This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer File: bn8ivutSxuUaJCKxORQu6gP7XU0.cer (raw, json) Hash identifier: wrN+iJTitQ46s0xb3SYudrRJ7kh326nhnBEN1hC0LSs= Subject key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC86B5CC54283DBC784A2A3BDAF6B15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49986 IP: 78.31.236.0/22 IP: 2a05:c000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6b:5c:c5:42:83:db:c7:84:a2:a3:bd:af:6b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:e9:34:7d:6a:00:43:c0:0e:5e:d3:f9:4d: 78:30:ea:37:13:12:f9:54:ba:bd:a5:02:95:6c:44: e1:57:85:34:5e:cc:b6:aa:89:c0:e3:08:4b:6d:66: 8f:b8:c7:ad:19:fc:c7:e6:ac:90:1d:48:ea:a8:f4: e7:ad:07:2f:cb:d3:4e:10:2e:ab:ab:3e:bd:f5:6b: 94:7c:63:66:f6:2f:b8:f7:0e:9b:1a:98:48:f4:39: 93:13:ad:a6:e6:b6:5a:e1:e7:41:6d:31:ba:ba:f6: 42:06:32:e2:5b:60:4f:84:f5:02:67:ce:43:ce:3d: d5:22:38:b3:90:02:f6:bf:0b:6f:60:0a:de:51:d6: 3a:fb:6a:19:e5:54:db:ad:f2:2e:8a:35:9e:c1:34: b3:31:ca:59:24:0f:92:07:47:a2:0c:ae:a3:17:3a: 87:3c:2c:02:e8:ba:f7:81:97:05:47:c8:55:fc:f6: 15:42:80:b3:a4:a3:1d:18:e9:a2:6d:df:63:70:cd: 91:af:41:77:55:c0:d2:f8:eb:79:86:24:d5:2f:cc: de:78:ff:91:78:e1:1c:1a:ed:32:9c:04:8e:1c:f4: 3c:6a:92:93:49:d7:c5:8f:00:78:a3:df:75:ee:0e: 8d:39:7e:f7:6b:5b:bb:1e:79:16:18:03:cd:54:cc: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.236.0/22 IPv6: 2a05:c000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49986 Signature Algorithm: sha256WithRSAEncryption 77:99:0c:52:b0:63:f5:f2:17:97:eb:f0:1c:70:06:09:4d:01: c0:6e:04:51:7c:83:69:80:97:98:cd:b2:50:89:00:eb:8f:a6: 54:0b:a0:ce:c0:66:ec:5e:3d:9f:e5:71:c0:8b:bf:b2:1c:a2: d4:ce:7b:83:17:c4:53:55:24:da:26:9b:b6:ed:d8:11:dc:c8: d5:ce:53:51:60:30:75:bd:c0:be:04:b1:78:59:f3:9b:d6:c8: d8:3b:69:84:65:16:7f:74:89:33:d2:e0:bf:9a:16:9b:40:ea: eb:0b:82:14:db:87:48:d5:26:cb:7b:de:7d:86:05:58:66:02: 6e:19:29:c4:95:cd:f7:3f:6a:f1:ef:13:cb:9f:c3:38:1d:31: e6:3d:30:f4:5b:90:c5:87:87:99:4f:14:bf:bd:d5:9f:2b:72: ac:34:cb:eb:1f:94:45:e4:6a:c1:7a:da:d1:bc:4d:67:4f:9c: 3e:8e:37:3b:73:6a:f5:9a:64:c8:c6:9f:0d:10:36:fd:c5:27: 1c:b0:11:1f:60:60:3f:48:86:53:40:fa:77:df:4b:bd:16:c9: e7:cc:5b:81:b6:fe:1d:f2:3a:d4:89:ba:18:f1:76:24:d0:a5: c1:b9:ae:02:f9:c7:9f:d4:79:ba:0d:bf:51:9f:67:1c:41:56: e6:a7:52:d1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yGtcxUKD28eEoqO9r2sVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTdmMjJiZWViNTJjNmU1MWEyNDIyYjEzOTE0MmVlYTAzZmI1ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcjpNH1qAEPADl7T+U14MOo3ExL5 VLq9pQKVbEThV4U0Xsy2qonA4whLbWaPuMetGfzH5qyQHUjqqPTnrQcvy9NOEC6r qz699WuUfGNm9i+49w6bGphI9DmTE62m5rZa4edBbTG6uvZCBjLiW2BPhPUCZ85D zj3VIjizkAL2vwtvYAreUdY6+2oZ5VTbrfIuijWewTSzMcpZJA+SB0eiDK6jFzqH PCwC6Lr3gZcFR8hV/PYVQoCzpKMdGOmibd9jcM2Rr0F3VcDS+Ot5hiTVL8zeeP+R eOEcGu0ynASOHPQ8apKTSdfFjwB4o9917g6NOX73a1u7HnkWGAPNVMwyGQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG5/Ir7rUsblGiQisTkULuoD+11NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzQyZjU0 Yi01N2MwLTQyNGEtYWNmNS00ZGQ0ZDBmNTM4NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNDJmNTRi LTU3YzAtNDI0YS1hY2Y1LTRkZDRkMGY1Mzg0OS8xL2JuOGl2dXRTeHVVYUpDS3hP UlF1NmdQN1hVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCTh/sMA0EAgACMAcDBQAqBcAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDDQjANBgkqhkiG9w0BAQsFAAOCAQEAd5kMUrBj9fIX l+vwHHAGCU0BwG4EUXyDaYCXmM2yUIkA64+mVAugzsBm7F49n+VxwIu/shyi1M57 gxfEU1Uk2iabtu3YEdzI1c5TUWAwdb3AvgSxeFnzm9bI2DtphGUWf3SJM9Lgv5oW m0Dq6wuCFNuHSNUmy3vefYYFWGYCbhkpxJXN9z9q8e8Ty5/DOB0x5j0w9FuQxYeH mU8Uv73VnytyrDTL6x+UReRqwXra0bxNZ0+cPo43O3Nq9ZpkyMafDRA2/cUnHLAR H2BgP0iGU0D6d99LvRbJ58xbgbb+HfI61Im6GPF2JNClwbmuAvnHn9R5ug2/UZ9n HEFW5qdS0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:03 2026 by rpki-client