This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer File: bF5O9VFnmf_guxuDkxfb01W7eps.cer (raw, json) Hash identifier: iCiMhM5UOwfS5tAT558VzOXY0po0+aF0VDUgGLmwvAY= Subject key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B21AB3397D9D8BB93E7117EE6744C4842 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 11:00:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47527 AS: 60422 AS: 196724 IP: 45.95.208.0/24 IP: 46.30.120.0/21 IP: 62.69.152.0/21 IP: 79.174.152.0/21 IP: 91.223.235.0/24 IP: 91.230.239.0/24 IP: 178.23.176.0/21 IP: 185.31.76.0/22 IP: 185.126.152.0/23 IP: 185.208.212.0/22 IP: 188.116.39.0/24 IP: 194.247.61.0/24 IP: 195.182.36.0/24 IP: 213.142.140.0/23 IP: 2a00:1b18::/29 IP: 2a00:1cf0::/29 IP: 2a00:b920::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:33:97:d9:d8:bb:93:e7:11:7e:e6:74:4c:48:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 11:00:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:70:7f:df:b7:75:dd:f8:66:ca:0d:7f:dd: b5:58:22:a7:36:d4:df:f5:f7:a5:a5:0a:57:96:0a: 17:04:ba:c4:19:bc:ee:8c:42:8f:58:b3:85:0a:63: 59:97:31:4b:43:b5:25:ff:56:f6:ae:c7:c6:d0:88: 43:8d:27:bb:75:c1:33:63:e1:22:e3:f8:ad:67:21: 48:16:69:ca:57:f2:b9:9a:e9:01:cf:f1:47:0d:c2: 58:40:74:e7:61:0e:35:ce:f7:00:e2:82:75:6b:35: 81:53:b6:c5:c7:b3:d6:5b:ed:30:43:20:f4:c8:31: eb:77:f9:41:18:be:a2:de:a1:87:32:df:3c:3c:9a: 57:85:28:9a:c3:10:8f:5d:a7:08:3f:6d:b0:ba:15: 72:27:69:6b:a0:64:cc:5a:36:40:d2:ad:12:80:d0: 02:cd:56:f3:df:17:7b:85:17:c1:81:23:fe:c8:6a: a0:36:49:78:3e:e7:f6:8f:57:86:a0:cc:2e:61:d4: 1a:74:22:65:e1:c9:3b:c8:75:4b:76:1e:3a:f0:9b: 6d:b8:9f:3b:8e:2c:5d:d0:09:88:22:1d:63:77:3c: b2:5c:0e:3f:78:5d:df:32:88:61:fd:1d:2c:10:09: 4a:20:6a:bb:80:ae:1b:7b:55:38:a3:d9:f2:6a:4f: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.208.0/24 46.30.120.0/21 62.69.152.0/21 79.174.152.0/21 91.223.235.0/24 91.230.239.0/24 178.23.176.0/21 185.31.76.0/22 185.126.152.0/23 185.208.212.0/22 188.116.39.0/24 194.247.61.0/24 195.182.36.0/24 213.142.140.0/23 IPv6: 2a00:1b18::/29 2a00:1cf0::/29 2a00:b920::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47527 60422 196724 Signature Algorithm: sha256WithRSAEncryption 8a:20:03:dd:2b:d1:ae:26:82:c9:91:56:b8:62:51:69:bb:34: e4:6c:c7:b0:be:58:a8:77:59:a9:d6:46:40:a1:14:c5:9b:ef: d9:65:cb:75:7f:98:98:43:ec:48:32:5e:75:a3:11:f5:8c:b3: 4e:c1:14:45:87:d1:b7:39:9d:9d:01:a0:6a:c5:4e:9a:07:20: 02:06:9b:c8:b3:7f:b5:1e:fb:fe:e8:2d:92:14:66:6a:a8:96: dc:b3:21:1b:e4:67:0d:37:94:a4:69:ff:5a:d3:23:ec:06:af: 6e:2d:03:81:2d:11:57:9d:38:56:db:1c:34:c8:8b:be:06:18: b6:ba:24:6d:3f:34:71:be:55:fe:47:81:58:39:b3:fa:dd:56: 1e:1b:9e:d1:52:18:cf:2c:78:7d:35:f9:55:ad:29:c6:bd:3a: 72:0b:68:e0:37:d8:5b:ae:fe:e0:40:27:f0:6d:54:b3:ba:07: f6:ae:d4:c7:a3:e4:f6:32:3f:c9:e5:d1:a7:65:20:d2:e3:82: 75:93:6b:f0:76:fd:d1:04:a5:0e:24:74:2b:ec:32:44:08:19: 8a:aa:c7:11:6b:8d:19:db:59:bc:3e:5c:cf:32:f7:58:d4:0b: 8d:cc:2a:d3:5c:07:56:92:e2:d9:6b:16:44:d7:a2:b5:91:e5: 7b:55:e6:a1 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISAZshqzOX2di7k+cRfuZ0TEhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTEwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVlNGVmNTUxNjc5OWZmZTBiYjFiODM5MzE3ZGJkMzU1YmI3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJwf9+3dd34ZsoNf921WCKnNtTf 9felpQpXlgoXBLrEGbzujEKPWLOFCmNZlzFLQ7Ul/1b2rsfG0IhDjSe7dcEzY+Ei 4/itZyFIFmnKV/K5mukBz/FHDcJYQHTnYQ41zvcA4oJ1azWBU7bFx7PWW+0wQyD0 yDHrd/lBGL6i3qGHMt88PJpXhSiawxCPXacIP22wuhVyJ2lroGTMWjZA0q0SgNAC zVbz3xd7hRfBgSP+yGqgNkl4Puf2j1eGoMwuYdQadCJl4ck7yHVLdh468JttuJ87 jixd0AmIIh1jdzyyXA4/eF3fMohh/R0sEAlKIGq7gK4be1U4o9nyak/eXwIDAQAB o4IDFjCCAxIwHQYDVR0OBBYEFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzlkOTY4 MC1mZmJmLTQzZDEtOWMwNS0xYmU3NTNmYWQxYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOWQ5Njgw LWZmYmYtNDNkMS05YzA1LTFiZTc1M2ZhZDFiZi8xL2JGNU85VkZubWZfZ3V4dURr eGZiMDFXN2Vwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGKBggrBgEF BQcBBwEB/wR7MHkwWgQCAAEwVAMEAC1f0AMEAy4eeAMEAz5FmAMEA0+umAMEAFvf 6wMEAFvm7wMEA7IXsAMEArkfTAMEAbl+mAMEArnQ1AMEALx0JwMEAML3PQMEAMO2 JAMEAdWOjDAbBAIAAjAVAwUDKgAbGAMFAyoAHPADBQMqALkgMCQGCCsGAQUFBwEI AQH/BBUwE6ARMA8CAwC5pwIDAOwGAgMDAHQwDQYJKoZIhvcNAQELBQADggEBAIog A90r0a4mgsmRVrhiUWm7NORsx7C+WKh3WanWRkChFMWb79lly3V/mJhD7EgyXnWj EfWMs07BFEWH0bc5nZ0BoGrFTpoHIAIGm8izf7Ue+/7oLZIUZmqoltyzIRvkZw03 lKRp/1rTI+wGr24tA4EtEVedOFbbHDTIi74GGLa6JG0/NHG+Vf5HgVg5s/rdVh4b ntFSGM8seH01+VWtKca9OnILaOA32Fuu/uBAJ/BtVLO6B/au1Mej5PYyP8nl0adl INLjgnWTa/B2/dEEpQ4kdCvsMkQIGYqqxxFrjRnbWbw+XM8y91jUC43MKtNcB1aS 4tlrFkTXorWR5XtV5qE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:50:19 2025 by rpki-client