This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer (raw, json) Hash identifier: /6IEuKYor9JSn5XDOj3ihJeUVY4fHfh+jnhi6XRGroc= Subject key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED52A4609D0B14E226143CA7F0FCE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215679 IP: 164.138.206.0/24 IP: 185.219.112.0/22 IP: 2a14:7780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:a4:60:9d:0b:14:e2:26:14:3c:a7:f0:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07077969a8b6a55c461adde106c006486a26359f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:b0:52:13:41:5c:d7:84:41:a1:aa:ec:73: 8b:ab:c2:8d:26:3d:79:93:a1:fb:e7:64:e4:1e:69: 8a:05:0c:99:0f:4a:ab:17:dd:a2:e6:50:14:5a:49: cb:f4:ec:8e:ec:32:f2:86:38:97:6f:d0:12:9d:56: 9d:86:b3:3f:10:e6:a0:70:71:0d:ad:51:af:5e:da: 68:e1:3b:7a:1c:55:0f:93:6a:3d:3e:b8:fd:d0:64: 2c:80:2e:47:dd:f1:eb:f7:ce:01:98:db:d1:78:57: 6b:b3:12:2f:84:1f:2d:ea:d9:b9:1a:07:8d:46:fa: 53:c2:ba:76:87:1d:cc:89:f5:ab:0d:d1:62:3c:a4: 9b:51:e2:df:1e:af:66:e5:43:e4:4d:7d:9b:8e:ef: a6:1e:67:e1:0b:48:8d:09:90:42:9e:88:09:6d:c7: 00:80:97:bb:de:26:b0:e1:2f:3e:a6:51:b5:26:0a: 35:88:6f:ca:eb:a5:70:9f:dc:85:d7:31:31:32:0c: fb:70:27:cb:29:23:64:7e:88:7b:2e:ac:cd:88:0c: 3f:0a:90:b6:fb:14:f4:fe:dd:1b:b1:05:a1:a1:8f: ba:19:92:b0:70:10:d7:70:50:4a:14:c9:68:c8:09: 81:ad:3f:1d:21:2f:aa:bc:8e:4a:75:f0:87:07:b5: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.206.0/24 185.219.112.0/22 IPv6: 2a14:7780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215679 Signature Algorithm: sha256WithRSAEncryption 1c:eb:3d:8e:bf:54:44:de:ca:0a:bb:cb:cd:96:b6:86:86:6b: 77:3b:2d:9d:44:b9:02:cc:69:f7:bc:fc:b5:cc:e0:01:06:82: ae:5a:6f:e7:6a:b2:57:10:15:57:ed:52:d9:e7:24:97:95:c8: 29:8b:be:bd:3a:fc:8e:36:dc:38:a7:c2:43:7a:de:9b:05:f5: ac:48:87:69:62:aa:a0:25:41:f7:19:f6:ea:f0:d9:94:ef:10: 6b:c6:6b:ff:a3:19:7d:01:b5:63:42:fb:b1:1d:22:ea:37:b3: 44:85:5f:5e:4b:87:40:53:5f:da:70:f5:b8:bb:81:25:e0:a4: d2:df:da:38:a8:08:18:57:2c:21:85:fd:55:01:a6:99:fb:99: 67:21:e8:fc:df:47:f5:81:c0:59:96:19:20:c4:47:94:57:03: fa:9c:57:a6:e5:bb:a2:2a:fb:1b:88:eb:48:b0:35:e8:10:39: 51:c9:5f:34:b8:3b:b7:43:2f:df:c5:ca:5e:12:b9:cc:8b:62: d3:1c:63:2c:e6:d0:08:99:7f:4e:97:e5:ea:b1:8e:6a:9b:da: 00:4e:ce:f0:bb:b7:92:c2:35:f4:58:08:eb:5c:8f:9a:6d:67: 8b:61:79:b3:ef:01:34:7e:1e:f7:70:c7:a9:4b:c4:46:dc:41: a0:c4:25:5f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57VKkYJ0LFOImFDyn8PzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA3Nzk2OWE4YjZhNTVjNDYxYWRkZTEwNmMwMDY0ODZhMjYzNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRiwUhNBXNeEQaGq7HOLq8KNJj15 k6H752TkHmmKBQyZD0qrF92i5lAUWknL9OyO7DLyhjiXb9ASnVadhrM/EOagcHEN rVGvXtpo4Tt6HFUPk2o9Prj90GQsgC5H3fHr984BmNvReFdrsxIvhB8t6tm5GgeN RvpTwrp2hx3MifWrDdFiPKSbUeLfHq9m5UPkTX2bju+mHmfhC0iNCZBCnogJbccA gJe73iaw4S8+plG1Jgo1iG/K66Vwn9yF1zExMgz7cCfLKSNkfoh7LqzNiAw/CpC2 +xT0/t0bsQWhoY+6GZKwcBDXcFBKFMloyAmBrT8dIS+qvI5KdfCHB7WvXwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAcHeWmotqVcRhrd4QbABkhqJjWfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzIzMjA0 Ny1iMmU4LTRmYmEtYmRkNS1jM2ZlYzQ1ZWQwNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMjMyMDQ3 LWIyZTgtNGZiYS1iZGQ1LWMzZmVjNDVlZDA1Ni8xL0J3ZDVhYWkycFZ4R0d0M2hC c0FHU0dvbU5aOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQApIrOAwQCudtwMA0EAgACMAcDBQMqFHeAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNKfzANBgkqhkiG9w0BAQsFAAOCAQEAHOs9 jr9URN7KCrvLzZa2hoZrdzstnUS5Asxp97z8tczgAQaCrlpv52qyVxAVV+1S2eck l5XIKYu+vTr8jjbcOKfCQ3remwX1rEiHaWKqoCVB9xn26vDZlO8Qa8Zr/6MZfQG1 Y0L7sR0i6jezRIVfXkuHQFNf2nD1uLuBJeCk0t/aOKgIGFcsIYX9VQGmmfuZZyHo /N9H9YHAWZYZIMRHlFcD+pxXpuW7oir7G4jrSLA16BA5UclfNLg7t0Mv38XKXhK5 zIti0xxjLObQCJl/Tpfl6rGOapvaAE7O8Lu3ksI19FgI61yPmm1ni2F5s+8BNH4e 93DHqUvERtxBoMQlXw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:25 2026 by rpki-client