This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer (raw, json) Hash identifier: SndoQrMUWbnMUW679UEWwwG04trNxT174K2vSkeFlyM= Subject key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B914B0E935A7ACA7B1BC596BD5EAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16045 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:91:4b:0e:93:5a:7a:ca:7b:1b:c5:96:bd:5e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:d7:88:b3:ca:f9:25:1b:7f:96:dd:ee:4b: 77:23:cc:83:58:95:d9:dc:10:ab:f3:4e:83:e7:43: e9:ca:17:62:5f:30:ee:28:c0:e0:80:ce:56:7e:75: b8:3a:38:d6:e8:86:a5:db:13:02:00:73:42:90:3a: a8:28:48:46:a7:bb:43:2b:49:1f:48:56:ee:fb:9a: 88:f6:05:4d:85:b4:b5:40:13:af:40:84:79:58:b6: 39:55:a7:3e:66:a6:a2:db:b4:7d:60:38:ca:27:82: df:16:69:60:97:b3:45:ad:c7:cd:b9:f3:fe:af:a8: 54:af:bf:68:1b:34:bd:82:1e:f5:0c:a6:dc:76:6d: 87:59:f1:8a:b1:c8:bb:fe:18:e2:33:06:66:50:ce: 0e:cb:94:da:a9:5a:83:19:f1:5f:bc:62:91:46:8b: 45:0c:d0:a7:11:21:81:1e:a3:05:7f:5b:f0:cc:3c: c3:a3:a2:84:95:fb:37:14:98:88:09:2e:13:8a:eb: 32:3a:87:64:5f:37:d7:e1:cb:b3:53:f1:71:ea:e2: 5b:1a:21:a6:90:0b:ae:1b:7b:06:84:bc:ae:09:a7: 7d:a3:61:97:93:3b:5c:a4:41:52:a8:5e:fa:0c:6e: 9a:b8:ea:ba:cc:9b:c1:3d:49:49:8c:82:3b:13:88: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 16045 Signature Algorithm: sha256WithRSAEncryption 4a:40:2d:e4:bc:fa:ec:a7:0c:6c:7f:75:6f:ec:89:f6:02:4e: 79:68:43:35:bf:8d:87:b0:10:8a:ab:9a:0b:00:8e:0b:66:2f: be:20:a3:f5:bf:ec:d6:43:13:ff:6f:be:34:72:d4:ce:40:72: df:67:09:2b:29:cd:52:67:6b:be:aa:8f:82:cb:3a:e8:ea:a2: 13:57:2b:51:ea:7a:a9:2e:93:22:8f:b9:a5:cd:db:cb:90:77: e9:18:91:5c:8a:aa:1c:55:92:55:95:b6:ff:6c:f1:24:a3:32: 1b:25:15:77:b4:26:3b:a4:1a:c2:e9:7b:92:58:a3:e5:68:34: a6:a1:a6:aa:0b:95:24:35:b9:fc:07:d2:11:bf:0b:ba:83:ba: 4a:23:92:5b:37:e0:e7:ac:7f:06:96:c2:d5:ea:ab:b8:79:e5: f7:85:7d:96:60:86:00:c1:89:ad:f5:0d:c0:29:f1:cb:35:6d: 82:72:6c:8e:6c:01:63:c4:c2:6f:71:19:e0:ce:e8:78:3c:b4: cb:23:f9:98:1b:a0:e1:37:87:29:41:c1:ec:90:b9:f2:89:96: 19:6b:f8:9f:2a:01:b2:f4:19:36:56:b5:bb:4f:a2:df:45:a4: e1:57:8d:72:60:c8:f0:35:49:b3:9f:c8:d6:fa:3a:8c:b0:d7: e0:ee:cd:26 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt6W5FLDpNaesp7G8WWvV6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDU3MDA5MTZmOTA5ODNiZDhlODljZDA1ZmU2MjllYzE4M2JmYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59nXiLPK+SUbf5bd7kt3I8yDWJXZ 3BCr806D50PpyhdiXzDuKMDggM5WfnW4OjjW6Ial2xMCAHNCkDqoKEhGp7tDK0kf SFbu+5qI9gVNhbS1QBOvQIR5WLY5Vac+Zqai27R9YDjKJ4LfFmlgl7NFrcfNufP+ r6hUr79oGzS9gh71DKbcdm2HWfGKsci7/hjiMwZmUM4Oy5TaqVqDGfFfvGKRRotF DNCnESGBHqMFf1vwzDzDo6KElfs3FJiICS4TiusyOodkXzfX4cuzU/Fx6uJbGiGm kAuuG3sGhLyuCad9o2GXkztcpEFSqF76DG6auOq6zJvBPUlJjII7E4g7owIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFG1XAJFvkJg72Oic0F/mKewYO/pUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzliZmRi Ni0wOGI3LTRiMWQtOGE4OC05MjZiMzQ4MTQxMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvOWJmZGI2 LTA4YjctNGIxZC04YTg4LTkyNmIzNDgxNDEzMC8xL2JWY0FrVy1RbUR2WTZKelFY LVlwN0JnNy1sUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAj6tMA0GCSqGSIb3DQEBCwUAA4IBAQBKQC3kvPrspwxs f3Vv7In2Ak55aEM1v42HsBCKq5oLAI4LZi++IKP1v+zWQxP/b740ctTOQHLfZwkr Kc1SZ2u+qo+Cyzro6qITVytR6nqpLpMij7mlzdvLkHfpGJFciqocVZJVlbb/bPEk ozIbJRV3tCY7pBrC6XuSWKPlaDSmoaaqC5UkNbn8B9IRvwu6g7pKI5JbN+DnrH8G lsLV6qu4eeX3hX2WYIYAwYmt9Q3AKfHLNW2CcmyObAFjxMJvcRngzuh4PLTLI/mY G6DhN4cpQcHskLnyiZYZa/ifKgGy9Bk2VrW7T6LfRaThV41yYMjwNUmzn8jW+jqM sNfg7s0m -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:53 2026 by rpki-client