This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer (raw, json) Hash identifier: LLrfEnSIBaItk9McCagxe5KlU8YWG5mqea1oN+m/+Oo= Subject key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED775FDA505771987E09CA5D63AA76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212038 IP: 185.218.197.0/24 IP: 2a10:c780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:77:5f:da:50:57:71:98:7e:09:ca:5d:63:aa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:86:69:0b:a6:60:69:fa:99:6d:6b:c5:e8:e0: bf:b7:31:a0:a7:8e:7e:21:41:cc:45:ca:ed:df:f6: 78:b8:31:cb:df:05:14:31:44:2a:10:33:f2:94:8e: 87:a9:81:9f:74:4f:43:fd:64:4d:74:74:19:86:4c: 30:a4:bb:6b:a5:ee:03:f0:87:23:ab:dd:05:4c:85: 45:0f:c8:83:68:1a:51:e6:44:6e:7b:bf:91:60:36: 44:5e:1c:53:e7:5f:93:5b:3d:64:21:a1:bd:6e:c5: af:5c:1e:8f:43:28:7c:15:60:38:84:60:bf:65:5a: 44:e1:1a:32:1c:69:7b:21:64:ef:2f:62:5e:aa:9b: 6d:f1:58:12:9e:04:b9:3e:f8:e0:0c:91:18:62:0a: 3c:cc:0e:fc:ff:6e:eb:66:d4:d0:2c:1c:a7:40:37: 4c:ec:b8:c8:43:83:fd:87:fe:46:c6:f2:bc:c9:a4: 81:0e:06:7b:b7:0f:20:1b:42:54:0d:6a:27:01:55: aa:84:76:8f:2e:2d:47:20:bc:94:c1:af:97:8c:3a: a9:e1:f3:c5:54:13:8a:bc:a0:b7:18:6a:27:dd:8b: b9:19:67:aa:26:1c:9d:4c:5b:7f:84:e0:ec:a5:37: 9c:9e:97:78:66:66:65:c1:d8:61:be:69:88:53:3e: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.197.0/24 IPv6: 2a10:c780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212038 Signature Algorithm: sha256WithRSAEncryption 13:8a:20:64:97:78:c7:14:a3:ce:16:0a:66:fb:cd:2f:a1:f7: ab:a8:4a:52:38:87:41:cf:7d:fa:d0:a2:ea:6a:4b:f1:53:35: 55:63:98:c2:7c:c4:49:16:19:5e:20:c8:2c:d7:7e:5c:8b:ce: fb:b8:fd:f1:ce:a7:98:25:5b:76:e5:3f:64:d5:a8:6a:70:39: 32:3d:ba:8f:c0:fe:cb:e1:b2:30:0e:eb:18:7a:be:a6:b3:9e: da:bc:6c:ae:2b:91:5a:60:57:de:db:1e:79:6c:64:e4:76:81: 7b:28:06:32:4b:ba:13:2f:f3:6e:ce:eb:2e:94:a2:b7:ec:2c: 61:3d:01:4e:59:a2:d4:61:6f:71:9c:61:f5:d7:38:d7:6e:a5: 71:20:51:c5:fc:ec:41:ee:7f:24:ae:74:d4:5f:91:f0:0c:90: 0e:c0:17:61:8b:06:51:aa:16:12:c0:c7:81:e1:72:37:ce:27: ac:ce:d9:0d:64:25:57:24:d6:ec:8d:4b:7d:80:df:7e:a2:1e: e3:57:44:c3:e2:a9:e8:fb:23:e0:74:cf:60:53:a9:fa:96:9a: 2f:64:36:d5:fe:02:4f:7e:9d:06:d2:3b:8f:f3:5a:b9:fa:2e: 35:37:89:8b:4a:29:f5:d4:14:4d:84:4b:ec:35:d8:73:6e:66: 66:28:ed:04 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87Xdf2lBXcZh+CcpdY6p2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA2MDQ3NDA4ODYwNmVjNGVlOGVlZDdjNDFiNjk0M2Y4OWEwOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IZpC6ZgafqZbWvF6OC/tzGgp45+ IUHMRcrt3/Z4uDHL3wUUMUQqEDPylI6HqYGfdE9D/WRNdHQZhkwwpLtrpe4D8Icj q90FTIVFD8iDaBpR5kRue7+RYDZEXhxT51+TWz1kIaG9bsWvXB6PQyh8FWA4hGC/ ZVpE4RoyHGl7IWTvL2Jeqptt8VgSngS5PvjgDJEYYgo8zA78/27rZtTQLBynQDdM 7LjIQ4P9h/5GxvK8yaSBDgZ7tw8gG0JUDWonAVWqhHaPLi1HILyUwa+XjDqp4fPF VBOKvKC3GGon3Yu5GWeqJhydTFt/hODspTecnpd4ZmZlwdhhvmmIUz6OrQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG8GBHQIhgbsTuju18QbaUP4mgm9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzJiZmE2 Yi1iYWE4LTRjOGMtOWJjNi03YWE2ZWIwMTIxOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMmJmYTZi LWJhYTgtNGM4Yy05YmM2LTdhYTZlYjAxMjE5MC8xL2J3WUVkQWlHQnV4TzZPN1h4 QnRwUV9pYUNiMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudrFMA0EAgACMAcDBQMqEMeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8RjANBgkqhkiG9w0BAQsFAAOCAQEAE4ogZJd4xxSj zhYKZvvNL6H3q6hKUjiHQc99+tCi6mpL8VM1VWOYwnzESRYZXiDILNd+XIvO+7j9 8c6nmCVbduU/ZNWoanA5Mj26j8D+y+GyMA7rGHq+prOe2rxsriuRWmBX3tseeWxk 5HaBeygGMku6Ey/zbs7rLpSit+wsYT0BTlmi1GFvcZxh9dc4126lcSBRxfzsQe5/ JK501F+R8AyQDsAXYYsGUaoWEsDHgeFyN84nrM7ZDWQlVyTW7I1LfYDffqIe41dE w+Kp6Psj4HTPYFOp+paaL2Q21f4CT36dBtI7j/NaufouNTeJi0op9dQUTYRL7DXY c25mZijtBA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:56 2026 by rpki-client