This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer File: _BirNMWiEorErlXBr23vZTSzgR0.cer (raw, json) Hash identifier: gxq1S9d/HUU2SgSTRGNZ8uzZkw078vygohekzCnwJ2E= Subject key identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4B23467E6E1DD68B927BDD2AFBCD4322 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 12:16:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203742 IP: 185.125.132.0/22 IP: 2a06:bb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:23:46:7e:6e:1d:d6:8b:92:7b:dd:2a:fb:cd:43:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 12:16:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:5a:20:15:0b:54:4f:2f:28:a6:fe:4f:00: 0c:fc:6f:c9:4b:d4:cf:ed:46:77:66:d9:85:7d:73: e4:cf:97:ea:7f:1a:28:42:5f:3b:80:19:bf:dc:ef: 12:94:01:88:f5:3b:ee:e0:e7:be:87:ea:e6:29:83: 08:41:0d:00:81:6c:25:b9:33:ec:36:da:09:a7:5e: eb:72:da:9f:22:94:65:70:15:52:a3:ad:70:0e:e6: 35:bc:cc:c7:60:49:20:e5:3a:71:f3:82:3a:a2:83: 03:5f:12:9d:fc:98:ed:16:67:ed:8c:bd:a0:34:22: fd:fb:f0:76:da:46:d3:4e:63:6a:7d:36:ff:92:2b: e0:9d:d1:04:4e:b0:b2:15:6b:1f:05:67:b1:df:17: 39:a6:ee:34:76:c6:f5:2e:b6:9b:36:f4:26:e2:9c: e3:13:30:28:8f:47:3b:d5:6b:bb:dc:b2:97:c7:7e: 52:3d:27:2b:3e:c6:69:5f:b8:bd:c4:17:97:7f:f7: 68:b0:1c:61:23:8c:5d:99:ef:10:09:a3:2c:57:d0: fd:f3:93:fa:83:d9:e2:14:f6:20:94:0a:8d:75:69: 02:fd:68:73:21:d1:41:97:94:be:9b:67:42:19:dc: fa:13:0f:ec:53:ab:53:3d:8e:79:39:08:8d:9b:19: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.132.0/22 IPv6: 2a06:bb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203742 Signature Algorithm: sha256WithRSAEncryption 67:b7:af:e6:ac:e9:39:06:ab:02:fa:09:6e:a2:f7:7a:81:bc: ac:a6:db:5b:e6:f1:9f:b9:5c:15:ab:29:70:f5:99:b4:fd:b2: 19:2e:8a:29:70:1c:64:c6:0e:1c:89:71:b5:77:3f:13:ad:fd: df:44:44:ba:7f:76:e8:73:ca:96:05:e7:1d:ac:02:20:5b:08: f4:9f:10:b0:89:57:fe:e8:27:3f:d2:34:2d:79:3f:d8:bd:68: b7:92:97:73:47:29:f8:9e:b6:53:13:a5:84:66:a6:66:8e:c4: 87:00:3d:b5:89:fa:45:f2:f5:30:a3:1a:66:b4:8a:9a:96:78: d4:5b:b9:e8:fd:ab:09:ef:29:63:2d:0a:b8:b2:88:93:76:06: f4:e1:f1:bc:dd:85:9e:b1:21:87:6c:3c:5b:1a:71:21:f5:4d: 03:11:8d:0f:47:38:a1:45:1a:73:0e:76:85:25:cb:2e:c5:0e: 0b:ad:98:00:38:02:86:75:5c:d4:81:5d:aa:1e:5b:12:c4:0e: 44:b3:34:cb:bd:5c:df:31:ae:60:03:72:fb:8f:23:de:03:ce: e6:c0:6d:73:bc:49:a2:b7:47:58:6a:2a:da:1b:62:f4:e1:61: 0a:65:fc:70:1d:76:b3:fb:c9:a0:fe:3b:37:64:a4:eb:22:d7: a6:64:ab:eb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZtLI0Z+bh3Wi5J73Sr7zUMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTIxNjAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzE4YWIzNGM1YTIxMjhhYzRhZTU1YzFhZjZkZWY2NTM0YjM4MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ptaIBULVE8vKKb+TwAM/G/JS9TP 7UZ3ZtmFfXPkz5fqfxooQl87gBm/3O8SlAGI9Tvu4Oe+h+rmKYMIQQ0AgWwluTPs NtoJp17rctqfIpRlcBVSo61wDuY1vMzHYEkg5Tpx84I6ooMDXxKd/JjtFmftjL2g NCL9+/B22kbTTmNqfTb/kivgndEETrCyFWsfBWex3xc5pu40dsb1LrabNvQm4pzj EzAoj0c71Wu73LKXx35SPScrPsZpX7i9xBeXf/dosBxhI4xdme8QCaMsV9D985P6 g9niFPYglAqNdWkC/WhzIdFBl5S+m2dCGdz6Ew/sU6tTPY55OQiNmxkxIwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPwYqzTFohKKxK5Vwa9t72U0s4EdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1Lzc2Njdi ZS05NjcwLTQ3MDEtOTlmMC1hNzgxNGZjNDZlNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNzY2N2Jl LTk2NzAtNDcwMS05OWYwLWE3ODE0ZmM0NmU2NS8xL19CaXJOTVdpRW9yRXJsWEJy MjN2WlRTemdSMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX2EMA0EAgACMAcDBQMqBrsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb3jANBgkqhkiG9w0BAQsFAAOCAQEAZ7ev5qzpOQar AvoJbqL3eoG8rKbbW+bxn7lcFaspcPWZtP2yGS6KKXAcZMYOHIlxtXc/E63930RE un926HPKlgXnHawCIFsI9J8QsIlX/ugnP9I0LXk/2L1ot5KXc0cp+J62UxOlhGam Zo7EhwA9tYn6RfL1MKMaZrSKmpZ41Fu56P2rCe8pYy0KuLKIk3YG9OHxvN2FnrEh h2w8WxpxIfVNAxGND0c4oUUacw52hSXLLsUOC62YADgChnVc1IFdqh5bEsQORLM0 y71c3zGuYANy+48j3gPO5sBtc7xJordHWGoq2hti9OFhCmX8cB12s/vJoP47N2Sk 6yLXpmSr6w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:47 2025 by rpki-client