This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer File: BfCLdPURftOAcj2eQp7LSqU4Ulo.cer (raw, json) Hash identifier: Lg1N4QEDry1s7ZBvubBsXnEUXhfDZOHRPuWysaTIweY= Subject key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE56F035F56F80BB5682E6C3EB29B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35197 IP: 80.83.16.0/20 IP: 109.110.96.0/19 IP: 2a0d:6340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e5:6f:03:5f:56:f8:0b:b5:68:2e:6c:3e:b2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f08b74f5117ed380723d9e429ecb4aa538525a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:99:64:8e:8e:dc:ab:a2:3e:2c:41:61:d2: 7f:61:f3:27:8a:2a:ce:d6:19:5a:16:0a:bc:d5:b1: 91:2b:f9:c2:79:dd:09:5e:a9:dd:b9:9f:2e:cd:11: 18:81:36:02:be:cc:4c:dd:60:dc:22:da:3e:05:a0: 72:6e:a9:2e:15:aa:32:80:72:1c:95:4b:cb:ac:b0: 9c:2a:10:32:e8:b7:d4:e6:85:34:96:b8:91:4e:fd: d3:9d:45:36:f3:a9:51:e8:8f:37:93:ec:98:dd:3b: 3f:cc:1a:bc:6b:a7:27:d6:ea:58:5b:1a:73:80:aa: 9e:7e:f3:bf:c9:c2:2e:30:6e:8a:4a:d3:72:e9:7c: 0e:95:ed:06:31:75:2e:9f:b1:25:c1:a7:12:3b:59: 76:a2:6e:31:e1:45:bf:4f:31:09:22:d6:c0:fd:0b: 46:36:cd:86:e1:bf:e4:f2:f2:04:c1:30:04:b8:dd: d1:f0:f8:4e:27:4f:84:36:95:36:1a:81:6a:6d:e7: 28:d6:ed:88:ec:92:f8:97:ee:16:3c:1b:cf:d8:6e: 13:9e:62:b0:eb:9a:51:59:93:8f:d6:4b:74:78:62: c4:12:2c:cd:66:38:30:ba:28:57:99:35:f1:ed:b3: e0:73:90:df:66:f3:42:76:4e:2d:b8:6e:d4:71:f9: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.16.0/20 109.110.96.0/19 IPv6: 2a0d:6340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35197 Signature Algorithm: sha256WithRSAEncryption 9d:81:94:6b:22:bb:fa:d5:ba:42:d7:b8:bd:18:a6:fc:a2:fb: 38:f2:72:09:2f:2a:42:99:6c:38:f6:a0:71:28:c3:41:5b:37: a4:df:41:66:8e:66:ca:51:b4:eb:60:df:a2:46:51:4c:db:32: e4:4c:42:62:f3:da:92:9a:54:3b:40:f7:66:23:3f:6c:a5:c9: b6:7c:8a:27:7c:6a:5a:79:41:6b:50:dc:f3:4d:d2:29:9d:01: 1c:51:8d:57:e0:e8:b2:d3:e0:2e:29:e5:ec:75:d0:47:93:0c: 3d:15:74:34:88:af:10:11:4d:6b:99:87:7d:91:57:66:c2:d7: 63:e3:76:59:05:8c:a6:cf:4b:d6:03:61:1d:92:e6:e0:42:e6: da:1e:20:97:37:19:78:a9:db:64:a8:c5:44:b2:7a:93:bf:14: 11:be:9a:0b:5c:3a:6d:87:5f:f7:05:f5:40:a8:75:15:d1:8d: ad:ac:50:f9:2f:bb:ec:5c:ae:9f:e0:cb:b3:2d:cb:d0:26:8f: 34:36:9c:84:82:b3:eb:6b:42:ec:a2:bd:9a:17:79:4a:07:44: b9:ba:f5:c5:24:46:dd:77:ad:e6:88:e8:a7:bc:91:58:39:c2: de:17:fc:9b:79:27:7f:e6:8e:d0:44:a9:f6:68:a0:88:19:43: c9:d8:8a:ee -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fuVvA19W+Au1aC5sPrKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWYwOGI3NGY1MTE3ZWQzODA3MjNkOWU0MjllY2I0YWE1Mzg1MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs42ZZI6O3KuiPixBYdJ/YfMniirO 1hlaFgq81bGRK/nCed0JXqnduZ8uzREYgTYCvsxM3WDcIto+BaBybqkuFaoygHIc lUvLrLCcKhAy6LfU5oU0lriRTv3TnUU286lR6I83k+yY3Ts/zBq8a6cn1upYWxpz gKqefvO/ycIuMG6KStNy6XwOle0GMXUun7ElwacSO1l2om4x4UW/TzEJItbA/QtG Ns2G4b/k8vIEwTAEuN3R8PhOJ0+ENpU2GoFqbeco1u2I7JL4l+4WPBvP2G4TnmKw 65pRWZOP1kt0eGLEEizNZjgwuihXmTXx7bPgc5DfZvNCdk4tuG7Ucfk8YQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAXwi3T1EX7TgHI9nkKey0qlOFJaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzE4ODZk OC1kODc0LTRjMjQtOTJiOS1kNDFhYzgxZDFjYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvMTg4NmQ4 LWQ4NzQtNGMyNC05MmI5LWQ0MWFjODFkMWNjNC8xL0JmQ0xkUFVSZnRPQWNqMmVR cDdMU3FVNFVsby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUFMQAwQFbW5gMA0EAgACMAcDBQMqDWNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCJfTANBgkqhkiG9w0BAQsFAAOCAQEAnYGU ayK7+tW6Qte4vRim/KL7OPJyCS8qQplsOPagcSjDQVs3pN9BZo5mylG062DfokZR TNsy5ExCYvPakppUO0D3ZiM/bKXJtnyKJ3xqWnlBa1Dc803SKZ0BHFGNV+DostPg Linl7HXQR5MMPRV0NIivEBFNa5mHfZFXZsLXY+N2WQWMps9L1gNhHZLm4ELm2h4g lzcZeKnbZKjFRLJ6k78UEb6aC1w6bYdf9wX1QKh1FdGNraxQ+S+77Fyun+DLsy3L 0CaPNDachIKz62tC7KK9mhd5SgdEubr1xSRG3Xet5ojop7yRWDnC3hf8m3knf+aO 0ESp9migiBlDydiK7g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:23:50 2026 by rpki-client