This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer File: BEw2vtOpgR94Jg5_X0_S_V54jgM.cer (raw, json) Hash identifier: Cg0acXi7eW8S2yNSjA2S2uLtByZG+RH6SHd+aRkqdIw= Subject key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ADEB05850B3A9AC8BECC3778A39E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60615 IP: 195.28.162.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:de:b0:58:50:b3:a9:ac:8b:ec:c3:77:8a:39:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:10:18:60:ca:33:ae:d4:93:c7:19:c4:a9: 7e:9b:45:05:56:f6:78:35:dc:6c:92:e9:a1:41:6c: 23:4c:72:6d:e6:52:87:a7:76:59:d5:fd:e6:f9:73: bc:65:01:8e:9e:89:ee:f2:33:01:a6:3c:b7:e6:fd: dd:b8:e3:a8:dc:fd:52:ca:07:a1:55:31:d6:b0:6b: 2c:99:d8:a1:6b:ee:f5:46:31:28:3a:31:59:9c:bc: a2:0a:82:62:45:13:6a:cc:38:d3:29:c7:51:44:b2: 64:a2:f7:01:24:fd:af:9a:db:d1:5b:55:d6:fa:f9: ab:9b:3b:76:bb:0f:30:a2:c9:25:77:34:ac:d2:7c: 4f:4b:c3:c4:85:dc:f8:7c:8a:1a:79:12:02:43:bf: 09:63:b6:02:df:47:0f:66:1c:5a:71:29:85:b3:ad: 7a:ca:1e:a0:05:68:78:71:b9:29:63:02:08:0c:eb: f8:57:f3:d8:da:d6:bb:e1:4f:d5:21:9f:56:41:6c: 8e:1d:77:88:49:83:a0:e3:72:a0:0e:d7:08:bc:be: 2e:46:fd:fe:f5:54:75:e1:2a:4f:c2:05:8a:49:d3: 69:eb:48:e7:3c:9e:f7:a0:e7:db:96:6a:c2:2e:48: 39:0c:32:8a:61:07:9d:48:86:02:46:37:32:50:e3: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.162.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60615 Signature Algorithm: sha256WithRSAEncryption a4:dc:13:da:b9:c5:6d:f9:16:ca:f5:cf:ec:cf:cd:f0:e0:d0: 06:1d:a6:66:f0:bf:61:35:8d:d6:30:04:df:8f:cf:ba:0e:49: 57:31:b6:55:bb:df:94:8d:2b:bc:5f:56:47:4c:48:ae:48:4c: 82:13:6d:8c:f7:4c:a7:11:2f:31:43:b2:4e:ff:44:ea:59:b7: bb:ce:b0:2d:2d:29:49:3f:43:03:9c:4c:cc:ff:be:06:6c:e1: fa:84:59:d0:b7:14:65:13:95:fe:58:fc:36:c5:c4:5e:24:9f: f5:35:10:1a:3b:7b:4b:28:51:4c:9e:c6:02:71:fe:98:7c:2b: 9e:91:fb:6c:43:0f:6e:e9:ae:ab:97:3d:1f:51:8c:d8:12:95: a2:fd:bf:0d:6d:c7:16:63:28:ec:aa:4c:bf:c1:34:90:07:40: 03:6d:62:10:49:cf:ec:0f:e0:47:dc:4a:41:9e:96:d1:71:8d: b6:c0:36:bb:d9:6c:6e:d8:78:66:c5:cc:dd:ce:7c:4d:b9:b8: 55:32:de:e8:16:b5:7c:b1:cc:e1:99:2d:09:5f:bf:f4:84:de: 1c:6a:08:d7:f4:87:0f:28:c4:31:14:5d:43:81:37:15:d1:4a: 3f:bb:4f:43:e1:10:c1:1d:ad:93:20:3e:00:65:e8:5c:1b:1c: 41:aa:d2:07 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Wt6wWFCzqayL7MN3ijnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDRjMzZiZWQzYTk4MTFmNzgyNjBlN2Y1ZjRmZDJmZDVlNzg4ZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcgQGGDKM67Uk8cZxKl+m0UFVvZ4 NdxskumhQWwjTHJt5lKHp3ZZ1f3m+XO8ZQGOnonu8jMBpjy35v3duOOo3P1Sygeh VTHWsGssmdiha+71RjEoOjFZnLyiCoJiRRNqzDjTKcdRRLJkovcBJP2vmtvRW1XW +vmrmzt2uw8woskldzSs0nxPS8PEhdz4fIoaeRICQ78JY7YC30cPZhxacSmFs616 yh6gBWh4cbkpYwIIDOv4V/PY2ta74U/VIZ9WQWyOHXeISYOg43KgDtcIvL4uRv3+ 9VR14SpPwgWKSdNp60jnPJ73oOfblmrCLkg5DDKKYQedSIYCRjcyUOOyFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFARMNr7TqYEfeCYOf19P0v1eeI4DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2FlNzQw Yi0xMGNkLTRmNGQtOGY2Yy0zNDE0ZmQ1MDI5ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYWU3NDBi LTEwY2QtNGY0ZC04ZjZjLTM0MTRmZDUwMjllOS8xL0JFdzJ2dE9wZ1I5NEpnNV9Y MF9TX1Y1NGpnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwxyiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDsxzANBgkqhkiG9w0BAQsFAAOCAQEApNwT2rnFbfkWyvXP7M/N8ODQBh2mZvC/ YTWN1jAE34/Pug5JVzG2VbvflI0rvF9WR0xIrkhMghNtjPdMpxEvMUOyTv9E6lm3 u86wLS0pST9DA5xMzP++Bmzh+oRZ0LcUZROV/lj8NsXEXiSf9TUQGjt7SyhRTJ7G AnH+mHwrnpH7bEMPbumuq5c9H1GM2BKVov2/DW3HFmMo7KpMv8E0kAdAA21iEEnP 7A/gR9xKQZ6W0XGNtsA2u9lsbth4ZsXM3c58Tbm4VTLe6Ba1fLHM4ZktCV+/9ITe HGoI1/SHDyjEMRRdQ4E3FdFKP7tPQ+EQwR2tkyA+AGXoXBscQarSBw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:15 2026 by rpki-client