This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer (raw, json) Hash identifier: KG6r71SXOTqJnrdpIUrlhGzMy3R89XrX2v23KJuhFLI= Subject key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED051B66208824F5D890CE33EC2B4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215131 IP: 2001:67c:e5c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:05:1b:66:20:88:24:f5:d8:90:ce:33:ec:2b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:fd:d0:34:8a:d5:42:ad:e0:47:93:90:4a: 99:3c:4e:9e:ec:35:07:31:ca:41:0c:77:8d:5b:f6: b4:71:6c:f3:77:80:28:2d:52:80:11:d9:3e:f8:07: 96:23:f5:3a:e5:1e:69:df:10:8c:09:e1:3e:c7:49: b0:d1:08:2f:47:82:f8:1a:de:5d:76:01:02:f7:49: 7f:93:c8:e3:03:c6:b5:4e:64:a0:a2:61:61:69:e3: 2c:40:37:72:54:59:54:4e:ba:8e:b9:d9:03:fd:78: ee:ec:d7:3b:21:37:50:7c:66:c2:e0:2c:0d:b8:fc: 66:10:08:95:4e:aa:8a:b3:85:45:09:c9:19:91:f4: 01:31:83:43:51:a8:c0:2a:99:30:53:82:95:35:8f: 61:e4:86:70:50:e5:1f:dc:98:0c:f2:c9:5d:bc:43: 96:7a:ad:46:fe:cb:a0:13:23:79:f8:98:71:f1:67: c3:14:62:d3:92:70:be:a8:6a:6e:3b:bd:8a:0c:36: f1:4b:0f:b6:7f:c3:61:10:a9:cf:6d:e0:6f:ed:96: 57:17:55:ec:9a:99:4e:f1:fa:32:18:4e:86:1d:aa: 98:7d:44:5e:df:c4:76:cb:d3:91:8c:15:b6:4f:d9: cd:ea:ce:8e:05:ec:e0:14:ba:c5:1b:a7:4d:b8:9e: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e5c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215131 Signature Algorithm: sha256WithRSAEncryption 29:dd:44:81:ed:c7:69:25:39:6c:40:c1:c7:bb:f4:a2:77:40: 4b:0b:87:13:2d:af:35:6f:67:09:58:9b:ae:02:e9:5a:9c:32: a7:fc:43:b5:ab:d5:18:d9:d2:3d:cd:2c:57:1b:7a:20:ab:70: 94:e6:77:6d:2b:41:b7:36:f8:8e:cc:43:d3:d1:16:04:03:0c: 18:7b:cc:5d:f2:7e:1f:f3:e5:3b:f2:2c:16:d9:27:89:a0:f4: eb:53:3f:16:71:18:ab:cd:cd:d1:bf:1c:90:53:be:09:24:9b: cf:07:e1:5e:8c:29:d1:82:c1:c3:bc:0c:71:35:7a:31:b3:96: 44:2a:ab:23:ce:f5:af:21:12:08:4d:19:30:9a:ca:0b:9e:ee: b5:dd:3f:2f:5a:46:17:02:2e:fe:76:3d:b2:83:cc:4f:43:54: 09:bb:3b:63:b0:c6:1f:9d:d5:cd:97:c6:19:ad:64:01:45:66: aa:9c:d0:d1:89:2b:0a:fd:94:b7:2b:13:dd:37:95:6f:bc:9a: e4:f1:1c:78:e2:00:1a:5d:5f:63:e7:ad:fe:0d:ca:a5:39:e8: 2e:9c:d7:5e:48:61:02:23:3c:9b:49:4c:61:24:81:83:2b:21: 9a:e7:d1:21:70:79:da:5a:a2:c3:f4:7e:4b:4a:11:57:10:50: 22:26:06:85 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57QUbZiCIJPXYkM4z7CtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjcyMGViNDA3ZDViMWI5YjI0NDUzYjgyNmNhYTZmMDc0ZTdkMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPz90DSK1UKt4EeTkEqZPE6e7DUH McpBDHeNW/a0cWzzd4AoLVKAEdk++AeWI/U65R5p3xCMCeE+x0mw0QgvR4L4Gt5d dgEC90l/k8jjA8a1TmSgomFhaeMsQDdyVFlUTrqOudkD/Xju7Nc7ITdQfGbC4CwN uPxmEAiVTqqKs4VFCckZkfQBMYNDUajAKpkwU4KVNY9h5IZwUOUf3JgM8sldvEOW eq1G/sugEyN5+Jhx8WfDFGLTknC+qGpuO72KDDbxSw+2f8NhEKnPbeBv7ZZXF1Xs mplO8foyGE6GHaqYfURe38R2y9ORjBW2T9nN6s6OBezgFLrFG6dNuJ7mjQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAZyDrQH1bG5skRTuCbKpvB059EtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzkxNTdk Ni0xZjA1LTQ1MTAtODAzNy03OGMwYzAyZjc4YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvOTE1N2Q2 LTFmMDUtNDUxMC04MDM3LTc4YzBjMDJmNzhhMi8xL0JuSU90QWZWc2JteVJGTzRK c3FtOEhUbjBTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA5cMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNIWzANBgkqhkiG9w0BAQsFAAOCAQEAKd1Ege3HaSU5bEDBx7v0ondASwuH Ey2vNW9nCVibrgLpWpwyp/xDtavVGNnSPc0sVxt6IKtwlOZ3bStBtzb4jsxD09EW BAMMGHvMXfJ+H/PlO/IsFtkniaD061M/FnEYq83N0b8ckFO+CSSbzwfhXowp0YLB w7wMcTV6MbOWRCqrI871ryESCE0ZMJrKC57utd0/L1pGFwIu/nY9soPMT0NUCbs7 Y7DGH53VzZfGGa1kAUVmqpzQ0YkrCv2UtysT3TeVb7ya5PEceOIAGl1fY+et/g3K pTnoLpzXXkhhAiM8m0lMYSSBgyshmufRIXB52lqiw/R+S0oRVxBQIiYGhQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:11:25 2026 by rpki-client