This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer File: bV-D7gKxc3SL5d47O5wlMXmSaOg.cer (raw, json) Hash identifier: jLw832J5qlXgy5Ltnb21SnlDLiAO01mxDbFHTKcDKzE= Subject key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A22AF19DC935733359E084231C5704 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50838 IP: 2001:67c:2c84::/48 IP: 2001:67c:2ca0::/45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2a:f1:9d:c9:35:73:33:59:e0:84:23:1c:57:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:a0:c2:02:67:ae:eb:a4:db:f3:e8:f7:0b: 73:f3:e6:3b:8b:4d:26:01:ea:1a:99:c6:21:71:80: 47:bc:75:6e:8f:2e:30:5d:42:18:98:9e:59:4d:74: 57:8e:08:54:f5:1c:79:28:01:07:85:d1:d4:8a:f6: 2e:bf:03:10:80:6e:92:44:6a:32:9c:27:20:a5:79: bc:f2:e6:a4:8e:41:3e:16:9b:c9:13:1b:d6:a6:8d: bc:5f:e5:51:bf:17:fd:65:a0:26:48:2f:30:c2:bc: 2e:ce:05:ac:11:ac:52:df:b4:ab:f7:47:ca:31:48: 80:23:cd:55:e4:23:4a:3e:b9:01:4b:dc:02:28:18: 35:0c:64:3a:0d:36:93:e5:24:9a:16:ca:e5:a3:cf: 37:7c:a2:cb:14:a9:81:8b:ee:0b:d4:2c:21:c9:33: 21:5f:1c:89:99:33:f6:9c:7b:03:f5:64:aa:4d:b1: cd:21:88:e1:be:06:8f:a2:93:12:93:b5:39:ba:82: 93:4d:9a:02:06:95:67:f1:07:b2:b4:dc:aa:f9:af: df:fb:dc:a4:6a:aa:b9:31:01:80:07:cb:50:99:a3: 6e:33:d9:a3:54:77:1a:16:66:9f:6b:4b:ed:49:97: 7a:a1:91:6e:6c:fb:0f:d2:ce:48:0f:bd:5f:87:e4: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c84::/48 2001:67c:2ca0::/45 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50838 Signature Algorithm: sha256WithRSAEncryption 00:cd:70:79:f4:ab:49:f9:bc:5c:2f:e8:31:cd:d0:55:e1:a2: 0c:56:d6:f2:d6:bd:38:29:78:3c:d6:32:29:3c:b3:5c:b3:b5: d1:63:18:a5:20:21:54:b9:40:9c:22:40:1f:d9:a3:c6:4b:cd: c3:5c:d6:48:de:4d:08:34:9c:e3:a9:8b:81:17:f5:8c:b2:08: b0:68:5a:d9:4d:55:6a:55:e7:68:c9:3d:04:e5:5a:10:69:0f: 79:f0:4d:17:5b:f4:0a:91:f0:0d:50:14:af:00:c7:07:2d:f5: 06:d2:e5:cb:a3:3d:c2:86:f6:b1:90:73:9a:b5:57:78:7a:e3: 0f:bf:87:02:a2:fc:66:23:7a:1e:2a:85:1f:52:7f:b9:31:d2: 53:35:8d:5e:24:ac:58:6d:02:ff:89:5d:58:37:8f:6e:be:c0: d0:e7:f0:91:57:20:8e:59:52:2e:1f:ec:84:8f:21:c1:a3:ee: 85:7b:90:d9:2f:dd:ad:1b:8c:75:0f:32:6c:07:57:e9:03:ac: 99:f2:1d:2c:e7:ce:a1:52:fc:2f:76:d7:83:ae:80:9b:1b:2c: 41:f1:56:8e:61:ae:c1:ff:12:c8:f9:0c:03:c3:2d:c5:31:47: bb:f3:30:ae:a2:df:01:94:b4:f9:9f:f5:59:de:c7:46:c5:f7: eb:3d:3c:71 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt4oirxnck1czNZ4IQjHFcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDVmODNlZTAyYjE3Mzc0OGJlNWRlM2IzYjljMjUzMTc5OTI2OGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOmgwgJnruuk2/Po9wtz8+Y7i00m AeoamcYhcYBHvHVujy4wXUIYmJ5ZTXRXjghU9Rx5KAEHhdHUivYuvwMQgG6SRGoy nCcgpXm88uakjkE+FpvJExvWpo28X+VRvxf9ZaAmSC8wwrwuzgWsEaxS37Sr90fK MUiAI81V5CNKPrkBS9wCKBg1DGQ6DTaT5SSaFsrlo883fKLLFKmBi+4L1CwhyTMh XxyJmTP2nHsD9WSqTbHNIYjhvgaPopMSk7U5uoKTTZoCBpVn8QeytNyq+a/f+9yk aqq5MQGAB8tQmaNuM9mjVHcaFmafa0vtSZd6oZFubPsP0s5ID71fh+S5MQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFG1fg+4CsXN0i+XeOzucJTF5kmjoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2Y5NTAz ZS1kYTg1LTQ1ZmMtYjAzMi1iMmU3ZmVmZjQwMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZjk1MDNl LWRhODUtNDVmYy1iMDMyLWIyZTdmZWZmNDAyZi8xL2JWLUQ3Z0t4YzNTTDVkNDdP NXdsTVhtU2FPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCyEAwcDIAEGfCygMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDGljANBgkqhkiG9w0BAQsFAAOCAQEAAM1wefSrSfm8XC/o Mc3QVeGiDFbW8ta9OCl4PNYyKTyzXLO10WMYpSAhVLlAnCJAH9mjxkvNw1zWSN5N CDSc46mLgRf1jLIIsGha2U1ValXnaMk9BOVaEGkPefBNF1v0CpHwDVAUrwDHBy31 BtLly6M9wob2sZBzmrVXeHrjD7+HAqL8ZiN6HiqFH1J/uTHSUzWNXiSsWG0C/4ld WDePbr7A0OfwkVcgjllSLh/shI8hwaPuhXuQ2S/drRuMdQ8ybAdX6QOsmfIdLOfO oVL8L3bXg66AmxssQfFWjmGuwf8SyPkMA8MtxTFHu/MwrqLfAZS0+Z/1Wd7HRsX3 6z08cQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:33:44 2026 by rpki-client