This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer File: BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer (raw, json) Hash identifier: WStc91PiqLKNWglQD8RvzftHN2Civ2fP9JY7q5ImYoQ= Subject key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B810D50E0E762C69B4CAF2C3C95F66B03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 23:31:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210464 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:0d:50:e0:e7:62:c6:9b:4c:af:2c:3c:95:f6:6b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 23:31:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:3a:64:54:05:b6:07:79:51:e7:71:d6:70: e8:97:f5:02:d0:1d:cb:1e:61:88:94:a1:47:2f:ad: 14:4e:ee:4c:6d:7f:66:37:b1:3a:a5:cb:44:e8:e5: 35:ef:15:67:6c:10:22:af:b3:09:ba:92:63:73:0f: 31:11:06:f8:54:77:e7:c6:b7:f7:8f:03:a5:aa:5c: 8b:e1:7a:25:63:aa:21:ca:94:73:a7:34:69:95:86: 32:92:aa:63:25:e3:6e:a7:07:bd:4e:75:d2:c3:39: 7c:18:9a:af:b1:96:74:4f:70:d3:de:76:44:b5:30: 45:78:59:20:ea:c7:f9:7b:d2:09:32:c1:a2:ae:9a: 6b:a8:7f:00:88:b2:24:ec:75:cc:a1:d0:7a:5a:a2: a5:d1:ce:0f:d5:21:2a:a7:70:68:0f:d3:fd:27:84: bd:5f:7e:6c:63:aa:c9:97:55:06:82:b6:1e:a9:b8: 86:be:9d:e7:74:d2:c5:b2:81:65:62:6f:fa:43:f1: 81:77:e0:92:d8:d6:0e:67:90:7e:6a:e4:0f:5f:7d: 91:43:53:92:15:82:e6:ee:ae:bf:8e:40:d7:a6:65: 39:22:5a:7c:85:0e:e2:24:18:13:a1:98:9c:07:7f: 07:90:3d:58:1d:f7:e9:c4:55:61:ab:80:b9:86:08: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210464 Signature Algorithm: sha256WithRSAEncryption 72:40:8a:19:f0:3e:cb:da:22:97:0d:e3:b8:d6:65:71:e7:16: 9f:28:e7:83:77:7f:e2:fa:a4:40:1a:fa:c3:fd:74:9f:e5:b0: 2b:11:54:a9:b9:89:54:71:08:82:bb:d7:a0:c1:d7:f3:ad:d7: e9:1e:88:f6:46:a9:23:82:9e:63:07:b3:28:f6:1e:af:00:04: 1f:a0:27:ee:07:f0:3d:51:01:ff:a4:bc:79:21:76:cb:58:ce: 95:5e:a2:50:dc:8d:58:da:9e:f3:5e:c6:4c:26:2e:bc:b9:b9: c4:6c:4d:44:2c:19:25:23:10:28:62:46:66:47:25:1b:a1:15: aa:7d:6b:43:90:fc:9f:82:ef:f7:88:70:38:57:a2:75:b4:2f: 13:f6:cb:88:a2:0a:62:20:5a:b2:c6:38:47:68:7e:16:67:b1: 4c:68:d8:d5:8c:d0:b2:f0:41:dd:1e:9f:2a:a5:ff:a7:54:18: d0:dc:48:92:24:cb:04:6a:b1:08:5c:3d:ef:a1:71:cf:0a:c3: 6e:cc:3a:68:14:94:63:4b:23:66:6a:2a:3c:2d:5c:b8:ae:63: 43:a8:17:2a:e4:5c:5c:85:4b:ef:03:15:e7:ad:9b:2e:98:4a: 31:a6:31:53:9b:9b:fe:9b:bf:74:7a:47:0f:12:88:53:9c:51: f8:89:fd:c8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZuBDVDg52LGm0yvLDyV9msDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMjMzMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY1YTdmOWY5YzliMzY2MDczYzUzY2FlZWNkN2ZmNGQxZmNkZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDc6ZFQFtgd5Uedx1nDol/UC0B3L HmGIlKFHL60UTu5MbX9mN7E6pctE6OU17xVnbBAir7MJupJjcw8xEQb4VHfnxrf3 jwOlqlyL4XolY6ohypRzpzRplYYykqpjJeNupwe9TnXSwzl8GJqvsZZ0T3DT3nZE tTBFeFkg6sf5e9IJMsGirpprqH8AiLIk7HXModB6WqKl0c4P1SEqp3BoD9P9J4S9 X35sY6rJl1UGgrYeqbiGvp3ndNLFsoFlYm/6Q/GBd+CS2NYOZ5B+auQPX32RQ1OS FYLm7q6/jkDXpmU5Ilp8hQ7iJBgToZicB38HkD1YHffpxFVhq4C5hgil9QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAVlp/n5ybNmBzxTyu7Nf/TR/N0HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjNDNk M2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmM0 M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmViMzRiLzAvMDU2NUE3RjlGOUM5 QjM2NjA3M0M1M0NBRUVDRDdGRjREMUZDREQwNy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNiAw DQYJKoZIhvcNAQELBQADggEBAHJAihnwPsvaIpcN47jWZXHnFp8o54N3f+L6pEAa +sP9dJ/lsCsRVKm5iVRxCIK716DB1/Ot1+keiPZGqSOCnmMHsyj2Hq8ABB+gJ+4H 8D1RAf+kvHkhdstYzpVeolDcjVjanvNexkwmLry5ucRsTUQsGSUjEChiRmZHJRuh Fap9a0OQ/J+C7/eIcDhXonW0LxP2y4iiCmIgWrLGOEdofhZnsUxo2NWM0LLwQd0e nyql/6dUGNDcSJIkywRqsQhcPe+hcc8Kw27MOmgUlGNLI2ZqKjwtXLiuY0OoFyrk XFyFS+8DFeetmy6YSjGmMVObm/6bv3R6Rw8SiFOcUfiJ/cg= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:53 2026 by rpki-client