This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer File: bwsVGTgW_RXc_QR9tO7KZykSu2A.cer (raw, json) Hash identifier: m4ReryBRUHmpsnw4DVJAysf6VwERmhhl/6LhnoFDg54= Subject key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1111C235C24D36892529CBBDD976DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57465 IP: 134.90.216.0/21 IP: 185.167.232.0/22 IP: 2a03:d380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:11:c2:35:c2:4d:36:89:25:29:cb:bd:d9:76:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:f4:05:a9:9e:91:54:b9:5f:be:8e:ed:87: c2:b0:2c:5f:cc:b4:9c:a9:4d:14:4d:c5:13:b5:95: 7e:e5:81:e5:11:92:79:16:1f:14:3e:e3:2d:cd:d5: 1d:9e:47:47:77:ab:82:a4:8d:3a:5a:b1:9e:6f:ac: 95:20:3e:f0:63:63:4e:56:c5:a4:38:ed:bf:5b:9a: 20:46:2e:41:17:92:98:2b:8b:ba:57:49:7a:f3:68: e8:b7:41:b8:45:cf:fd:74:38:f6:e9:5b:ca:92:0f: 1d:1a:0f:e8:73:cf:db:da:61:b8:39:bc:3a:82:68: d3:2d:25:45:97:5b:38:c3:06:da:e9:0d:08:a7:4d: 1d:8f:0a:9c:b6:3d:29:cc:67:35:28:10:8d:b5:66: 6e:b8:4d:80:a2:8b:6e:16:03:dd:31:16:5f:21:b2: 12:f1:ae:be:a2:65:b9:39:ab:4d:2f:af:db:31:45: 62:45:a7:39:4c:6f:7a:86:28:1b:a4:6c:5d:df:bc: a8:a3:0f:f6:f5:6e:f8:54:e2:ca:ca:fb:31:ac:f0: e9:14:a4:9c:58:86:1c:fe:09:33:77:d2:ba:d2:09: ce:68:69:7d:09:70:a2:2b:a2:48:94:78:1b:ff:f1: e6:6b:c7:59:21:af:87:be:06:c6:55:e3:b3:f0:00: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.90.216.0/21 185.167.232.0/22 IPv6: 2a03:d380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57465 Signature Algorithm: sha256WithRSAEncryption ac:bc:13:d6:e6:39:a1:65:11:53:cc:9a:33:5c:9e:37:6a:b7: 84:de:18:4c:06:8a:c5:1e:7b:45:96:d0:7f:43:d6:ae:54:3b: 4d:32:3f:4e:31:36:0b:dd:d0:44:73:c8:98:40:10:ed:32:85: af:53:16:e5:f0:4a:df:f2:b2:77:85:d3:d9:e4:28:fc:eb:35: c6:a6:06:a1:0c:12:76:80:b5:b6:63:93:e8:e1:b9:54:f1:22: 21:00:ed:de:8b:7b:54:1d:80:c4:7e:3d:e3:5d:c7:39:bb:da: 86:de:52:f3:d3:c6:eb:01:90:d8:30:88:53:f5:77:35:67:ca: 41:b3:b7:6a:22:da:f2:4a:1a:65:ee:28:56:87:fb:de:3f:cd: f9:58:69:b7:4c:2c:29:af:5e:3b:2f:6d:8a:0c:9c:e2:02:82: 6e:ba:ff:b4:7c:2e:84:b9:32:6e:a5:56:ab:f6:ba:1b:e3:72: e2:20:30:98:8e:37:ce:60:7d:dc:61:19:a0:4b:6d:17:bc:21: ee:de:ed:44:09:36:0e:e8:58:55:03:60:42:86:18:3a:14:8f: b5:a9:40:d3:2e:1e:fe:74:49:49:67:b5:32:46:86:61:1c:1b: 50:19:48:95:50:8e:59:8f:f0:88:bf:8a:be:80:90:89:6a:af: ff:1d:ea:6d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8ERHCNcJNNoklKcu92XbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjBiMTUxOTM4MTZmZDE1ZGNmZDA0N2RiNGVlY2E2NzI5MTJiYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8f0BamekVS5X76O7YfCsCxfzLSc qU0UTcUTtZV+5YHlEZJ5Fh8UPuMtzdUdnkdHd6uCpI06WrGeb6yVID7wY2NOVsWk OO2/W5ogRi5BF5KYK4u6V0l682jot0G4Rc/9dDj26VvKkg8dGg/oc8/b2mG4Obw6 gmjTLSVFl1s4wwba6Q0Ip00djwqctj0pzGc1KBCNtWZuuE2AootuFgPdMRZfIbIS 8a6+omW5OatNL6/bMUViRac5TG96higbpGxd37yoow/29W74VOLKyvsxrPDpFKSc WIYc/gkzd9K60gnOaGl9CXCiK6JIlHgb//Hma8dZIa+HvgbGVeOz8AABBQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFG8LFRk4Fv0V3P0EfbTuymcpErtgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1Lzk1ODg0 MS1mNmIwLTQyNDktODA0Ni05Y2Y4NDNmMDU2NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvOTU4ODQx LWY2YjAtNDI0OS04MDQ2LTljZjg0M2YwNTY3MC8xL2J3c1ZHVGdXX1JYY19RUjl0 TzdLWnlrU3UyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDhlrYAwQCuafoMA0EAgACMAcDBQAqA9OAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgeTANBgkqhkiG9w0BAQsFAAOCAQEArLwT 1uY5oWURU8yaM1yeN2q3hN4YTAaKxR57RZbQf0PWrlQ7TTI/TjE2C93QRHPImEAQ 7TKFr1MW5fBK3/Kyd4XT2eQo/Os1xqYGoQwSdoC1tmOT6OG5VPEiIQDt3ot7VB2A xH49413HObvaht5S89PG6wGQ2DCIU/V3NWfKQbO3aiLa8koaZe4oVof73j/N+Vhp t0wsKa9eOy9tigyc4gKCbrr/tHwuhLkybqVWq/a6G+Ny4iAwmI43zmB93GEZoEtt F7wh7t7tRAk2DuhYVQNgQoYYOhSPtalA0y4e/nRJSWe1MkaGYRwbUBlIlVCOWY/w iL+KvoCQiWqv/x3qbQ== -----END CERTIFICATE-----Generated at Sat Jan 24 11:57:24 2026 by rpki-client