This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
File:                     BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer (raw, json)
Hash identifier:          4ZK5ZUZ00NvfvZ71LgKZ5pLz7KfgNI08mnPXJfX92i8=
Subject key identifier:   06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AC611E5C1068AA266D498CB857F208D1B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 16:07:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215131
                          IP: 2001:67c:e5c::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c6:11:e5:c1:06:8a:a2:66:d4:98:cb:85:7f:20:8d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 27 16:07:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:fd:d0:34:8a:d5:42:ad:e0:47:93:90:4a:
                    99:3c:4e:9e:ec:35:07:31:ca:41:0c:77:8d:5b:f6:
                    b4:71:6c:f3:77:80:28:2d:52:80:11:d9:3e:f8:07:
                    96:23:f5:3a:e5:1e:69:df:10:8c:09:e1:3e:c7:49:
                    b0:d1:08:2f:47:82:f8:1a:de:5d:76:01:02:f7:49:
                    7f:93:c8:e3:03:c6:b5:4e:64:a0:a2:61:61:69:e3:
                    2c:40:37:72:54:59:54:4e:ba:8e:b9:d9:03:fd:78:
                    ee:ec:d7:3b:21:37:50:7c:66:c2:e0:2c:0d:b8:fc:
                    66:10:08:95:4e:aa:8a:b3:85:45:09:c9:19:91:f4:
                    01:31:83:43:51:a8:c0:2a:99:30:53:82:95:35:8f:
                    61:e4:86:70:50:e5:1f:dc:98:0c:f2:c9:5d:bc:43:
                    96:7a:ad:46:fe:cb:a0:13:23:79:f8:98:71:f1:67:
                    c3:14:62:d3:92:70:be:a8:6a:6e:3b:bd:8a:0c:36:
                    f1:4b:0f:b6:7f:c3:61:10:a9:cf:6d:e0:6f:ed:96:
                    57:17:55:ec:9a:99:4e:f1:fa:32:18:4e:86:1d:aa:
                    98:7d:44:5e:df:c4:76:cb:d3:91:8c:15:b6:4f:d9:
                    cd:ea:ce:8e:05:ec:e0:14:ba:c5:1b:a7:4d:b8:9e:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:e5c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215131

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:5e:33:52:cb:a3:13:29:8a:2f:99:71:da:5e:fb:00:b0:
         d3:e3:01:0b:bf:07:63:d7:24:0f:fc:69:70:26:1d:45:b1:0b:
         55:fb:4f:54:a8:c2:c9:33:c5:f1:6d:cc:02:c5:52:e6:9d:28:
         44:41:26:d6:d0:13:08:96:f2:20:63:44:b9:9e:69:82:1d:d0:
         9c:45:b5:8c:40:c4:49:e6:38:54:9d:25:82:d1:6b:54:8e:11:
         b5:d8:f0:38:39:18:b2:31:31:73:54:69:98:6e:bb:fc:a9:35:
         c0:1c:fd:f4:3b:48:73:88:17:b4:cb:20:10:14:fc:9d:b6:40:
         2a:ef:35:c0:3e:d6:fd:8f:9e:ac:de:cd:0b:87:86:3f:1f:33:
         4b:22:28:f3:0e:a3:02:e3:ce:b5:e5:dd:1a:8e:f7:55:39:e2:
         8e:47:ba:b1:6a:8f:88:0c:0e:21:8a:4f:f1:03:c8:fc:80:08:
         c6:31:38:c1:16:ba:63:7e:86:f1:da:24:63:bc:1d:46:13:90:
         05:62:c6:bd:02:42:bb:bc:51:01:66:f4:05:88:91:72:da:78:
         9a:23:40:a8:42:d1:96:d1:20:df:8d:ed:c6:b4:de:de:5d:53:
         cc:b7:83:8e:e3:de:a9:d2:aa:00:9d:e8:23:96:5f:5b:c3:86:
         8d:c0:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----