This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer File: bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer (raw, json) Hash identifier: BZxAAJmaqf4ZAf2k4kWSj3fXqoy9EoGO5OnO+WtE4AQ= Subject key identifier: 6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CEF97AD07FB5B09AB4F66772161C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43442 IP: 185.224.188.0/22 IP: 2001:678:424::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ef:97:ad:07:fb:5b:09:ab:4f:66:77:21:61:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5be666d804d0f8b387fc62209d13006c6644aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:82:9e:42:27:da:83:67:67:e0:d2:61:57: 57:ad:f5:d1:8f:56:02:13:ed:3c:a8:d6:de:87:3b: 40:41:af:6a:cc:03:ad:34:b3:b0:c6:09:ea:0e:cf: 98:62:25:18:f6:64:f0:03:fc:ca:56:f8:fb:d6:51: 5b:a6:4d:a3:d6:60:8b:5f:c2:10:28:82:69:bb:8a: 94:73:e6:87:d5:17:66:72:05:10:20:40:df:60:0b: 44:69:ac:1e:32:a7:83:52:bc:4a:60:0e:ba:54:c1: b3:49:21:02:9d:20:2e:75:81:9c:72:53:6a:1e:b4: f4:b3:1f:1a:b3:5b:0c:75:0f:3d:82:4c:32:b6:c7: 9a:8b:0d:a8:b9:db:6c:d1:57:b6:eb:49:33:fd:09: 40:83:5f:f1:ff:74:13:52:e7:c6:fe:ba:b6:f3:39: a1:9c:13:f3:17:76:2e:bd:c8:27:63:1a:ef:64:cd: 1a:f2:fc:06:00:e4:39:a2:7d:be:0c:5b:aa:43:85: 9c:78:1b:a2:7f:5f:7b:12:5a:d2:a8:98:16:e6:68: e7:a5:5a:b5:a1:d1:9f:75:1a:5e:42:75:db:b5:6d: 85:74:3d:4a:76:b1:2c:7b:ce:a3:2a:85:ee:09:ff: f7:d0:6c:59:2b:1b:d8:7e:2a:6b:3e:fe:db:06:4e: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.188.0/22 IPv6: 2001:678:424::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43442 Signature Algorithm: sha256WithRSAEncryption 5f:6d:0e:56:40:10:e1:9f:74:a4:a1:00:aa:ab:6b:84:d0:84: e6:70:b1:30:24:24:7c:c7:21:e1:18:97:2d:68:49:49:20:d3: 1e:59:7f:08:23:4d:e7:02:8f:f7:02:dc:a6:6c:33:02:fa:6f: d7:bb:49:ca:3d:99:ca:65:49:fa:f9:4c:22:c9:d7:da:45:2a: 8c:fe:3d:64:03:fc:b4:a2:00:e2:00:0a:65:21:01:84:87:9f: 8c:57:64:a5:e7:b6:28:6c:81:82:63:4d:69:17:61:2e:10:d7: 9b:99:94:c0:fb:2a:95:0e:5d:1c:ce:6e:68:79:79:01:52:7b: 7a:d0:84:5f:04:7c:3a:04:c1:cf:71:d7:11:5e:23:df:d2:67: 24:c5:55:6f:18:79:2b:99:1e:20:bb:72:75:ef:cc:20:8e:f5: 44:f4:fd:24:4f:5e:56:c0:b9:7a:e1:03:fa:72:64:90:4d:5d: ce:ea:b1:e3:8c:86:5d:09:a2:26:ce:76:4b:9f:d6:fc:3f:1d: 0c:04:d3:35:16:50:77:32:1b:36:46:17:a2:5e:73:28:48:34: ec:0f:b5:b0:62:28:5d:89:63:b5:a3:3d:f3:aa:86:f0:ce:9c: 05:9a:f3:a7:a2:58:a4:49:5c:0f:cf:fb:d8:f8:44:61:74:fa: 0f:fb:0d:5c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9XO+XrQf7WwmrT2Z3IWHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDViZTY2NmQ4MDRkMGY4YjM4N2ZjNjIyMDlkMTMwMDZjNjY0NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjeCnkIn2oNnZ+DSYVdXrfXRj1YC E+08qNbehztAQa9qzAOtNLOwxgnqDs+YYiUY9mTwA/zKVvj71lFbpk2j1mCLX8IQ KIJpu4qUc+aH1RdmcgUQIEDfYAtEaaweMqeDUrxKYA66VMGzSSECnSAudYGcclNq HrT0sx8as1sMdQ89gkwytseaiw2oudts0Ve260kz/QlAg1/x/3QTUufG/rq28zmh nBPzF3YuvcgnYxrvZM0a8vwGAOQ5on2+DFuqQ4WceBuif197ElrSqJgW5mjnpVq1 odGfdRpeQnXbtW2FdD1KdrEse86jKoXuCf/30GxZKxvYfiprPv7bBk7a7QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFG1b5mbYBND4s4f8YiCdEwBsZkSqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzUyM2Vm Ni0yNzQzLTQxM2QtYjQxZC02YWY2NTVhNTQ5NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNTIzZWY2 LTI3NDMtNDEzZC1iNDFkLTZhZjY1NWE1NDk0Yi8xL2JWdm1adGdFMFBpemhfeGlJ SjBUQUd4bVJLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCueC8MA8EAgACMAkDBwAgAQZ4BCQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKmyMA0GCSqGSIb3DQEBCwUAA4IBAQBfbQ5WQBDh n3SkoQCqq2uE0ITmcLEwJCR8xyHhGJctaElJINMeWX8II03nAo/3AtymbDMC+m/X u0nKPZnKZUn6+UwiydfaRSqM/j1kA/y0ogDiAAplIQGEh5+MV2Sl57YobIGCY01p F2EuENebmZTA+yqVDl0czm5oeXkBUnt60IRfBHw6BMHPcdcRXiPf0mckxVVvGHkr mR4gu3J178wgjvVE9P0kT15WwLl64QP6cmSQTV3O6rHjjIZdCaImznZLn9b8Px0M BNM1FlB3Mhs2RheiXnMoSDTsD7WwYihdiWO1oz3zqobwzpwFmvOnolikSVwPz/vY +ERhdPoP+w1c -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:29 2026 by rpki-client