This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer File: BWRw2Bso3FKOXyjbC7X20pRhGmU.cer (raw, json) Hash identifier: 5FO+cZlLZVmuADWNywAD3T/ogppMxYO1wHdeJS5O4gI= Subject key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E375A60AB0490E6B465C4B74A682B5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.235.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5a:60:ab:04:90:e6:b4:65:c4:b7:4a:68:2b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:1c:88:23:a2:d5:06:8a:30:b4:0b:6e:08: 4e:be:64:24:b6:5b:6c:a1:83:58:81:a4:cd:aa:9a: 92:4d:95:b2:ba:2e:25:ed:59:8d:fc:4a:cc:86:43: b8:fe:c1:2c:ef:25:c1:a8:11:13:94:16:68:d1:a1: d8:f0:87:5a:48:d5:22:2d:a4:74:10:7a:e6:09:c8: 40:a0:d5:0f:3f:c8:e7:96:f8:b8:ea:8e:40:a6:d3: 83:c8:06:76:c1:3f:2f:70:d3:a6:46:7c:f9:25:f4: 3a:47:b8:a4:f6:87:2a:14:cb:f6:a8:91:6c:31:60: 28:6e:11:9d:6d:3e:3c:e9:56:76:da:f4:94:01:8a: 90:90:ae:92:de:24:5d:6d:4b:c3:dd:fd:10:47:7e: bb:3d:0c:bf:cd:8c:13:ad:76:e8:70:03:e1:fa:db: d2:a7:a6:e7:0a:aa:de:69:b4:08:df:85:3d:81:4a: a5:68:12:8b:a0:a2:73:ef:a9:5c:8f:aa:3a:d8:1a: 29:bc:60:f9:79:9f:9b:29:7d:bb:29:5e:ed:4e:9c: 55:df:c7:14:e9:5d:0d:67:20:44:e4:e0:5e:fd:b9: df:af:28:57:83:c6:3e:9e:6e:02:12:dc:b7:8d:69: b7:53:54:6e:26:60:0e:89:24:11:d2:d1:7a:0c:32: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.48.0/21 Signature Algorithm: sha256WithRSAEncryption 15:1c:1d:8d:02:32:30:23:b5:1c:fe:ec:e3:7e:94:c2:79:2d: a4:44:18:2f:a7:e9:3f:32:80:ec:be:09:42:10:02:75:50:92: 8c:58:f3:cd:3d:22:4d:a7:d0:e5:eb:bd:94:68:8e:e9:0f:77: e2:70:b1:e6:bd:12:b1:4a:65:b7:f7:f9:9f:69:db:6a:6b:95: 81:01:05:bf:79:e1:98:2d:8b:0a:f3:dc:60:65:f0:43:43:0c: 6b:d0:11:0c:61:80:c9:d2:67:91:59:54:17:a6:9c:af:24:f3: fd:4f:cb:68:a2:85:67:3a:f2:ef:d7:37:bd:99:fe:61:8b:06: f6:56:4f:db:4b:75:e6:eb:b3:0d:dc:73:7e:da:b9:b2:de:b8: 98:78:f2:38:cd:b7:f6:c7:f7:13:52:a5:91:fa:df:0f:f2:c5: c3:1a:6d:d5:96:2a:48:84:c5:e6:e2:ad:be:05:9c:a5:3d:ac: 7d:8a:6d:d3:4e:5d:ed:36:c1:4b:7b:7d:dd:49:08:d0:be:d7: 29:f7:29:88:87:c3:ec:00:8d:1a:93:52:10:81:5f:38:1d:1e: 94:cb:42:30:65:09:07:59:04:a9:41:b5:3b:a0:60:60:73:f9: bc:00:05:45:6d:ed:47:85:69:74:8a:ee:e3:ce:2d:36:bd:a3: 51:67:32:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N1pgqwSQ5rRlxLdKaCtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY0NzBkODFiMjhkYzUyOGU1ZjI4ZGIwYmI1ZjZkMjk0NjExYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw8ciCOi1QaKMLQLbghOvmQktlts oYNYgaTNqpqSTZWyui4l7VmN/ErMhkO4/sEs7yXBqBETlBZo0aHY8IdaSNUiLaR0 EHrmCchAoNUPP8jnlvi46o5AptODyAZ2wT8vcNOmRnz5JfQ6R7ik9ocqFMv2qJFs MWAobhGdbT486VZ22vSUAYqQkK6S3iRdbUvD3f0QR367PQy/zYwTrXbocAPh+tvS p6bnCqreabQI34U9gUqlaBKLoKJz76lcj6o62BopvGD5eZ+bKX27KV7tTpxV38cU 6V0NZyBE5OBe/bnfryhXg8Y+nm4CEty3jWm3U1RuJmAOiSQR0tF6DDJDHwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAVkcNgbKNxSjl8o2wu19tKUYRplMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzE5MTZl MS1hZDljLTRiNDAtYTliMC05M2E4ODIyMWRlZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMTkxNmUx LWFkOWMtNGI0MC1hOWIwLTkzYTg4MjIxZGVmMi8xL0JXUncyQnNvM0ZLT1h5amJD N1gyMHBSaEdtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDLuswMA0GCSqGSIb3DQEBCwUAA4IBAQAVHB2N AjIwI7Uc/uzjfpTCeS2kRBgvp+k/MoDsvglCEAJ1UJKMWPPNPSJNp9Dl672UaI7p D3ficLHmvRKxSmW39/mfadtqa5WBAQW/eeGYLYsK89xgZfBDQwxr0BEMYYDJ0meR WVQXppyvJPP9T8toooVnOvLv1ze9mf5hiwb2Vk/bS3Xm67MN3HN+2rmy3riYePI4 zbf2x/cTUqWR+t8P8sXDGm3VlipIhMXm4q2+BZylPax9im3TTl3tNsFLe33dSQjQ vtcp9ymIh8PsAI0ak1IQgV84HR6Uy0IwZQkHWQSpQbU7oGBgc/m8AAVFbe1HhWl0 iu7jzi02vaNRZzKI -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:32 2026 by rpki-client