This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer File: Ba15SS6AmTTWk7EYVedRAyQVaes.cer (raw, json) Hash identifier: 3nG19K4oMgaK61AUTFr9d8B218C0DWfgbMTjFe4fVh4= Subject key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36015F608846714856F113C3ECA695 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 138.231.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:01:5f:60:88:46:71:48:56:f1:13:c3:ec:a6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ad79492e809934d693b11855e75103241569eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:bf:61:e2:56:20:b7:07:84:d3:43:50:08: 3a:71:ad:7a:5b:8b:e3:01:8c:9f:52:5c:de:78:33: 66:42:b0:33:47:ca:76:11:68:52:f6:48:a9:59:58: 4c:fc:ac:4a:3c:53:a4:9c:62:c5:4c:d1:00:be:8e: de:db:4d:4d:fe:61:11:7a:d7:b4:66:ac:52:0d:1f: 1d:58:9f:54:11:ce:12:bf:ca:7d:4e:67:f1:7d:cb: da:5f:0a:98:6e:00:3c:de:47:fa:16:15:ae:66:7c: 92:ea:3a:e6:5e:e6:fa:1a:21:fa:a7:ac:22:23:6c: eb:5e:56:6e:ce:d9:f2:47:d3:de:aa:a3:74:82:1e: 1f:17:d7:a7:2f:c1:15:aa:e6:56:31:94:10:6f:31: 62:4c:41:0f:52:2b:9f:e9:94:cd:a1:eb:e8:69:24: fa:7f:89:d4:97:f8:5b:5d:2b:6b:6d:44:e2:8c:98: c1:16:9e:50:a0:7f:ef:51:30:de:d0:6e:90:4b:28: 7d:bb:3d:a4:e6:6e:7f:48:5e:6e:67:01:33:62:ba: 25:96:4c:fc:c3:ef:d3:41:04:bc:19:15:8d:cf:a2: 25:01:d8:9b:63:22:bc:b6:2f:43:da:4b:6b:71:52: a3:20:44:ab:1c:c2:41:c7:a1:2c:8f:b6:dc:48:a1: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:ce:01:ed:17:00:ce:0c:9c:2e:2d:a2:c7:f0:6d:8c:62:fb: ba:a1:ee:12:b9:54:8c:ba:73:f5:90:93:27:6d:eb:cc:61:e0: 3e:95:ff:6d:6f:b3:49:20:25:3d:63:d2:1f:40:27:e8:9e:12: 76:3f:b0:68:b8:47:f1:dd:1f:12:00:01:e3:ab:b8:3b:05:56: ce:4d:9b:11:b0:c1:7c:f9:f5:d7:fd:d7:d7:17:9a:2a:ec:42: e9:d5:af:a4:3e:e8:24:28:b6:6b:fd:44:d4:6d:d9:21:73:f8: 2b:f3:de:bb:7f:84:d6:2c:9a:cb:92:f9:9a:65:9c:a7:05:bb: 8a:55:bc:72:1f:4a:6d:8f:4c:dd:4a:e2:f7:d9:e3:57:29:87: ba:d4:b0:6b:9c:ae:f4:08:4f:96:3a:2b:bb:ef:cf:be:ca:ab: 4e:17:31:73:0f:06:d1:86:cb:5e:9e:89:72:0b:03:09:49:72: 95:6b:ad:d7:e6:48:cf:3e:8c:91:3e:c7:2d:19:76:6f:ae:4c: 0d:33:bd:1b:56:d9:90:83:4b:d2:b7:3d:1e:12:97:7e:f8:4e: 8a:48:58:b2:4a:64:84:5c:66:c2:2a:88:a2:5a:94:af:9f:55: 5f:f1:e7:16:b7:ea:fb:15:ea:b8:de:67:1a:54:4e:f3:a4:98: 31:34:6e:b9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt7NgFfYIhGcUhW8RPD7KaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWFkNzk0OTJlODA5OTM0ZDY5M2IxMTg1NWU3NTEwMzI0MTU2OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYm/YeJWILcHhNNDUAg6ca16W4vj AYyfUlzeeDNmQrAzR8p2EWhS9kipWVhM/KxKPFOknGLFTNEAvo7e201N/mERete0 ZqxSDR8dWJ9UEc4Sv8p9TmfxfcvaXwqYbgA83kf6FhWuZnyS6jrmXub6GiH6p6wi I2zrXlZuztnyR9PeqqN0gh4fF9enL8EVquZWMZQQbzFiTEEPUiuf6ZTNoevoaST6 f4nUl/hbXStrbUTijJjBFp5QoH/vUTDe0G6QSyh9uz2k5m5/SF5uZwEzYrollkz8 w+/TQQS8GRWNz6IlAdibYyK8ti9D2ktrcVKjIESrHMJBx6Esj7bcSKEQCwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFAWteUkugJk01pOxGFXnUQMkFWnrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzI4MGI3 Ni0xNWFjLTRjNjgtODAzMi1mMzc5N2VmMzQ4ZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMjgwYjc2 LTE1YWMtNGM2OC04MDMyLWYzNzk3ZWYzNDhmZi8xL0JhMTVTUzZBbVRUV2s3RVlW ZWRSQXlRVmFlcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAiucwDQYJKoZIhvcNAQELBQADggEBAJfOAe0X AM4MnC4tosfwbYxi+7qh7hK5VIy6c/WQkydt68xh4D6V/21vs0kgJT1j0h9AJ+ie EnY/sGi4R/HdHxIAAeOruDsFVs5NmxGwwXz59df919cXmirsQunVr6Q+6CQotmv9 RNRt2SFz+Cvz3rt/hNYsmsuS+ZplnKcFu4pVvHIfSm2PTN1K4vfZ41cph7rUsGuc rvQIT5Y6K7vvz77Kq04XMXMPBtGGy16eiXILAwlJcpVrrdfmSM8+jJE+xy0Zdm+u TA0zvRtW2ZCDS9K3PR4Sl374TopIWLJKZIRcZsIqiKJalK+fVV/x5xa36vsV6rje ZxpUTvOkmDE0brk= -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:42 2026 by rpki-client