This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.cer (raw, json) Hash identifier: 6NJEmiHtrxnXDFMUtBrbicS6snwspniIaWIXg12zY4Q= Subject key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E384FA62007CFB1003AAB798F1A3D58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43891 IP: 193.186.10.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4f:a6:20:07:cf:b1:00:3a:ab:79:8f:1a:3d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b80180b40d585b7366587dfb5de7bf3077843e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:aa:e4:43:f7:4f:5f:b4:da:1e:12:92:a8: c3:b1:a5:9b:6e:1f:9e:b1:36:0a:ae:f5:25:f3:d2: e0:90:4b:28:fc:e7:d9:71:49:e5:10:6c:ef:84:4a: b9:95:1c:2b:a1:4d:cf:50:5c:bf:3a:f5:24:22:1b: d4:6d:ee:40:49:85:90:99:0a:4a:1e:32:77:fb:20: 08:bd:0f:bf:f4:05:13:51:62:dd:9a:be:4d:e5:07: d5:63:82:f2:d3:14:0c:3d:2d:ce:cc:79:fb:2e:fa: 09:a7:41:00:14:34:42:d7:7f:95:43:66:c9:09:ec: 43:45:da:a4:33:67:b8:4d:be:cc:76:66:f0:d6:56: 91:53:d0:3b:2c:90:01:e7:c6:25:72:43:35:92:a9: 2d:8a:ba:08:f2:e6:34:3c:be:db:e7:8d:0f:95:b6: 47:45:c8:f1:97:62:3c:44:66:b7:f6:20:ae:18:25: 85:ed:d3:26:8a:1d:f1:61:02:ec:3c:6f:26:45:0a: e0:5c:bd:3a:ad:d1:4b:3d:10:d9:ee:ae:f4:56:70: cb:2f:ba:d5:d6:7a:ab:87:d6:d6:7e:18:c0:7b:47: 00:04:f4:6e:f7:72:70:0d:eb:66:96:5b:c4:a2:be: 96:a2:b2:a5:27:06:95:8b:4d:5c:cc:ab:9e:72:8b: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.10.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43891 Signature Algorithm: sha256WithRSAEncryption 5c:aa:66:9b:2f:6e:b7:8f:84:71:66:fb:dc:cc:5f:21:33:e1: 50:19:50:d2:32:db:0d:53:56:da:b6:8f:73:1c:76:a1:18:1e: c8:2e:60:3f:84:e6:36:3a:eb:d8:31:24:f7:8e:6b:ff:c3:d4: f9:2c:ba:9b:fe:bd:49:87:40:70:8a:92:3a:5c:e2:c7:c9:e3: 70:c9:53:38:4a:cb:bb:f1:e5:09:b3:76:eb:74:47:d1:e2:b6: a9:f9:68:67:99:7b:24:db:30:43:fd:a3:f5:2c:8a:15:da:10: 6e:ea:7c:4c:5f:84:43:0e:55:d3:a9:21:45:86:ee:e2:5c:0c: ce:de:8c:3c:46:e1:34:f4:8e:63:9d:bf:3b:c1:20:c4:10:98: 70:c8:17:d3:c8:47:3e:d9:e5:28:a6:54:e9:28:79:cb:37:be: 7d:c3:8e:ea:22:c9:7c:1d:cf:e0:81:db:9e:0b:55:f6:c1:44: 44:38:91:a5:e7:cf:1e:1a:46:9c:8b:c3:2d:a8:a6:33:fb:bd: a5:5d:8e:9d:cb:b5:2a:be:13:38:ac:51:da:bd:c7:4a:c0:7d: 7f:ce:b5:e0:20:57:9e:2c:d9:64:49:f6:e5:e1:11:34:dd:f5: 04:be:0c:b9:62:9e:e7:71:fd:12:9c:30:5a:de:e9:0b:ca:33: e8:e2:7e:fb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OE+mIAfPsQA6q3mPGj1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWI4MDE4MGI0MGQ1ODViNzM2NjU4N2RmYjVkZTdiZjMwNzc4NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKiq5EP3T1+02h4SkqjDsaWbbh+e sTYKrvUl89LgkEso/OfZcUnlEGzvhEq5lRwroU3PUFy/OvUkIhvUbe5ASYWQmQpK HjJ3+yAIvQ+/9AUTUWLdmr5N5QfVY4Ly0xQMPS3OzHn7LvoJp0EAFDRC13+VQ2bJ CexDRdqkM2e4Tb7Mdmbw1laRU9A7LJAB58YlckM1kqktiroI8uY0PL7b540PlbZH Rcjxl2I8RGa39iCuGCWF7dMmih3xYQLsPG8mRQrgXL06rdFLPRDZ7q70VnDLL7rV 1nqrh9bWfhjAe0cABPRu93JwDetmllvEor6WorKlJwaVi01czKuecovIeQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNW4AYC0DVhbc2ZYfftd578wd4Q+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzBlNWE3 MS0yYzBiLTRmMDQtOTQ2Ni0zMTQxMWQ5MTU3NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMGU1YTcx LTJjMGItNGYwNC05NDY2LTMxNDExZDkxNTc2YS8xLzFiZ0JnTFFOV0Z0elpsaDkt MTNudnpCM2hENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwboKMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCrczANBgkqhkiG9w0BAQsFAAOCAQEAXKpmmy9ut4+EcWb73MxfITPhUBlQ0jLb DVNW2raPcxx2oRgeyC5gP4TmNjrr2DEk945r/8PU+Sy6m/69SYdAcIqSOlzix8nj cMlTOErLu/HlCbN263RH0eK2qfloZ5l7JNswQ/2j9SyKFdoQbup8TF+EQw5V06kh RYbu4lwMzt6MPEbhNPSOY52/O8EgxBCYcMgX08hHPtnlKKZU6Sh5yze+fcOO6iLJ fB3P4IHbngtV9sFERDiRpefPHhpGnIvDLaimM/u9pV2Oncu1Kr4TOKxR2r3HSsB9 f8614CBXnizZZEn25eERNN31BL4MuWKe53H9EpwwWt7pC8oz6OJ++w== -----END CERTIFICATE-----Generated at Tue Jan 13 02:50:34 2026 by rpki-client