This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer File: BiFu7FFLB9zinTAToZCy7l_LH5Q.cer (raw, json) Hash identifier: 83JwvI6YKG82QrNl+Sx8LMADYFpPVw1KpWxJ7nAF9gU= Subject key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC985C555429439C9F96DEE7F3C09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212827 IP: 185.167.218.0/24 IP: 2a10:4240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c9:85:c5:55:42:94:39:c9:f9:6d:ee:7f:3c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:ef:fc:8b:81:a0:0c:29:52:8b:b3:66:db: f4:ce:de:86:49:b4:e9:65:75:73:4d:48:16:c6:20: 5d:b1:cc:1a:be:2d:29:fe:ad:d6:a1:86:fc:a1:88: 74:8c:aa:33:41:a3:fb:ce:23:d7:e4:b6:8b:c2:0c: a8:42:52:b4:35:be:95:52:0b:16:2a:55:a9:d0:59: c5:9a:4b:d8:83:07:aa:27:f8:ff:4b:d5:ce:37:55: b3:dd:3c:1b:8f:f1:b7:bd:d8:d8:a6:48:e5:a4:e0: e1:f6:e1:8f:6d:f6:99:9f:3d:59:6f:2b:d3:03:b9: 1d:0d:c4:5f:b2:f9:83:ce:7b:45:8c:9a:aa:8a:8c: b9:91:74:48:5a:67:b0:0f:51:c3:e8:ca:31:9f:97: 12:8d:f2:14:8a:08:dc:84:03:01:1c:76:72:23:32: 51:a4:7b:67:3f:a2:a0:1c:a7:ab:95:a9:b8:06:35: e2:d3:f8:ba:7b:77:2b:c0:70:74:29:cf:b5:b9:85: 43:47:40:c5:f5:2e:b9:d2:ca:4c:69:d6:2e:c4:2d: a2:e5:15:c6:cf:2c:6a:c2:73:4c:8a:6f:22:1c:49: f3:74:82:13:85:d4:c2:dc:e4:df:2d:6d:e3:70:d3: c3:c7:53:3a:d6:1c:d8:a5:6e:d3:4c:44:c6:cc:95: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.218.0/24 IPv6: 2a10:4240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212827 Signature Algorithm: sha256WithRSAEncryption 35:7e:bc:55:76:77:02:3c:b5:7b:a2:b1:7e:fc:26:a2:4e:46: e8:e8:08:2c:a8:36:7a:9c:ee:41:9d:ef:71:ba:ca:2a:1f:fe: 90:1d:f3:6a:02:12:4d:ff:77:83:6f:d8:96:24:98:91:af:d7: 1d:dc:ed:f5:b0:28:8f:16:5c:7d:fb:93:93:21:fe:3b:43:f3: d3:3a:b1:be:a7:fa:cd:99:a4:4f:84:80:62:68:26:32:99:0b: 16:38:33:3a:bb:c2:35:b4:9a:64:77:25:4a:f4:77:67:b5:24: af:68:4a:cc:0a:33:ae:f9:0d:d1:b3:d3:1d:18:4c:e9:87:60: 0b:ed:a3:ce:ff:3e:1c:f5:6b:67:24:15:24:4e:2b:41:30:e2: 3a:fe:f0:54:cf:a9:79:54:a3:d9:17:17:85:9e:a8:ee:98:60: 1d:4e:88:af:cc:18:be:aa:e5:86:4a:6d:06:0d:f5:9b:64:e1: 55:53:3d:74:b4:4b:e2:0c:fd:1f:54:df:f7:59:33:06:ea:a1: 89:55:d4:42:b4:72:55:0a:b7:58:1c:b5:8d:4d:e2:79:25:20: 08:a8:a2:b7:22:c5:d1:f6:1c:b4:16:4e:7b:69:51:92:5a:1c: fb:23:8d:2e:1b:db:22:02:52:77:cd:05:3e:ed:ce:6b:d7:8e: c6:3e:f2:f0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f8mFxVVClDnJ+W3ufzwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjIxNmVlYzUxNGIwN2RjZTI5ZDMwMTNhMTkwYjJlZTVmY2IxZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohLv/IuBoAwpUouzZtv0zt6GSbTp ZXVzTUgWxiBdscwavi0p/q3WoYb8oYh0jKozQaP7ziPX5LaLwgyoQlK0Nb6VUgsW KlWp0FnFmkvYgweqJ/j/S9XON1Wz3Twbj/G3vdjYpkjlpODh9uGPbfaZnz1ZbyvT A7kdDcRfsvmDzntFjJqqioy5kXRIWmewD1HD6Moxn5cSjfIUigjchAMBHHZyIzJR pHtnP6KgHKerlam4BjXi0/i6e3crwHB0Kc+1uYVDR0DF9S650spMadYuxC2i5RXG zyxqwnNMim8iHEnzdIIThdTC3OTfLW3jcNPDx1M61hzYpW7TTETGzJWMCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAYhbuxRSwfc4p0wE6GQsu5fyx+UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzE4Njhl ZS01MWE4LTQ2MTktOTE0My0xODhkY2ZmMGU0MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMTg2OGVl LTUxYTgtNDYxOS05MTQzLTE4OGRjZmYwZTQwNS8xL0JpRnU3RkZMQjl6aW5UQVRv WkN5N2xfTEg1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuafaMA0EAgACMAcDBQMqEEJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/WzANBgkqhkiG9w0BAQsFAAOCAQEANX68VXZ3Ajy1 e6Kxfvwmok5G6OgILKg2epzuQZ3vcbrKKh/+kB3zagISTf93g2/YliSYka/XHdzt 9bAojxZcffuTkyH+O0Pz0zqxvqf6zZmkT4SAYmgmMpkLFjgzOrvCNbSaZHclSvR3 Z7Ukr2hKzAozrvkN0bPTHRhM6YdgC+2jzv8+HPVrZyQVJE4rQTDiOv7wVM+peVSj 2RcXhZ6o7phgHU6Ir8wYvqrlhkptBg31m2ThVVM9dLRL4gz9H1Tf91kzBuqhiVXU QrRyVQq3WBy1jU3ieSUgCKiityLF0fYctBZOe2lRkloc+yONLhvbIgJSd80FPu3O a9eOxj7y8A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:44 2026 by rpki-client