This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer File: bW-CVvrIKqy2grohaoMDO1FFalI.cer (raw, json) Hash identifier: 3nn3ngQpnTwL07FTkqdNuh7+2QPUV1ECuZjCML1htyI= Subject key identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B93609972A82674E98E0568084DDF6162 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 12:55:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210372 IP: 45.136.224.0/22 IP: 2a05:cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:60:99:72:a8:26:74:e9:8e:05:68:08:4d:df:61:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 12:55:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d6f8256fac82aacb682ba216a83033b51456a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:2e:f4:43:76:bc:d5:06:59:40:a3:5a:8b: db:c5:4a:15:db:7b:5b:e0:e2:50:94:39:49:ca:6b: f1:53:6c:f9:47:bc:c0:d1:f1:05:5f:06:70:22:44: 48:e4:54:4a:67:f8:f0:e6:70:71:19:d0:10:51:81: c4:af:e7:39:6d:2e:4e:bc:d1:3c:14:05:13:be:30: 87:80:0d:3a:f5:99:0f:32:80:84:22:e8:5d:f8:6b: 9d:94:e9:c8:49:be:3c:f9:b4:ee:d2:3e:5a:b4:89: 83:d2:d9:72:19:31:b9:12:7f:1c:81:ca:a1:a5:56: 64:3a:6f:c7:d7:15:07:a9:07:db:a8:06:50:b3:5c: 3f:3c:a9:60:72:66:a8:e6:be:59:06:fe:c4:95:5e: 42:e0:ea:96:b7:71:bf:d5:07:e8:26:be:6f:27:95: 2c:85:d6:d2:88:ee:4d:90:0d:06:cc:90:72:c2:64: ff:c9:06:4b:15:04:69:cb:5d:8b:29:4f:be:6f:95: 61:40:ce:02:b5:99:0f:b5:82:0a:c7:a4:1a:30:ca: 8a:22:4b:6a:68:84:2e:d6:6f:d7:af:b2:3e:f5:2f: 24:1e:df:c9:24:26:d5:d2:3b:4a:da:91:01:0b:7f: 0e:34:8d:b8:a0:a5:b3:ba:d6:ae:81:78:11:34:7b: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.224.0/22 IPv6: 2a05:cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210372 Signature Algorithm: sha256WithRSAEncryption 67:e7:2a:21:b1:18:b8:50:a8:63:16:fe:6d:23:35:b4:35:a9: ca:bb:3f:f4:8d:19:ad:c3:cb:3c:72:b2:df:18:bb:13:26:a4: 0e:de:f6:57:54:d5:ba:ee:a0:b5:b9:7f:54:57:ca:64:77:cd: 3f:1f:81:2e:8a:40:ad:89:51:9a:f2:1f:94:dc:02:71:ab:40: 2c:24:5d:d4:8b:42:ef:3f:6d:ba:51:66:ad:c0:c0:ef:f0:6a: 3b:16:2f:7b:1e:dc:c7:17:ab:0e:61:8f:70:4c:8c:a7:d5:ed: f6:b2:e6:66:34:28:53:71:9e:9d:3f:77:ce:d8:ee:91:28:9d: 79:ab:74:cc:24:8b:0a:e2:bf:bb:7d:69:af:31:c4:b7:80:b7: e0:06:63:3e:e1:6a:a4:1d:c0:4b:91:64:11:fb:d3:fc:74:14: c7:0b:ae:3c:64:fa:70:97:6f:c5:3c:0f:63:ef:09:37:1d:df: 51:e7:18:99:74:a5:0b:b7:e7:1f:08:be:f6:70:83:fc:9a:10: 12:3b:6b:93:2f:c0:97:07:97:d0:bc:f9:9d:ce:aa:e9:c6:c5: 71:f5:07:f3:5b:b0:68:54:cc:41:c8:24:86:76:ce:0a:7b:19: 99:97:97:8a:a5:22:bb:9a:5d:91:00:43:b8:a9:38:3e:c0:19: da:e6:70:5f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZuTYJlyqCZ06Y4FaAhN32FiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTI1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDZmODI1NmZhYzgyYWFjYjY4MmJhMjE2YTgzMDMzYjUxNDU2YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucu9EN2vNUGWUCjWovbxUoV23tb 4OJQlDlJymvxU2z5R7zA0fEFXwZwIkRI5FRKZ/jw5nBxGdAQUYHEr+c5bS5OvNE8 FAUTvjCHgA069ZkPMoCEIuhd+GudlOnISb48+bTu0j5atImD0tlyGTG5En8cgcqh pVZkOm/H1xUHqQfbqAZQs1w/PKlgcmao5r5ZBv7ElV5C4OqWt3G/1QfoJr5vJ5Us hdbSiO5NkA0GzJBywmT/yQZLFQRpy12LKU++b5VhQM4CtZkPtYIKx6QaMMqKIktq aIQu1m/Xr7I+9S8kHt/JJCbV0jtK2pEBC38ONI24oKWzutaugXgRNHvCiQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG1vglb6yCqstoK6IWqDAztRRWpSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzljMGZi OS04OWQ5LTQ0YjItYTczMC0zZWZhNWVkZjM3NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvOWMwZmI5 LTg5ZDktNDRiMi1hNzMwLTNlZmE1ZWRmMzc1Mi8xL2JXLUNWdnJJS3F5Mmdyb2hh b01ETzFGRmFsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYjgMA0EAgACMAcDBQMqBQzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1xDANBgkqhkiG9w0BAQsFAAOCAQEAZ+cqIbEYuFCo Yxb+bSM1tDWpyrs/9I0ZrcPLPHKy3xi7EyakDt72V1TVuu6gtbl/VFfKZHfNPx+B LopArYlRmvIflNwCcatALCRd1ItC7z9tulFmrcDA7/BqOxYvex7cxxerDmGPcEyM p9Xt9rLmZjQoU3GenT93ztjukSideat0zCSLCuK/u31przHEt4C34AZjPuFqpB3A S5FkEfvT/HQUxwuuPGT6cJdvxTwPY+8JNx3fUecYmXSlC7fnHwi+9nCD/JoQEjtr ky/AlweX0Lz5nc6q6cbFcfUH81uwaFTMQcgkhnbOCnsZmZeXiqUiu5pdkQBDuKk4 PsAZ2uZwXw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:39 2026 by rpki-client