This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer (raw, json) Hash identifier: /8l6bzK6vv6WAuIRJtwdeWgjovi/caiooIwxdXnzupU= Subject key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3660579B7364884C36070130D550E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205220 IP: 2a0a:c640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:60:57:9b:73:64:88:4c:36:07:01:30:d5:50:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:01:96:31:a5:4b:5b:c4:fa:3c:42:4f:be: fd:34:76:e6:b6:2e:dc:be:c3:25:a8:74:42:0c:3a: 91:44:f3:b6:22:fc:a0:f1:7a:8c:97:96:74:37:f3: 98:da:21:7e:01:b1:de:bd:d1:99:97:93:98:38:21: 5c:75:71:c6:44:b9:5d:d2:2e:eb:22:ef:3e:2d:d8: ed:d9:ef:a2:4e:60:98:6a:d9:35:ec:7f:2f:86:c1: 81:ab:dd:c2:d9:33:78:9e:a6:b1:01:36:48:ea:e7: 4d:4a:3c:83:be:b3:66:50:36:40:5f:b2:19:92:99: 45:5c:4b:47:4a:c7:87:96:24:7c:3c:24:86:db:01: 37:b6:89:26:f1:7f:5f:dd:ce:35:15:b7:91:3e:34: 1c:8d:e2:74:bb:2b:a8:8b:61:32:26:c5:37:60:c9: d6:79:99:6c:63:dd:60:0b:98:cc:38:a5:14:b8:ec: a6:06:f4:7b:d9:0a:e2:e0:fd:cd:bc:55:86:ca:32: 42:c4:4b:95:de:78:16:74:43:4e:2a:f3:b4:87:af: 16:1a:46:c6:d7:f9:40:a0:ea:3f:e5:db:43:cb:a5: f9:4c:76:f1:05:a0:97:4d:b5:6e:c6:9b:49:07:ea: 94:11:d3:ed:3f:38:f9:3a:13:43:fb:28:6f:8a:b2: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:c640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205220 Signature Algorithm: sha256WithRSAEncryption 2c:00:53:7d:ab:a4:5f:f6:0d:2d:8b:19:0d:27:16:ac:d9:88: be:02:01:5d:b0:97:56:2b:f8:0f:5f:ca:b2:c6:b5:89:e4:8c: 0a:35:73:81:02:f8:0d:0e:d4:39:9e:00:36:88:16:09:0c:ff: 07:29:93:98:e9:b9:4d:51:fb:87:2a:af:e9:cd:d9:3d:c3:a0: 07:2a:f9:4d:63:57:f5:c7:cf:be:90:35:51:7e:c5:75:06:c7: 3f:9f:6b:ea:58:aa:63:11:0b:2a:7c:3b:82:46:7c:41:bd:3d: e0:5f:64:e3:ce:86:e7:8e:ad:9c:b0:6b:3a:36:1b:ff:f0:69: f6:5f:38:12:1f:c1:2a:d9:27:16:22:66:be:4b:ea:91:8f:75: 33:2b:a4:db:43:c1:3f:4d:88:37:6a:dd:3c:d5:5e:76:eb:eb: 0a:e2:18:1c:9c:ed:d2:ce:d1:45:db:d6:56:e1:d4:34:1d:2f: e5:11:00:e3:9e:8b:9b:5e:7a:6c:cd:78:04:7a:16:c3:35:c6: e6:58:84:4b:38:4b:8d:ea:95:28:f3:8e:a5:0c:bd:15:92:22: 0a:93:b8:05:a5:49:c7:15:d3:bf:cc:f5:ec:4d:f6:42:13:28: c0:cf:65:39:54:de:d4:c1:e1:80:d0:77:1c:d9:3c:24:f9:7d: 70:be:90:7e -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt7NmBXm3NkiEw2BwEw1VDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzM4MGM4YjRlNTVlNTkwODFhZjczYWExOTM1ZTEwYTAxMjA1N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnYBljGlS1vE+jxCT779NHbmti7c vsMlqHRCDDqRRPO2Ivyg8XqMl5Z0N/OY2iF+AbHevdGZl5OYOCFcdXHGRLld0i7r Iu8+Ldjt2e+iTmCYatk17H8vhsGBq93C2TN4nqaxATZI6udNSjyDvrNmUDZAX7IZ kplFXEtHSseHliR8PCSG2wE3tokm8X9f3c41FbeRPjQcjeJ0uyuoi2EyJsU3YMnW eZlsY91gC5jMOKUUuOymBvR72Qri4P3NvFWGyjJCxEuV3ngWdENOKvO0h68WGkbG 1/lAoOo/5dtDy6X5THbxBaCXTbVuxptJB+qUEdPtPzj5OhND+yhvirKQ3wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFGw4DItOVeWQga9zqhk14QoBIFf6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzNlNDJj Ny0xNTVhLTQ5YWEtYWEwMC0wOGYwOTRkYWYyNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvM2U0MmM3 LTE1NWEtNDlhYS1hYTAwLTA4ZjA5NGRhZjI0Ny8xL2JEZ01pMDVWNVpDQnIzT3FH VFhoQ2dFZ1Zfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgrGQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDIaQwDQYJKoZIhvcNAQELBQADggEBACwAU32rpF/2DS2LGQ0nFqzZiL4CAV2w l1Yr+A9fyrLGtYnkjAo1c4EC+A0O1DmeADaIFgkM/wcpk5jpuU1R+4cqr+nN2T3D oAcq+U1jV/XHz76QNVF+xXUGxz+fa+pYqmMRCyp8O4JGfEG9PeBfZOPOhueOrZyw azo2G//wafZfOBIfwSrZJxYiZr5L6pGPdTMrpNtDwT9NiDdq3TzVXnbr6wriGByc 7dLO0UXb1lbh1DQdL+URAOOei5teemzNeAR6FsM1xuZYhEs4S43qlSjzjqUMvRWS IgqTuAWlSccV07/M9exN9kITKMDPZTlU3tTB4YDQdxzZPCT5fXC+kH4= -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:37 2026 by rpki-client