This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer File: Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer (raw, json) Hash identifier: mWcGpWhxbX75DWvnHtfuieJVw8FfepK6WtrZlvV7gMk= Subject key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134E2B8ADD4C26DD2AE0165CFFE08A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:584::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4e:2b:8a:dd:4c:26:dd:2a:e0:16:5c:ff:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:f8:99:63:7e:7f:29:33:35:27:5b:1a:06: ef:42:f7:1c:b2:d3:5c:f5:68:15:ec:62:af:0c:1c: 1f:6a:2f:e3:07:32:6f:44:a4:f3:f1:78:cd:40:df: 98:86:eb:67:83:79:a2:b1:99:52:a5:b8:2e:97:e1: d1:a1:24:7f:f2:eb:81:cb:f3:ad:df:c6:8e:91:10: 67:80:d0:7c:b3:41:35:da:e0:ed:cf:1a:ed:be:2e: c1:d1:b0:f6:2a:9e:13:ee:bd:01:2f:59:30:03:19: 8f:a2:16:00:a4:59:ef:4f:a0:38:34:9b:7d:9a:fe: 86:07:0b:16:7e:b9:63:ae:a3:7b:58:da:42:16:8a: c7:69:e9:60:63:37:2d:f0:0d:49:02:d5:e0:88:46: e0:e5:a1:56:60:76:a0:e1:a5:85:ac:07:4d:1f:fb: c6:b7:46:e2:36:ae:2e:7b:b0:c0:bb:7a:57:ba:2a: fa:d9:7a:bf:98:4c:93:7a:e8:68:3d:84:a5:cd:8f: d3:32:bd:2f:ae:a5:2b:b6:a8:a0:e2:79:38:ab:e4: b9:39:94:24:52:75:53:5a:73:6b:05:d8:c4:8b:e3: 8a:ef:fb:09:0c:d5:e5:00:d9:cb:a5:79:41:73:bb: 93:9b:98:11:42:ac:9d:44:15:b2:5e:e8:5b:58:72: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:584::/48 Signature Algorithm: sha256WithRSAEncryption 6b:5a:fa:91:91:8c:eb:b3:4f:2b:92:c2:c6:3c:52:28:ac:f6: 49:75:78:7b:8d:3c:db:65:99:f6:8f:87:1c:42:2d:33:03:b8: bc:88:9e:0a:44:ff:4d:4e:cb:f5:f1:c3:89:eb:54:01:f6:1c: 97:d5:3f:b9:02:24:f0:79:59:15:50:bd:93:1f:c1:25:56:bc: cf:6d:1c:0f:99:b5:ee:95:fe:b2:df:9f:3c:d7:72:d2:dd:fd: 22:39:0b:05:6e:f3:67:e3:27:79:cc:bf:7c:e1:33:91:e3:d9: 2e:5e:17:21:29:95:ca:52:36:61:74:8b:d3:5d:dd:fd:43:2e: 26:0e:90:29:5b:90:0a:5a:66:33:87:e8:35:47:b9:19:01:30: f0:a2:b4:9c:31:eb:1b:f4:9d:8c:f8:7b:3c:6f:01:98:ab:59: 05:16:7c:f9:cd:38:6e:2a:94:1f:9e:25:35:8c:12:67:bd:27: 58:62:6d:75:a2:23:dc:75:d3:28:cc:17:58:87:6f:86:25:3c: 98:1e:37:2d:f6:bf:4c:61:aa:55:f8:fe:99:a9:38:bf:02:d3: e7:ac:09:8c:d9:7e:b0:68:3a:af:29:71:90:21:66:e8:71:36: 0d:4a:02:71:d2:74:a8:9f:aa:c5:7b:49:07:3e:33:45:9d:16: 88:89:41:d0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt8E04rit1MJt0q4BZc/+CKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWNlNGRkMjg4MDFiMjgzYmY4NTFiNWMwMGQwMGViOGI1MTRhNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYX4mWN+fykzNSdbGgbvQvccstNc 9WgV7GKvDBwfai/jBzJvRKTz8XjNQN+Yhutng3misZlSpbgul+HRoSR/8uuBy/Ot 38aOkRBngNB8s0E12uDtzxrtvi7B0bD2Kp4T7r0BL1kwAxmPohYApFnvT6A4NJt9 mv6GBwsWfrljrqN7WNpCForHaelgYzct8A1JAtXgiEbg5aFWYHag4aWFrAdNH/vG t0biNq4ue7DAu3pXuir62Xq/mEyTeuhoPYSlzY/TMr0vrqUrtqig4nk4q+S5OZQk UnVTWnNrBdjEi+OK7/sJDNXlANnLpXlBc7uTm5gRQqydRBWyXuhbWHIjFwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFAXOTdKIAbKDv4UbXADQDri1FKVaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2VmNjQ2 MS1hMGVmLTRjMTktOWUxZC1mMjIzZGFjYjYwMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZWY2NDYx LWEwZWYtNGMxOS05ZTFkLWYyMjNkYWNiNjAxNy8xL0JjNU4wb2dCc29PX2hSdGNB TkFPdUxVVXBWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWEMA0GCSqGSIb3DQEBCwUAA4IBAQBr WvqRkYzrs08rksLGPFIorPZJdXh7jTzbZZn2j4ccQi0zA7i8iJ4KRP9NTsv18cOJ 61QB9hyX1T+5AiTweVkVUL2TH8ElVrzPbRwPmbXulf6y358813LS3f0iOQsFbvNn 4yd5zL984TOR49kuXhchKZXKUjZhdIvTXd39Qy4mDpApW5AKWmYzh+g1R7kZATDw orScMesb9J2M+Hs8bwGYq1kFFnz5zThuKpQfniU1jBJnvSdYYm11oiPcddMozBdY h2+GJTyYHjct9r9MYapV+P6ZqTi/AtPnrAmM2X6waDqvKXGQIWbocTYNSgJx0nSo n6rFe0kHPjNFnRaIiUHQ -----END CERTIFICATE-----Generated at Tue Feb 10 08:40:00 2026 by rpki-client