This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer File: bncLcU9m8PLURkAp382GW7fuds0.cer (raw, json) Hash identifier: OwVpSR9HBEgCfpkYWWP6T9POLk2qqO+4MOnH8P2rOZo= Subject key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAA8D398DCCA30175BDC2EB3E31F50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216107 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a8:d3:98:dc:ca:30:17:5b:dc:2e:b3:e3:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:39:98:11:fb:59:0b:b3:ab:24:84:ab:c1: 32:97:e7:3a:1e:f3:4b:b5:82:66:cd:73:bb:ce:8e: 74:b0:ef:12:20:82:39:52:01:8b:e7:8f:e3:9b:7b: 74:05:b3:73:b6:4e:50:8a:7b:02:75:40:c0:f3:66: 35:c7:fe:4b:4d:b5:a1:08:74:13:19:da:71:ab:39: 13:87:db:6b:c0:7f:89:60:e1:46:83:25:02:3b:34: 0a:ac:bc:8f:6b:07:1d:3f:a7:ad:62:54:09:37:66: 51:78:6b:0f:56:60:87:dd:3e:2c:d1:04:b4:b9:8f: ad:30:b4:b8:86:99:bc:ff:9f:ee:cc:d7:d7:e7:cd: 39:e4:bc:6a:49:72:24:a9:19:02:f8:a1:be:bb:c4: 59:a5:2c:f7:a4:68:64:44:26:56:4c:64:f0:f3:4f: 29:3d:0e:54:79:61:a0:11:de:b1:90:0d:d4:8f:be: b3:28:de:fc:d1:7e:86:54:49:27:da:8b:98:5f:71: 66:c2:eb:a8:22:6c:37:a4:d7:51:a6:f3:c5:9b:73: e4:a2:59:53:c1:c9:a3:a2:91:74:53:d2:a6:64:b7: f9:a1:02:ed:f0:9b:05:55:98:9e:b3:75:b8:59:31: 8b:06:5b:29:b0:f9:cb:66:93:af:0e:7c:b8:0d:6d: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216107 Signature Algorithm: sha256WithRSAEncryption b1:5e:ce:3a:3a:34:c9:88:8e:9d:cb:b1:3f:81:8e:e9:04:a5: 23:3e:bd:8d:0a:dd:ef:66:2b:97:90:38:90:d4:6c:34:f9:ea: 96:92:59:94:55:4b:0e:18:38:b5:56:eb:ad:92:7d:1a:3e:1c: 66:40:aa:24:0a:39:ef:b7:5f:49:0b:eb:98:db:dd:a3:cc:aa: 1f:91:b0:5c:1b:42:94:cc:f2:bf:fc:b9:9a:38:24:82:9e:87: 69:75:db:ea:c7:fb:04:1e:71:aa:e5:72:6f:75:d4:5f:36:fb: 23:98:9c:99:d0:74:89:99:a0:1a:b1:ce:9a:9e:2f:ba:0c:cb: 64:a2:68:c5:27:26:3c:80:34:37:0f:b8:5c:89:8f:0e:a5:6a: 6c:eb:09:08:b2:ed:0b:25:5a:64:82:3d:7e:7d:cf:54:d2:af: b9:a6:3d:76:6b:00:7f:08:af:f7:0e:9d:80:e5:57:8d:37:08: 18:b6:c1:21:cb:19:31:57:ae:ab:fd:2f:ba:6e:a6:65:26:c6: 6b:a9:d7:97:93:ca:2e:9a:37:d2:ef:d1:42:21:de:4b:fa:c9: c6:36:7e:66:62:3f:ea:9c:0a:7f:ee:82:81:f5:08:bd:68:db: 45:12:dd:8c:f1:af:a5:ee:bc:0b:8f:09:be:bc:bb:1d:37:73: 07:f1:68:dd -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26qjTmNzKMBdb3C6z4x9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTc3MGI3MTRmNjZmMGYyZDQ0NjQwMjlkZmNkODY1YmI3ZWU3NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWo5mBH7WQuzqySEq8Eyl+c6HvNL tYJmzXO7zo50sO8SIII5UgGL54/jm3t0BbNztk5QinsCdUDA82Y1x/5LTbWhCHQT GdpxqzkTh9trwH+JYOFGgyUCOzQKrLyPawcdP6etYlQJN2ZReGsPVmCH3T4s0QS0 uY+tMLS4hpm8/5/uzNfX58055LxqSXIkqRkC+KG+u8RZpSz3pGhkRCZWTGTw808p PQ5UeWGgEd6xkA3Uj76zKN780X6GVEkn2ouYX3FmwuuoImw3pNdRpvPFm3PkollT wcmjopF0U9KmZLf5oQLt8JsFVZies3W4WTGLBlspsPnLZpOvDny4DW2JJwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFG53C3FPZvDy1EZAKd/Nhlu37nbNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI4Y2Q2 MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0My8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjhj ZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQzLzAvNkU3NzBCNzE0RjY2 RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTCsw DQYJKoZIhvcNAQELBQADggEBALFezjo6NMmIjp3LsT+BjukEpSM+vY0K3e9mK5eQ OJDUbDT56paSWZRVSw4YOLVW662SfRo+HGZAqiQKOe+3X0kL65jb3aPMqh+RsFwb QpTM8r/8uZo4JIKeh2l12+rH+wQecarlcm911F82+yOYnJnQdImZoBqxzpqeL7oM y2SiaMUnJjyANDcPuFyJjw6lamzrCQiy7QslWmSCPX59z1TSr7mmPXZrAH8Ir/cO nYDlV403CBi2wSHLGTFXrqv9L7pupmUmxmup15eTyi6aN9Lv0UIh3kv6ycY2fmZi P+qcCn/ugoH1CL1o20US3Yzxr6XuvAuPCb68ux03cwfxaN0= -----END CERTIFICATE-----Generated at Sat Feb 7 06:12:32 2026 by rpki-client