This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer File: bMfzcUDRMXn5pckglknIDDfGpxM.cer (raw, json) Hash identifier: M16OxguSL+H+iFXGplfulsdgGXvkU93vFCY3KOmRCUU= Subject key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB54A2C2C8A9CD1DAA848D50362C3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:a2:c2:c8:a9:cd:1d:aa:84:8d:50:36:2c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:f2:29:1a:7d:95:84:43:60:85:b8:1e:9c: b7:c3:01:06:f7:54:38:04:f0:2c:45:c4:53:70:ce: 26:05:31:cc:ab:94:f7:e2:98:fd:63:b6:71:a6:73: 00:04:0f:41:87:07:05:1b:6d:d6:eb:c8:6a:bb:fa: 81:cc:63:7c:fd:d0:e8:bc:e0:43:1b:46:29:da:32: ba:c0:02:79:7f:2d:c2:1d:4d:f6:16:b6:77:58:13: 47:61:93:e7:b8:49:6b:6e:a2:36:58:44:a9:b9:a6: 92:ab:1c:79:26:de:2a:81:80:77:8c:87:d2:03:fb: c8:4f:8c:fa:ee:d9:57:59:a8:95:c4:d9:74:37:6b: 18:91:ea:c7:aa:ab:8d:a0:13:2e:a9:b5:11:02:b6: f8:ba:33:d5:2a:fa:38:28:b2:78:64:5a:55:ac:36: f7:9a:1c:8a:12:a3:3d:19:40:43:cd:9b:11:30:a0: 35:a5:4c:b7:87:29:3b:2b:af:6f:d2:83:13:b8:74: 41:9d:64:4c:74:4e:51:bc:8c:96:4f:6b:d3:83:87: 9a:88:55:cf:33:06:6b:20:d6:bc:1d:98:0a:b4:74: 88:ce:75:6c:bf:66:b1:bc:d1:69:dc:d8:09:e7:d7: c7:19:67:9c:f0:6f:35:ff:07:0a:d5:6e:e7:72:78: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205128 Signature Algorithm: sha256WithRSAEncryption 6f:87:e3:45:73:9b:73:2d:60:69:46:04:ae:ef:a9:98:9c:ad: 79:fc:c2:df:91:15:46:e4:5b:6e:f8:fd:35:cb:bc:dc:99:64: 63:89:8d:68:17:20:39:0d:28:4b:81:ae:2b:10:47:28:10:a8: 72:d1:4e:b7:bf:2d:35:2e:db:ca:3b:91:4c:1c:a4:82:93:32: bb:d3:ec:1b:d0:db:56:ce:3c:55:d2:1d:a2:26:e9:4e:4d:81: 45:d5:fe:e3:dc:32:7a:a9:9e:36:5a:4f:ba:32:8c:58:63:a4: fe:7e:f0:f8:61:27:bf:64:e5:bd:03:07:88:87:de:2d:d3:8a: ba:30:c1:c4:3c:81:78:62:6f:11:1b:35:57:e9:f2:bb:8f:91: 69:02:46:3f:75:69:f6:a2:11:25:45:02:4e:09:b8:1a:8a:49: 4a:aa:2b:3a:7a:57:57:cb:77:89:ae:36:57:2c:e6:3a:73:5b: 94:41:d9:45:c3:89:32:9f:da:93:33:a2:ed:07:b0:49:87:24: ed:5f:57:02:ab:36:ea:b4:d6:77:a3:86:ac:b3:3a:cf:94:54: ef:7d:78:2e:4b:40:a1:4e:d1:98:51:da:a2:80:0f:1c:20:32: 9a:5f:bf:8e:ca:db:49:45:94:36:98:29:0d:bc:bc:ed:4b:af: fd:8b:9f:40 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt261SiwsipzR2qhI1QNiw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M3ZjM3MTQwZDEzMTc5ZjlhNWM5MjA5NjQ5YzgwYzM3YzZhNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozLyKRp9lYRDYIW4Hpy3wwEG91Q4 BPAsRcRTcM4mBTHMq5T34pj9Y7ZxpnMABA9BhwcFG23W68hqu/qBzGN8/dDovOBD G0Yp2jK6wAJ5fy3CHU32FrZ3WBNHYZPnuElrbqI2WESpuaaSqxx5Jt4qgYB3jIfS A/vIT4z67tlXWaiVxNl0N2sYkerHqquNoBMuqbURArb4ujPVKvo4KLJ4ZFpVrDb3 mhyKEqM9GUBDzZsRMKA1pUy3hyk7K69v0oMTuHRBnWRMdE5RvIyWT2vTg4eaiFXP MwZrINa8HZgKtHSIznVsv2axvNFp3NgJ59fHGWec8G81/wcK1W7ncngPRQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGzH83FA0TF5+aXJIJZJyAw3xqcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2E3NTUw Ny01YzVjLTQ4NDItYTFjNC04ZDU2ZGRjZmE0YjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvYTc1NTA3 LTVjNWMtNDg0Mi1hMWM0LThkNTZkZGNmYTRiOC8xL2JNZnpjVURSTVhuNXBja2ds a25JRERmR3B4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMhSDANBgkqhkiG9w0BAQsFAAOCAQEAb4fjRXObcy1g aUYEru+pmJytefzC35EVRuRbbvj9Ncu83JlkY4mNaBcgOQ0oS4GuKxBHKBCoctFO t78tNS7byjuRTBykgpMyu9PsG9DbVs48VdIdoibpTk2BRdX+49wyeqmeNlpPujKM WGOk/n7w+GEnv2TlvQMHiIfeLdOKujDBxDyBeGJvERs1V+nyu4+RaQJGP3Vp9qIR JUUCTgm4GopJSqorOnpXV8t3ia42VyzmOnNblEHZRcOJMp/akzOi7QewSYck7V9X Aqs26rTWd6OGrLM6z5RU7314LktAoU7RmFHaooAPHCAyml+/jsrbSUWUNpgpDby8 7Uuv/YufQA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:39:48 2026 by rpki-client