This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer File: Ben8oKhYT-scEjGQcUIwYbCP5FY.cer (raw, json) Hash identifier: VG5cZJhMkAY5cGF2OLiolKsvP+g8bzndzhymiSkQ2+c= Subject key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3BEB079559465F4C2336A1ED55153 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52104 AS: 61960 AS: 209683 IP: 91.243.120.0/23 IP: 109.107.160.0/22 IP: 109.107.168.0/22 IP: 109.107.180.0/22 IP: 109.107.188.0/22 IP: 185.54.48.0/22 IP: 2a04:cfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:be:b0:79:55:94:65:f4:c2:33:6a:1e:d5:51:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05e9fca0a8584feb1c12319071423061b08fe456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6c:67:ca:62:17:c8:82:cc:2d:50:40:e6:8c: 31:68:64:4e:f2:9b:b3:14:8d:56:54:ea:8d:68:61: 20:e4:53:97:da:3a:e6:82:61:03:b9:95:e7:cb:d4: 3c:d4:9f:4f:32:be:a7:d0:14:53:13:c1:81:22:69: fc:ee:5d:6e:44:fc:50:4a:2a:15:18:cd:b0:c4:1e: 0a:e5:f7:9f:81:46:fb:e8:e1:7b:da:a6:64:e1:90: 96:b9:ea:a9:29:19:c2:e8:e5:d6:b7:a4:05:f4:b8: 80:b0:37:05:01:b8:7f:89:c7:ac:09:cb:4d:56:35: 37:15:04:e1:b1:e3:28:75:59:38:35:01:8a:42:5d: e3:8f:29:a3:87:d0:b2:10:da:df:14:c7:27:6f:a9: 3d:f0:1f:d1:4d:88:56:5d:9b:2f:25:ac:a4:64:fc: 6f:f0:cf:8f:c6:a8:a2:65:32:99:4b:89:d0:23:76: 5b:36:26:d7:3e:47:53:93:07:e2:ce:f1:84:98:80: bb:d7:e3:8b:63:b6:14:64:48:dc:53:41:c2:6c:32: 05:df:df:9d:6e:d9:96:9c:c5:e3:b8:ab:48:ae:03: c5:aa:17:57:cc:ff:07:5b:26:87:53:8e:9e:75:a3: 05:e5:c0:fc:aa:73:a4:6e:9f:33:6d:2a:0a:8e:ad: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.120.0/23 109.107.160.0/22 109.107.168.0/22 109.107.180.0/22 109.107.188.0/22 185.54.48.0/22 IPv6: 2a04:cfc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52104 61960 209683 Signature Algorithm: sha256WithRSAEncryption 9e:6b:29:11:ed:c1:c2:ca:56:51:df:d0:dc:8e:dd:df:6a:0e: 60:ef:81:8c:5e:75:63:f5:8b:33:40:d2:65:34:57:ed:88:0e: bf:02:b9:89:95:d3:55:dd:7e:92:2a:c2:b8:04:54:b5:58:30: 29:a1:b4:28:23:b4:8e:08:2d:fa:8c:ca:3d:25:6b:b5:4a:e9: fe:69:aa:92:8a:13:9c:c1:c4:09:e2:b6:4b:30:6c:d3:3a:d9: 7d:e9:56:0a:a6:05:e8:c8:5b:8b:0e:5e:23:de:98:e0:6f:02: 49:82:4c:2d:70:dd:6a:42:30:e1:b0:7b:b4:5a:c0:18:48:e9: 16:7d:74:b4:68:c8:f3:a2:57:8b:ad:94:cc:3d:6b:e2:a5:84: 63:82:59:77:18:9e:01:2f:23:3c:f4:2d:bb:61:22:1b:70:c9: 4f:30:54:54:d2:0a:a6:f1:5e:d4:cc:c3:8d:6c:21:9f:2a:ea: 3e:44:ce:f7:a2:80:d8:35:8f:04:c8:91:5f:03:9f:38:b8:3c: f8:8a:76:ad:4e:79:69:2a:35:f9:92:30:72:a5:28:f9:20:68: 01:26:8e:32:4b:8d:c9:0d:85:02:4f:12:7e:84:f5:e9:b4:61: 2a:5a:f3:c3:4f:7b:c4:df:9d:1f:63:57:b2:f8:72:e0:6c:ca: 95:ac:f3:be -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt7o76weVWUZfTCM2oe1VFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWU5ZmNhMGE4NTg0ZmViMWMxMjMxOTA3MTQyMzA2MWIwOGZlNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72xnymIXyILMLVBA5owxaGRO8puz FI1WVOqNaGEg5FOX2jrmgmEDuZXny9Q81J9PMr6n0BRTE8GBImn87l1uRPxQSioV GM2wxB4K5fefgUb76OF72qZk4ZCWueqpKRnC6OXWt6QF9LiAsDcFAbh/icesCctN VjU3FQThseModVk4NQGKQl3jjymjh9CyENrfFMcnb6k98B/RTYhWXZsvJaykZPxv 8M+PxqiiZTKZS4nQI3ZbNibXPkdTkwfizvGEmIC71+OLY7YUZEjcU0HCbDIF39+d btmWnMXjuKtIrgPFqhdXzP8HWyaHU46edaMF5cD8qnOkbp8zbSoKjq3omQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFAXp/KCoWE/rHBIxkHFCMGGwj+RWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2M3ZWU5 ZS1iNWJmLTRjMmQtYTk4My1kZWUzZWQ0OTdhZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYzdlZTll LWI1YmYtNGMyZC1hOTgzLWRlZTNlZDQ5N2FlZS8xL0JlbjhvS2hZVC1zY0VqR1Fj VUl3WWJDUDVGWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQBW/N4AwQCbWugAwQCbWuoAwQCbWu0AwQCbWu8 AwQCuTYwMA0EAgACMAcDBQMqBM/AMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDL iAIDAPIIAgMDMxMwDQYJKoZIhvcNAQELBQADggEBAJ5rKRHtwcLKVlHf0NyO3d9q DmDvgYxedWP1izNA0mU0V+2IDr8CuYmV01XdfpIqwrgEVLVYMCmhtCgjtI4ILfqM yj0la7VK6f5pqpKKE5zBxAnitkswbNM62X3pVgqmBejIW4sOXiPemOBvAkmCTC1w 3WpCMOGwe7RawBhI6RZ9dLRoyPOiV4utlMw9a+KlhGOCWXcYngEvIzz0LbthIhtw yU8wVFTSCqbxXtTMw41sIZ8q6j5EzveigNg1jwTIkV8Dnzi4PPiKdq1OeWkqNfmS MHKlKPkgaAEmjjJLjckNhQJPEn6E9em0YSpa88NPe8TfnR9jV7L4cuBsypWs874= -----END CERTIFICATE-----Generated at Wed Jan 21 18:27:00 2026 by rpki-client