This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer File: BUjO3xcCntmKEIETxsEJ7KzNguw.cer (raw, json) Hash identifier: kKgAFd+EJf3xXsH7se5sIptrO4Y5ESmFFcZ5FRL3T4w= Subject key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA923D4AD15796A792B2B7AF6D545 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8672 AS: 8717 AS: 12716 AS: 13124 AS: 24964 AS: 29580 AS: 35141 AS: 42157 IP: 5.53.128.0/17 IP: 37.63.0.0/17 IP: 37.130.240.0/21 IP: 46.232.152.0/21 IP: 46.238.0.0/18 IP: 62.204.128.0/19 IP: 62.221.128.0/19 IP: 77.70.0.0/17 IP: 77.236.160.0/19 IP: 77.244.192.0/20 IP: 78.83.0.0/16 IP: 78.90.0.0/16 IP: 80.253.48.0/20 IP: 82.103.64.0/18 IP: 82.147.128.0/19 IP: 83.97.24.0/21 IP: 84.242.128.0/18 IP: 84.252.0.0/18 IP: 85.91.128.0/19 IP: 85.118.64.0/19 IP: 85.130.0.0/17 IP: 85.196.128.0/18 IP: 87.97.128.0/17 IP: 87.227.128.0/17 IP: 88.203.128.0/17 IP: 89.186.200.0/21 IP: 89.190.192.0/19 IP: 89.215.0.0/16 IP: 89.253.128.0/18 IP: 92.247.0.0/16 IP: 95.111.0.0/17 IP: 95.140.208.0/20 IP: 130.204.0.0/16 IP: 151.251.0.0/16 IP: 176.12.0.0/18 IP: 176.222.0.0/20 IP: 185.151.156.0/22 IP: 185.224.160.0/22 IP: 193.22.103.0/24 IP: 194.187.132.0/22 IP: 195.24.32.0/19 IP: 195.34.96.0/19 IP: 195.149.248.0/21 IP: 195.177.248.0/23 IP: 212.36.0.0/19 IP: 212.50.0.0/19 IP: 212.91.160.0/19 IP: 212.95.160.0/19 IP: 212.104.96.0/19 IP: 213.169.32.0/19 IP: 213.191.160.0/19 IP: 213.222.32.0/19 IP: 213.226.0.0/18 IP: 213.240.192.0/18 IP: 217.9.224.0/20 IP: 217.10.240.0/20 IP: 217.18.240.0/20 IP: 217.79.32.0/20 IP: 2001:1ac8::/32 IP: 2a00:4800::/29 IP: 2a01:288::/32 IP: 2a02:900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:23:d4:ad:15:79:6a:79:2b:2b:7a:f6:d5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:e0:4b:5b:d6:a5:32:fb:0c:c9:3c:f0:45: 82:fc:fc:6f:47:fe:b5:28:8f:2f:a3:a7:15:5f:87: a5:05:83:d1:6d:e0:7f:5c:b6:51:7d:e7:d4:d2:3d: 08:4a:d2:80:7a:fc:35:65:ad:53:0b:3b:68:f2:d1: 98:84:9d:23:c3:2b:36:9d:4c:0a:e2:9f:8d:a9:7a: 7c:d8:bc:86:0f:77:c1:66:ca:9b:15:43:5c:d8:df: 5c:54:bd:77:3a:f0:77:40:c3:83:f5:1c:60:f1:0e: b6:bf:1f:fa:b0:e5:47:fd:82:7f:b3:09:c3:f0:58: e3:2b:f8:9c:34:5c:a4:6e:6c:fd:15:1e:9c:b1:15: 9a:a8:d1:4d:fa:c3:83:bd:ef:18:57:08:9a:80:34: 9b:aa:77:ad:97:7f:b8:52:79:b1:03:a6:f4:93:43: 77:e5:68:ca:03:7a:a8:44:11:29:09:d7:0f:76:11: 43:59:13:45:d2:cf:4d:82:5f:30:8f:9a:d4:1d:10: dd:9e:9e:ba:82:61:33:bc:42:91:88:bd:17:8f:c2: 65:39:a5:7d:97:4c:51:a1:f9:fd:cf:1f:a1:f2:b5: 4b:75:15:16:e4:92:e1:b2:36:54:df:be:5f:02:7e: 02:ee:a7:a7:12:26:02:89:50:e3:70:58:75:31:b5: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.128.0/17 37.63.0.0/17 37.130.240.0/21 46.232.152.0/21 46.238.0.0/18 62.204.128.0/19 62.221.128.0/19 77.70.0.0/17 77.236.160.0/19 77.244.192.0/20 78.83.0.0/16 78.90.0.0/16 80.253.48.0/20 82.103.64.0/18 82.147.128.0/19 83.97.24.0/21 84.242.128.0/18 84.252.0.0/18 85.91.128.0/19 85.118.64.0/19 85.130.0.0/17 85.196.128.0/18 87.97.128.0/17 87.227.128.0/17 88.203.128.0/17 89.186.200.0/21 89.190.192.0/19 89.215.0.0/16 89.253.128.0/18 92.247.0.0/16 95.111.0.0/17 95.140.208.0/20 130.204.0.0/16 151.251.0.0/16 176.12.0.0/18 176.222.0.0/20 185.151.156.0/22 185.224.160.0/22 193.22.103.0/24 194.187.132.0/22 195.24.32.0/19 195.34.96.0/19 195.149.248.0/21 195.177.248.0/23 212.36.0.0/19 212.50.0.0/19 212.91.160.0/19 212.95.160.0/19 212.104.96.0/19 213.169.32.0/19 213.191.160.0/19 213.222.32.0/19 213.226.0.0/18 213.240.192.0/18 217.9.224.0/20 217.10.240.0/20 217.18.240.0/20 217.79.32.0/20 IPv6: 2001:1ac8::/32 2a00:4800::/29 2a01:288::/32 2a02:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8672 8717 12716 13124 24964 29580 35141 42157 Signature Algorithm: sha256WithRSAEncryption 60:4c:80:d7:ce:0a:c2:dc:4d:d8:cc:f5:7a:1c:9f:93:e2:9e: 54:6a:e4:e5:cc:6e:29:63:be:2b:7c:0c:1c:86:2f:fa:25:f2: 19:df:84:1f:31:18:0d:1d:b5:f4:c9:d7:d1:89:02:c5:06:ed: 8b:5a:2d:c4:cf:f4:5a:0c:fa:2e:94:05:c7:12:5c:fb:c8:a4: ed:0b:06:fd:e7:a5:be:98:df:12:e1:07:19:30:40:f2:2c:95: d0:6b:e8:08:a4:6f:a5:7d:b4:78:89:10:3b:85:e2:69:ef:11: 40:11:9a:0a:a7:90:b4:ac:9a:d6:a6:31:4c:a5:e2:58:dd:87: ac:7b:97:d2:5d:4c:62:1e:1c:bc:4b:d0:2f:de:0a:c0:ae:a7: e5:9c:a8:66:72:00:89:68:6e:84:f6:da:8f:eb:68:bf:14:67: 67:e0:30:44:f5:df:75:de:d9:02:f1:df:90:5c:01:04:32:f4: 83:0d:fd:68:7d:ab:c6:62:dc:0a:03:0a:c4:cf:55:c8:10:fa: a2:86:db:ed:b0:95:a3:a2:70:30:71:d1:d5:55:31:4b:6c:ae: fe:7f:2a:c3:33:f7:52:79:c0:ff:11:5f:d5:e1:a6:4a:6e:95: fe:58:ba:40:fa:ac:90:c7:e0:d1:52:a5:6d:1c:61:20:df:6e: a2:b8:a8:0a -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgISAZt5fqkj1K0VeWp5Kyt69tVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4jgS1vWpTL7DMk88EWC/PxvR/61 KI8vo6cVX4elBYPRbeB/XLZRfefU0j0IStKAevw1Za1TCzto8tGYhJ0jwys2nUwK 4p+NqXp82LyGD3fBZsqbFUNc2N9cVL13OvB3QMOD9Rxg8Q62vx/6sOVH/YJ/swnD 8FjjK/icNFykbmz9FR6csRWaqNFN+sODve8YVwiagDSbqnetl3+4UnmxA6b0k0N3 5WjKA3qoRBEpCdcPdhFDWRNF0s9Ngl8wj5rUHRDdnp66gmEzvEKRiL0Xj8JlOaV9 l0xRofn9zx+h8rVLdRUW5JLhsjZU375fAn4C7qenEiYCiVDjcFh1MbWrXwIDAQAB o4IEOzCCBDcwHQYDVR0OBBYEFAVIzt8XAp7ZihCBE8bBCeyszYLsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzU0MWMw NS04ZDdkLTQyYjgtYWIwMC03ZmJiYWU2Zjk0MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvNTQxYzA1 LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRtS0VJRVR4 c0VKN0t6Tmd1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBmwYIKwYB BQUHAQcBAf8EggGKMIIBhjCCAV4EAgABMIIBVgMEBwU1gAMEByU/AAMEAyWC8AME Ay7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMEBE30wAMDAE5TAwMA TloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4ADBAVV dkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsADAwBZ 1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBLDeAAME ArmXnAMEArngoAMEAMEWZwMEAsK7hAMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AME BdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAME BtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlPIDAiBAIAAjAcAwUAIAEa yAMFAyoASAADBQAqAQKIAwUAKgIJADA3BggrBgEFBQcBCAEB/wQoMCagJDAiAgIh 4AICIg0CAjGsAgIzRAICYYQCAnOMAgMAiUUCAwCkrTANBgkqhkiG9w0BAQsFAAOC AQEAYEyA184KwtxN2Mz1ehyfk+KeVGrk5cxuKWO+K3wMHIYv+iXyGd+EHzEYDR21 9MnX0YkCxQbti1otxM/0Wgz6LpQFxxJc+8ik7QsG/eelvpjfEuEHGTBA8iyV0Gvo CKRvpX20eIkQO4Xiae8RQBGaCqeQtKya1qYxTKXiWN2HrHuX0l1MYh4cvEvQL94K wK6n5ZyoZnIAiWhuhPbaj+tovxRnZ+AwRPXfdd7ZAvHfkFwBBDL0gw39aH2rxmLc CgMKxM9VyBD6oobb7bCVo6JwMHHR1VUxS2yu/n8qwzP3UnnA/xFf1eGmSm6V/li6 QPqskMfg0VKlbRxhIN9uorioCg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:40 2026 by rpki-client