:d7:db:b4:e6:c3:a9:a8:db:5f:39:cd:f0:7b:30: a5:f8:18:d3:c7:6f:12:1f:df:fa:23:93:1a:8e:c4:52:57:10: 98:6d:b8:c8:49:81:fe:74:ac:48:50:a4:62:31:a8:5c:c9:9f: 4d:ee:55:e8:bf:4b:6b:a6:3d:46:49:74:e7:eb:43:45:44:95: bc:23:9e:34:7e:12:65:61:62:9f:c2:46:a9:26:45:08:50:94: 93:87:a2:02:40:89:9e:79:b0:75:56:e0:fc:21:f0:1a:76:a1: 70:e6:a0:9f:51:95:70:78:02:14:19:4d:2b:35:72:21:59:24: b2:87:fa:c4:f5:04:01:a8:b0:6c:60:e3:4e:54:23:66:8b:b5: cf:df:71:19:73:ae:12:8c:c1:3b:cc:ff:29:4b:12:ed:18:74: 0b:1a:03:d2:37:42:eb:15:58:d0:49:4a:f6:31:62:22:03:c2: e3:0b:7e:d8:21:25:90:c6:fc:d5:78:01:81:79:3b:63:f0:50: 44:2c:d0:17:bf:72:42:53:b6:0c:14:f6:f9:fb:10:35:1a:9d: 38:2e:f9:e6:2e:0c:c0:dc:f0:e8:16:5a:68:c7:09:83:50:97: b5:df:41:38:be:cb:65:e2:dd:ac:29:26:81:0e:f0:47:8d:f7: 74:38:bf:fb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9XFYcF6xWlP5H5gAtPkDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWI2NGZhOGUwNWEyZDdmNTY0YWNmMjg5YWU3NTdjNDA0Y2RkOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAoeToKwUvby6Z3IzzdvJO9dLTp YNtCyl1WD/zdsQbgzf0hgrq0ggY1dMgk6ZfkIa3q7Q8N6tIWZ/zCOSfvwSocfEVf pkhADGWaW/yiFcVmwS8xa9X1UvHuK84M327Ui1Hg0ohObPmV6NPi0H9pmtYerEaM BRgu/Jh55eT/cappouxYG7uMS7/o+PdAURSrGBjNtOlkwlPjrZ7KqtHChgTLLPqP 9G90z/+6IggeSuoTQyFfQaPrtpyTx2m+ZWRi5FnyhCP60N36FetTIbZgFLPtngOw u2tbVQzFlDCn4NwxbwyBGkACcDMWh0dhn73FNrrcNZyTwzFU5r4H0H9BwwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFG62T6jgWi1/VkrPKJrnV8QEzdnQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzU4NDk5 Ny04M2FiLTQ4MTctYWFjMy04OGNmNzJjYTllNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNTg0OTk3 LTgzYWItNDgxNy1hYWMzLTg4Y2Y3MmNhOWU0Ni8xL2JyWlBxT0JhTFg5V1NzOG9t dWRYeEFUTjJkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDpJjoAwQAwqT2MA0GCSqGSIb3DQEBCwUAA4IB AQCgNE7q19u05sOpqNtfOc3wezCl+BjTx28SH9/6I5MajsRSVxCYbbjISYH+dKxI UKRiMahcyZ9N7lXov0trpj1GSXTn60NFRJW8I540fhJlYWKfwkapJkUIUJSTh6IC QImeebB1VuD8IfAadqFw5qCfUZVweAIUGU0rNXIhWSSyh/rE9QQBqLBsYONOVCNm i7XP33EZc64SjME7zP8pSxLtGHQLGgPSN0LrFVjQSUr2MWIiA8LjC37YISWQxvzV eAGBeTtj8FBELNAXv3JCU7YMFPb5+xA1Gp04LvnmLgzA3PDoFlpoxwmDUJe130E4 vstl4t2sKSaBDvBHjfd0OL/7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:05:08 2026 by rpki-client