This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer File: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer (raw, json) Hash identifier: 3nCsg127y5OEjeE+HS4JQq+QDGJfHNyotATNM6oDJfg= Subject key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589CC5A20413A846640E91C3792D76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6658 IP: 194.1.128.0/21 IP: 195.146.0.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9c:c5:a2:04:13:a8:46:64:0e:91:c3:79:2d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:70:1a:f6:9a:36:88:82:c6:a9:8a:cb:73: cb:00:90:67:b0:96:58:d8:a0:42:e9:a4:f5:1a:cf: f5:24:10:4f:bf:74:99:55:11:9d:f3:76:5d:bf:1b: 45:58:14:2d:c9:e9:bd:83:9a:a4:b3:a2:b1:9d:40: 9d:3c:68:f7:21:4f:3e:38:53:0c:03:ac:94:58:1b: 9c:ec:e5:17:7b:b2:bf:c1:b6:72:8a:27:8e:a1:e8: a9:0d:9e:ff:cf:c7:7c:ed:80:07:c2:be:90:43:85: 54:8c:57:9f:11:02:45:01:25:a7:78:4b:f0:ca:5e: 63:86:c3:8a:bd:44:31:7e:7a:22:04:96:99:be:0b: 45:2e:52:33:00:44:93:cd:f2:44:75:ea:ce:b2:a5: 37:ee:24:2b:77:7a:0a:a7:ba:25:c5:02:7e:8a:cd: ea:6f:36:b6:64:cf:3c:43:a8:86:80:0b:1f:d4:d1: 31:fa:92:0a:b9:30:8a:1f:95:77:0d:86:e8:7e:07: 24:68:0a:0e:1a:ca:c2:2b:ef:9f:b8:43:99:9e:98: 50:ab:7d:85:0b:ba:29:c7:85:86:64:b3:fb:95:51: bf:ef:9d:1d:3f:f2:5f:8d:33:56:06:29:fd:d7:6c: ab:b4:a8:e6:8a:f7:90:79:b7:26:d9:18:e3:75:ce: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.128.0/21 195.146.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6658 Signature Algorithm: sha256WithRSAEncryption 07:37:3e:ed:ea:3f:95:4e:5a:63:4e:a6:2f:dc:1d:fd:d0:01: f0:ff:95:d1:9b:b2:41:8c:bc:f8:76:98:aa:42:27:4f:f5:da: 30:dc:bb:13:88:8c:16:84:2c:bb:4d:fb:fe:45:82:06:3e:83: e1:c6:93:58:c3:b4:b3:07:be:9c:67:d5:d1:b0:7c:88:47:41: 38:03:81:bf:6e:5e:d6:01:1b:5b:9f:18:43:83:fc:43:46:cb: 81:a2:bf:2b:18:21:ea:56:b7:10:0c:08:25:8e:cd:5a:ec:3a: 6a:d0:66:5f:3f:79:b2:69:c3:02:d6:d7:a0:04:4f:cd:f3:80: 6a:ff:d4:18:db:4b:bd:3e:d2:72:2e:e4:13:aa:5e:e4:fa:88: 91:5a:d7:40:95:53:6d:1b:f1:55:70:9f:e1:7e:75:af:55:92: 35:89:07:aa:e1:a4:42:bf:66:eb:03:a1:53:f3:22:c7:a4:0c: 27:e2:01:f7:ca:3a:dd:ce:eb:10:42:e3:95:8f:a5:19:b2:c4: 82:d7:57:81:d7:af:7b:37:16:14:8b:b0:95:a0:ae:49:c0:d9: 4f:d6:9f:58:0c:96:18:fc:db:86:06:5c:2f:72:28:ae:7a:b1: c8:35:eb:57:cd:e3:4e:2b:f7:ea:b1:b7:73:50:2d:a1:f9:2a: 79:fc:c9:80 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt3WJzFogQTqEZkDpHDeS12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTYyZDVhNjdiN2EyMGY4NjVlNzUzMTYzYTZlZDBlNWYzNDdlODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoolwGvaaNoiCxqmKy3PLAJBnsJZY 2KBC6aT1Gs/1JBBPv3SZVRGd83ZdvxtFWBQtyem9g5qks6KxnUCdPGj3IU8+OFMM A6yUWBuc7OUXe7K/wbZyiieOoeipDZ7/z8d87YAHwr6QQ4VUjFefEQJFASWneEvw yl5jhsOKvUQxfnoiBJaZvgtFLlIzAESTzfJEderOsqU37iQrd3oKp7olxQJ+is3q bza2ZM88Q6iGgAsf1NEx+pIKuTCKH5V3DYbofgckaAoOGsrCK++fuEOZnphQq32F C7opx4WGZLP7lVG/750dP/JfjTNWBin912yrtKjmiveQebcm2Rjjdc6pawIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzhiMDFj Mi1lY2JlLTRmODgtYWUzNy01MDRjOGZjMjIwZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvOGIwMWMy LWVjYmUtNGY4OC1hZTM3LTUwNGM4ZmMyMjBlYS8xL0JXTFZwbnQ2SVBobDUxTVdP bTdRNWZOSDZEay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDwgGAAwQFw5IAMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAhoCMA0GCSqGSIb3DQEBCwUAA4IBAQAHNz7t6j+VTlpjTqYv3B390AHw /5XRm7JBjLz4dpiqQidP9dow3LsTiIwWhCy7Tfv+RYIGPoPhxpNYw7SzB76cZ9XR sHyIR0E4A4G/bl7WARtbnxhDg/xDRsuBor8rGCHqVrcQDAgljs1a7Dpq0GZfP3my acMC1tegBE/N84Bq/9QY20u9PtJyLuQTql7k+oiRWtdAlVNtG/FVcJ/hfnWvVZI1 iQeq4aRCv2brA6FT8yLHpAwn4gH3yjrdzusQQuOVj6UZssSC11eB1697NxYUi7CV oK5JwNlP1p9YDJYY/NuGBlwvciiuerHINetXzeNOK/fqsbdzUC2h+Sp5/MmA -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:33 2026 by rpki-client