This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer File: bDg245a8UGRDYGuf1zN6kg5x3tE.cer (raw, json) Hash identifier: ExloMaDPvkBxXTb3OKYJ3UNa31czsq6CJYE+CRP2E7o= Subject key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E60473C933D29852A0C7DE90308F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200669 IP: 217.10.80.0/20 IP: 2a00:e160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:60:47:3c:93:3d:29:85:2a:0c:7d:e9:03:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c3836e396bc506443606b9fd7337a920e71ded1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:fc:f2:74:48:d3:95:51:51:5e:07:fb:fe: e1:df:7d:bc:55:47:8c:3a:a9:23:6e:d3:d9:22:b8: 63:ff:2b:ef:c3:6c:87:40:cc:c6:06:43:17:05:1c: 0c:a3:ac:76:a3:f1:64:7f:d9:d2:43:06:f7:22:e7: 24:fd:c3:a1:ad:cd:d2:3d:7d:dc:05:09:ca:68:ce: ed:bd:66:bd:ff:5a:3b:60:3d:ae:3c:dc:ec:d2:b4: 8c:90:ee:dd:96:8a:00:4a:70:9b:9b:98:b4:b2:19: 32:dd:50:3f:83:83:2a:4c:e2:40:b4:06:42:29:ae: 51:3c:8d:09:0c:76:96:1d:1a:e1:0e:ba:f9:d8:04: 2c:bb:28:45:c0:1d:10:3c:69:58:8a:ed:c9:1a:4c: 21:55:ff:da:8a:b1:7e:52:dd:e8:48:7d:45:d4:f0: b3:8f:0c:dd:97:d7:f2:f5:e5:d2:b5:6c:b0:dc:9e: f3:73:d7:51:cc:3d:f0:c1:71:e2:b1:18:f3:66:2c: 25:f5:37:a4:ca:cc:55:de:ce:ca:b2:99:60:65:33: ba:ac:17:04:d1:28:9f:cc:1b:bb:ac:e2:05:f1:bf: e3:ea:58:c6:85:89:6c:7b:fd:94:47:a2:8b:6d:d2: c1:9b:2c:50:62:58:c7:48:58:d3:4f:45:ca:28:32: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.10.80.0/20 IPv6: 2a00:e160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200669 Signature Algorithm: sha256WithRSAEncryption 53:36:99:39:e9:78:17:01:a4:ff:ae:09:15:1e:d7:6a:ad:cc: d7:35:9b:9b:5d:4f:32:fe:75:67:b1:76:f7:cb:30:ac:88:da: c4:e5:ea:6e:c6:a7:1c:07:23:b9:67:8f:c6:a6:12:7e:37:d4: 22:35:b0:33:ac:c8:88:8d:89:94:af:58:19:6d:9d:6e:cc:70: b8:9a:86:51:a6:5e:b6:13:c1:7c:e5:01:4d:da:f7:ba:e2:c3: 9e:45:0a:12:9d:d2:26:8b:cf:03:01:f7:a4:b9:ca:d5:d6:6e: 22:00:9c:7c:e1:ab:d1:da:4a:11:81:5f:41:c9:05:97:f8:dd: 25:3d:be:20:b0:0b:a1:04:29:ff:98:46:b9:b4:8c:91:4d:ae: 34:5d:b8:4c:e4:fb:f5:2f:15:45:33:d4:84:6a:7a:7d:b4:27: b3:04:8a:88:01:e1:a8:95:25:31:d0:c9:39:e6:92:f6:fa:34: 41:64:78:a6:7b:bc:c7:27:87:d6:55:8d:cf:31:07:ef:ec:dd: 18:a4:ee:8e:7c:5a:27:97:d0:b3:e8:e0:d5:e0:f8:e9:97:3a: 86:66:62:25:6b:91:0f:cd:05:03:e7:d0:42:f5:35:ae:15:ac: ec:7c:c1:3d:c9:8d:2f:52:83:23:af:45:0f:5d:d0:a5:df:7f: 42:92:26:d3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fmBHPJM9KYUqDH3pAwjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzM4MzZlMzk2YmM1MDY0NDM2MDZiOWZkNzMzN2E5MjBlNzFkZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8L88nRI05VRUV4H+/7h3328VUeM OqkjbtPZIrhj/yvvw2yHQMzGBkMXBRwMo6x2o/Fkf9nSQwb3Iuck/cOhrc3SPX3c BQnKaM7tvWa9/1o7YD2uPNzs0rSMkO7dlooASnCbm5i0shky3VA/g4MqTOJAtAZC Ka5RPI0JDHaWHRrhDrr52AQsuyhFwB0QPGlYiu3JGkwhVf/airF+Ut3oSH1F1PCz jwzdl9fy9eXStWyw3J7zc9dRzD3wwXHisRjzZiwl9TekysxV3s7KsplgZTO6rBcE 0SifzBu7rOIF8b/j6ljGhYlse/2UR6KLbdLBmyxQYljHSFjTT0XKKDLE9QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGw4NuOWvFBkQ2Brn9czepIOcd7RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2YzOTk0 ZS0wYjEwLTQzODMtYjM0Yy1lYjZiMTNjNWUyNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZjM5OTRl LTBiMTAtNDM4My1iMzRjLWViNmIxM2M1ZTI2OC8xL2JEZzI0NWE4VUdSRFlHdWYx ek42a2c1eDN0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2QpQMA0EAgACMAcDBQAqAOFgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMP3TANBgkqhkiG9w0BAQsFAAOCAQEAUzaZOel4FwGk /64JFR7Xaq3M1zWbm11PMv51Z7F298swrIjaxOXqbsanHAcjuWePxqYSfjfUIjWw M6zIiI2JlK9YGW2dbsxwuJqGUaZethPBfOUBTdr3uuLDnkUKEp3SJovPAwH3pLnK 1dZuIgCcfOGr0dpKEYFfQckFl/jdJT2+ILALoQQp/5hGubSMkU2uNF24TOT79S8V RTPUhGp6fbQnswSKiAHhqJUlMdDJOeaS9vo0QWR4pnu8xyeH1lWNzzEH7+zdGKTu jnxaJ5fQs+jg1eD46Zc6hmZiJWuRD80FA+fQQvU1rhWs7HzBPcmNL1KDI69FD13Q pd9/QpIm0w== -----END CERTIFICATE-----Generated at Sat Jan 3 00:55:41 2026 by rpki-client