This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer (raw, json) Hash identifier: L6ufoTBNlduDHDvE0F4cOoVIwEuh/PEgB2NJpwvtPV0= Subject key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C86DC495C42B2E2444894730025B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210045 IP: 217.28.133.0/24 IP: 2a12:2140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c8:6d:c4:95:c4:2b:2e:24:44:89:47:30:02:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:d9:24:47:f9:be:37:27:69:4c:bb:50:5b: 7f:69:1f:c4:37:51:36:fb:40:ee:6f:fb:75:72:89: 3b:66:46:f1:eb:7e:77:74:79:43:57:7b:fc:c5:8a: fc:0d:d9:0f:a8:0a:64:4e:ca:60:58:0f:05:eb:a0: c1:1f:95:eb:f0:36:bf:9b:44:58:43:ca:8f:a8:be: 1c:19:72:bf:5b:7c:d3:f3:ba:d9:5a:08:d8:02:12: e4:b0:e8:37:b5:0f:88:c6:77:24:0a:9c:55:6d:11: 8b:2c:92:cb:36:04:3b:4a:b4:cd:07:41:85:d0:b0: dd:90:f0:21:c0:6a:c1:0f:69:e2:09:2e:4d:b8:cb: 4c:5b:32:a5:1a:82:a2:11:6b:48:c8:15:2e:44:94: f0:2a:02:1b:c5:78:9c:f1:e2:d2:6e:8b:59:e2:db: 59:63:f4:46:8e:a2:d6:e2:ef:a3:9a:bb:a5:be:ba: 2f:23:08:b3:36:9d:14:48:86:ff:2f:05:42:58:21: cb:bf:69:07:0b:7f:7d:0d:ad:1a:50:7e:42:69:44: 9e:db:b4:10:00:f2:79:ad:3c:d3:ca:c9:94:17:13: 90:f9:bd:0f:e4:93:20:fa:82:b9:92:72:fb:6c:54: 40:c0:41:8f:57:6f:d9:6f:78:13:47:b7:dc:14:0b: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.133.0/24 IPv6: 2a12:2140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210045 Signature Algorithm: sha256WithRSAEncryption 2f:48:84:56:88:4a:06:a5:3a:66:94:40:9e:c3:80:cc:79:49: c4:9a:e1:d9:f8:54:cc:b9:b3:6f:e3:e6:eb:97:95:d2:75:32: 05:d9:f2:1f:98:c0:25:9c:45:5b:9b:c0:ff:18:fa:0c:f4:d5: f4:e8:71:57:e6:01:3a:96:da:77:27:8c:9c:1a:5f:45:24:df: 22:16:7c:5b:01:6d:ac:01:4d:6b:17:14:f6:d6:58:6a:de:a8: 7d:17:a6:63:8c:de:97:11:b7:cf:5d:87:37:0d:a5:3e:5d:22: 9d:17:a4:18:36:cf:d7:dc:ce:f7:81:b2:39:8f:6e:59:e0:e0: 63:6d:98:7b:a7:d9:bb:1f:3b:39:19:92:7a:e5:ed:47:08:88: f3:cb:12:66:c5:71:58:8c:12:ee:0c:60:1c:99:48:1e:71:e5: 16:ae:f6:04:1c:10:38:07:83:93:53:74:af:7d:15:75:31:59: 20:19:05:70:e9:a3:92:5c:5d:21:83:ce:dd:8c:db:a5:14:bb: ad:aa:8b:f9:e5:ae:e9:9d:4d:a7:17:d5:67:3f:cc:34:3f:c7: 45:e1:a2:21:98:33:64:5c:7c:02:96:f4:db:d9:ea:12:f9:6c: e8:dd:2a:c3:8a:91:a6:60:b0:45:0d:07:45:d6:88:e2:0f:cc: a2:5a:ed:14 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EshtxJXEKy4kRIlHMAJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2RjNjk0ZjBjMzI1NWQ1ZDU1NzNmMTMyOGU1MzY1NGNmYjIyYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte/ZJEf5vjcnaUy7UFt/aR/EN1E2 +0Dub/t1cok7Zkbx6353dHlDV3v8xYr8DdkPqApkTspgWA8F66DBH5Xr8Da/m0RY Q8qPqL4cGXK/W3zT87rZWgjYAhLksOg3tQ+IxnckCpxVbRGLLJLLNgQ7SrTNB0GF 0LDdkPAhwGrBD2niCS5NuMtMWzKlGoKiEWtIyBUuRJTwKgIbxXic8eLSbotZ4ttZ Y/RGjqLW4u+jmrulvrovIwizNp0USIb/LwVCWCHLv2kHC399Da0aUH5CaUSe27QQ APJ5rTzTysmUFxOQ+b0P5JMg+oK5knL7bFRAwEGPV2/Zb3gTR7fcFAscAwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGzcaU8MMlXV1Vc/EyjlNlTPsixNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Q3NGNi Mi1mMGZjLTRmMmMtYmUwMS01MzZlMWYwYzRmZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZDc0Y2Iy LWYwZmMtNGYyYy1iZTAxLTUzNmUxZjBjNGZmOS8xL2JOeHBUd3d5VmRYVlZ6OFRL T1UyVk0teUxFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2RyFMA0EAgACMAcDBQMqEiFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0fTANBgkqhkiG9w0BAQsFAAOCAQEAL0iEVohKBqU6 ZpRAnsOAzHlJxJrh2fhUzLmzb+Pm65eV0nUyBdnyH5jAJZxFW5vA/xj6DPTV9Ohx V+YBOpbadyeMnBpfRSTfIhZ8WwFtrAFNaxcU9tZYat6ofRemY4zelxG3z12HNw2l Pl0inRekGDbP19zO94GyOY9uWeDgY22Ye6fZux87ORmSeuXtRwiI88sSZsVxWIwS 7gxgHJlIHnHlFq72BBwQOAeDk1N0r30VdTFZIBkFcOmjklxdIYPO3YzbpRS7raqL +eWu6Z1NpxfVZz/MND/HReGiIZgzZFx8Apb029nqEvls6N0qw4qRpmCwRQ0HRdaI 4g/MolrtFA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:11 2026 by rpki-client