This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer File: buw_AiBaTTSwW7hI6LYrL_XlAFg.cer (raw, json) Hash identifier: jVh3GUcN7bHQ5ApCRI1ykkDpZCobVAFARjkvJcBJ6S4= Subject key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B02498E09984AFF6FDC8D676572BC95DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 08:45:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203031 AS: 210440 IP: 194.153.159.128/26 IP: 2001:678:120::/48 IP: 2001:678:10d0::/48 IP: 2001:7f8:fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:49:8e:09:98:4a:ff:6f:dc:8d:67:65:72:bc:95:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 08:45:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:ef:2e:20:9a:0c:e9:09:cc:e6:b0:48:d5: 78:23:3b:f2:e1:d1:f3:ff:d5:5a:98:4b:ae:52:84: f4:ce:b5:f0:9c:a5:be:fe:a1:f1:59:b3:fe:59:53: 1a:14:40:0a:74:34:7d:72:0d:80:69:6f:bf:0c:96: 8a:03:6c:5b:de:6c:41:ef:72:94:c1:4d:4e:03:0b: 83:9b:da:69:82:5d:cf:93:35:8a:af:b0:ed:4d:fd: 47:77:9f:bf:35:a5:9d:45:b9:66:4d:ac:db:9c:78: 50:91:f1:50:dc:a2:94:8b:fb:3b:b5:05:c5:a5:5f: 6b:78:97:f0:e2:86:2e:27:c5:06:50:e6:6e:92:da: d9:4f:ab:39:1b:b8:bf:58:98:2b:1b:84:94:df:a2: cc:c0:9d:1a:84:77:ba:74:30:0c:aa:28:ce:1e:4e: 67:99:67:ca:3f:c7:21:4f:f6:99:cb:a5:1d:67:c5: 9f:c7:5e:03:5b:67:4b:f1:56:94:b4:24:d4:58:cf: 4f:de:9a:59:b7:d4:00:cd:99:66:8e:ad:88:ac:63: b1:9a:2e:04:69:e5:20:d9:f7:67:d5:b9:cd:12:a5: 46:09:40:23:00:af:89:e5:70:9b:66:57:1a:71:f6: 77:dd:2e:11:1b:1c:1d:48:db:57:4f:30:a3:29:6c: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.128/26 IPv6: 2001:678:120::/48 2001:678:10d0::/48 2001:7f8:fc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203031 210440 Signature Algorithm: sha256WithRSAEncryption 6f:45:bd:71:09:03:c6:f5:ef:d2:62:f1:15:06:af:36:7f:b7: 39:17:0a:2b:c2:59:1d:2a:20:c8:d6:27:e6:dd:ab:20:fe:f0: 0d:0c:57:34:f1:de:50:ca:db:84:31:3e:44:07:be:ae:f0:78: 71:f0:1d:a3:f3:fa:31:75:4c:86:b2:0f:12:aa:b7:f4:9e:fd: 64:12:ef:c4:31:8c:f6:1c:ae:9c:4f:ed:6e:2b:11:af:58:c6: 15:32:84:91:d6:6a:a7:ab:d2:7b:93:c3:2c:14:70:27:61:16: 81:a5:ce:a9:3c:99:f2:35:44:5c:c8:f9:2e:d5:e0:2e:b5:1c: 60:4c:76:4b:1e:9a:2d:6f:c0:9f:e4:82:c9:90:5d:58:4f:7c: e2:a5:ba:88:27:7b:8c:36:21:cc:e7:5b:55:45:d8:8c:ec:cf: 77:ce:8e:61:61:45:7e:b8:7d:2c:95:8a:09:83:21:fa:50:a4: 4b:5f:1e:f4:af:4f:88:82:1d:21:3a:1d:06:26:6d:53:ce:ef: 8a:18:20:53:70:e2:53:7e:76:50:0e:2e:a2:24:4c:bb:d1:6c: c2:ca:70:e6:8f:be:55:d7:df:ed:a0:0b:22:b1:10:eb:48:06: f5:e5:f2:2a:15:8c:c7:47:fb:02:9b:a2:d8:26:d3:1f:51:bc: e9:01:e9:da -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISAZsCSY4JmEr/b9yNZ2VyvJXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MDg0NTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWVjM2YwMjIwNWE0ZDM0YjA1YmI4NDhlOGI2MmIyZmY1ZTUwMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7nvLiCaDOkJzOawSNV4Izvy4dHz /9VamEuuUoT0zrXwnKW+/qHxWbP+WVMaFEAKdDR9cg2AaW+/DJaKA2xb3mxB73KU wU1OAwuDm9ppgl3PkzWKr7DtTf1Hd5+/NaWdRblmTazbnHhQkfFQ3KKUi/s7tQXF pV9reJfw4oYuJ8UGUOZuktrZT6s5G7i/WJgrG4SU36LMwJ0ahHe6dDAMqijOHk5n mWfKP8chT/aZy6UdZ8Wfx14DW2dL8VaUtCTUWM9P3ppZt9QAzZlmjq2IrGOxmi4E aeUg2fdn1bnNEqVGCUAjAK+J5XCbZlcacfZ33S4RGxwdSNtXTzCjKWwq0QIDAQAB o4IC5TCCAuEwHQYDVR0OBBYEFG7sPwIgWk00sFu4SOi2Ky/15QBYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U5N2My OWMxLTMxYmQtNGUwOS04MWViLTdhMTk5YjMxMTJhNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTk3 YzI5YzEtMzFiZC00ZTA5LTgxZWItN2ExOTliMzExMmE3LzAvNkVFQzNGMDIyMDVB NEQzNEIwNUJCODQ4RThCNjJCMkZGNUU1MDA1OC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwDQQCAAEwBwMF BsKZn4AwIQQCAAIwGwMHACABBngBIAMHACABBngQ0AMHACABB/gA/DAfBggrBgEF BQcBCAEB/wQQMA6gDDAKAgMDGRcCAwM2CDANBgkqhkiG9w0BAQsFAAOCAQEAb0W9 cQkDxvXv0mLxFQavNn+3ORcKK8JZHSogyNYn5t2rIP7wDQxXNPHeUMrbhDE+RAe+ rvB4cfAdo/P6MXVMhrIPEqq39J79ZBLvxDGM9hyunE/tbisRr1jGFTKEkdZqp6vS e5PDLBRwJ2EWgaXOqTyZ8jVEXMj5LtXgLrUcYEx2Sx6aLW/An+SCyZBdWE984qW6 iCd7jDYhzOdbVUXYjOzPd86OYWFFfrh9LJWKCYMh+lCkS18e9K9PiIIdITodBiZt U87vihggU3DiU352UA4uoiRMu9Fswspw5o++Vdff7aALIrEQ60gG9eXyKhWMx0f7 Apui2CbTH1G86QHp2g== -----END CERTIFICATE-----Generated at Wed Dec 10 10:34:42 2025 by rpki-client