This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer File: bd1AUuD8dlNjYcu9x3UId93zYK0.cer (raw, json) Hash identifier: 8ZXCxrKQPDDGNPq2e6NJ08HjTba45s0THjhIzUgSIj8= Subject key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126A02059CD3D01BCADE9F2EB1EEFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210874 IP: 45.10.100.0/22 IP: 2a0e:3700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:02:05:9c:d3:d0:1b:ca:de:9f:2e:b1:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:c9:1d:d2:5a:8b:4c:12:2a:aa:cf:c0:62: 39:3c:a0:14:98:02:52:4d:e6:40:8d:a2:ee:fc:2f: 48:37:66:ec:16:53:e8:9d:ca:48:4e:f7:6f:08:f3: f8:06:1c:d5:69:d9:cb:b0:0a:3c:97:d8:3e:10:8f: 5e:e5:62:84:a7:d2:4a:ee:a8:d6:4e:69:29:c1:a8: ce:29:21:48:91:5a:3c:57:74:a1:67:ef:17:4a:64: 5c:76:d4:b2:7c:fa:08:2b:1c:2d:96:be:e0:cf:57: 82:a8:fd:39:93:12:b5:6e:53:39:5b:0c:b1:0b:2b: 88:b8:55:13:5b:93:29:5b:df:cd:82:71:17:6e:d9: 74:e0:59:57:ef:2d:73:85:fd:da:c6:90:d4:97:7c: 54:2c:d1:67:a8:64:11:3a:3e:6d:4e:c2:ab:d3:4b: af:25:87:ae:f4:43:fd:42:e7:30:bb:07:01:00:a6: 61:07:a5:e6:cd:d4:cd:e5:3b:5c:fe:0e:74:98:15: 0c:dd:44:29:5a:b6:9d:c1:0a:c1:b5:55:10:64:b9: 8d:fe:08:c8:f3:9a:24:21:bd:c4:50:10:18:a3:97: 7a:eb:de:61:e9:c9:a6:f9:24:19:f8:80:83:30:91: 72:9f:32:32:5e:20:ec:0e:cb:26:52:52:e6:fa:3f: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.100.0/22 IPv6: 2a0e:3700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210874 Signature Algorithm: sha256WithRSAEncryption 13:92:73:94:ba:ca:ac:22:57:ca:d9:fe:d1:87:fb:bd:96:61: 2e:6b:02:85:4c:89:8b:2d:35:69:68:7d:96:d1:36:8b:17:7d: 20:29:d7:3d:66:8a:0a:c5:42:6b:af:d2:f9:36:a0:94:80:88: 71:0c:ff:d5:aa:68:67:11:6f:b6:3a:97:87:8e:0b:33:ac:3e: b0:ba:a8:79:4f:50:1c:2b:77:91:e5:48:4c:06:69:5c:8f:62: 70:cb:b8:59:83:ea:99:c0:ef:8b:09:7d:8b:73:c5:24:b4:e2: 32:4f:1e:7e:b7:58:07:bf:32:11:76:28:e1:16:f1:40:60:a1: 35:ee:9e:2b:d9:40:32:18:30:9d:18:8c:a0:00:cb:af:50:4a: c2:25:01:fd:35:eb:36:e4:bb:64:10:60:23:e9:82:1b:54:2e: a3:06:00:9d:00:2c:d6:08:0e:f0:78:04:32:28:c6:e5:d3:f6: 31:a1:f9:db:c2:85:35:19:55:48:bf:79:67:7c:94:49:c5:2e: 98:6f:88:52:30:74:ec:63:4d:5f:09:b2:6e:c3:f4:d8:31:1d: 92:c4:fe:ea:6a:59:2c:98:ea:c9:e9:21:ad:9e:ba:e2:2f:74: 17:4e:be:bb:75:11:21:5d:a3:e3:37:6c:eb:d2:44:a6:a3:7e: 3b:30:a8:0f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EmoCBZzT0BvK3p8use7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGRkNDA1MmUwZmM3NjUzNjM2MWNiYmRjNzc1MDg3N2RkZjM2MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIrJHdJai0wSKqrPwGI5PKAUmAJS TeZAjaLu/C9IN2bsFlPoncpITvdvCPP4BhzVadnLsAo8l9g+EI9e5WKEp9JK7qjW TmkpwajOKSFIkVo8V3ShZ+8XSmRcdtSyfPoIKxwtlr7gz1eCqP05kxK1blM5Wwyx CyuIuFUTW5MpW9/NgnEXbtl04FlX7y1zhf3axpDUl3xULNFnqGQROj5tTsKr00uv JYeu9EP9QucwuwcBAKZhB6XmzdTN5Ttc/g50mBUM3UQpWradwQrBtVUQZLmN/gjI 85okIb3EUBAYo5d6695h6cmm+SQZ+ICDMJFynzIyXiDsDssmUlLm+j9HYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG3dQFLg/HZTY2HLvcd1CHfd82CtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzkyMzQ0 OC0zMDI3LTQ5NDEtOThhNC1iYTdiMWYzNzY5ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvOTIzNDQ4 LTMwMjctNDk0MS05OGE0LWJhN2IxZjM3NjllMy8xL2JkMUFVdUQ4ZGxOalljdTl4 M1VJZDkzellLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQpkMA0EAgACMAcDBQMqDjcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3ujANBgkqhkiG9w0BAQsFAAOCAQEAE5JzlLrKrCJX ytn+0Yf7vZZhLmsChUyJiy01aWh9ltE2ixd9ICnXPWaKCsVCa6/S+TaglICIcQz/ 1apoZxFvtjqXh44LM6w+sLqoeU9QHCt3keVITAZpXI9icMu4WYPqmcDviwl9i3PF JLTiMk8efrdYB78yEXYo4RbxQGChNe6eK9lAMhgwnRiMoADLr1BKwiUB/TXrNuS7 ZBBgI+mCG1QuowYAnQAs1ggO8HgEMijG5dP2MaH528KFNRlVSL95Z3yUScUumG+I UjB07GNNXwmybsP02DEdksT+6mpZLJjqyekhrZ664i90F06+u3URIV2j4zds69JE pqN+OzCoDw== -----END CERTIFICATE-----Generated at Fri Jan 2 18:35:43 2026 by rpki-client