This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer File: BpCRPbvu2t3pXc5HBFJihOeufMo.cer (raw, json) Hash identifier: 9ExL6vydJylhxcNDtaCco+LkhhUh/w51BRBi+wC45SM= Subject key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37B30093407C8AC74EE234DA5A07A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.182.210.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b3:00:93:40:7c:8a:c7:4e:e2:34:da:5a:07:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0690913dbbeedadde95dce4704526284e7ae7cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:22:f5:d0:e4:55:21:9f:60:6d:4f:8a:88: 80:6c:e3:e1:ec:a0:cc:5b:fd:02:c8:58:c2:9c:b6: 67:81:1b:0a:26:7e:bf:db:87:03:e4:b6:5b:fa:a8: ec:0a:5b:d5:2f:43:03:68:90:e2:79:5a:df:30:48: 76:89:bf:33:6e:fe:73:c8:20:a0:0b:6d:f4:9d:9e: 06:49:5f:e8:1a:d3:5b:95:8f:8d:88:19:7a:2d:c3: 09:9d:fb:fe:8f:31:b3:fa:b5:87:cf:c9:fb:38:8b: bd:25:c4:72:ba:2f:3f:13:b5:95:c9:b8:42:2a:f9: 02:2a:05:02:b3:bd:14:12:46:ca:f6:82:42:3f:9e: f6:f4:f6:d8:ad:49:f3:fb:92:57:0a:8a:1e:6e:8a: c7:a2:46:63:1a:28:bf:f1:fe:65:12:d8:de:d6:a9: 2e:5b:29:77:d4:20:ab:0a:06:fb:f5:dc:47:d9:2b: ac:b2:d4:4d:c9:2f:33:1a:72:2f:60:38:ce:ba:e0: b8:21:55:9d:56:6a:b5:1b:d2:16:81:2d:9e:98:5c: d2:10:53:1e:e8:d5:c7:27:4b:4d:db:f3:0e:98:df: 73:f1:fa:c5:87:d6:fa:b0:e8:6f:ef:a8:6d:cf:c3: 18:ad:6b:0b:67:0c:6c:58:b5:8e:62:5e:4a:55:0a: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.210.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b3:94:46:d0:73:1b:f0:88:44:4d:6e:5a:44:1f:37:3c:2c: e7:fd:35:43:9e:c4:cf:a3:b7:07:fc:38:fd:54:f0:c0:d6:f1: ab:c6:61:70:9d:30:c7:68:44:2b:92:b4:88:4d:88:c2:f2:81: 87:ff:9a:fd:25:fa:41:67:55:01:c7:36:df:32:ed:3d:f9:87: ec:66:12:19:d4:7f:0f:83:fe:d7:f9:80:4a:b1:d8:10:26:9f: de:9c:a3:8c:75:64:63:23:e5:98:b8:0e:50:f3:ce:22:83:ac: b0:9b:0c:4e:7f:8d:0b:e6:3e:f9:6c:3b:f6:0c:8f:95:e0:f4: 94:df:9a:f7:23:c9:4f:c5:a3:c4:f5:89:71:59:67:f8:cd:8d: bb:31:c3:65:36:06:52:9f:2a:91:6c:14:0c:a8:d2:09:d2:ae: 31:c9:48:ee:dd:6b:42:c3:4f:be:0f:07:ad:9f:b4:ac:31:36: 22:05:e7:55:1d:47:ed:97:f5:8f:8e:f3:17:0d:1b:67:9d:b1: 72:4f:8a:df:a6:c1:cc:77:ca:5c:8e:d3:d3:61:f7:74:ae:ab: a4:a2:e0:17:0f:1e:31:a7:79:00:c5:51:e1:bd:55:ab:d7:a6: 6b:88:62:fc:e0:ad:22:eb:d9:44:84:0a:77:fa:0b:98:43:e1: 59:d0:17:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N7MAk0B8isdO4jTaWgeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjkwOTEzZGJiZWVkYWRkZTk1ZGNlNDcwNDUyNjI4NGU3YWU3Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIAi9dDkVSGfYG1PioiAbOPh7KDM W/0CyFjCnLZngRsKJn6/24cD5LZb+qjsClvVL0MDaJDieVrfMEh2ib8zbv5zyCCg C230nZ4GSV/oGtNblY+NiBl6LcMJnfv+jzGz+rWHz8n7OIu9JcRyui8/E7WVybhC KvkCKgUCs70UEkbK9oJCP5729PbYrUnz+5JXCooeborHokZjGii/8f5lEtje1qku Wyl31CCrCgb79dxH2SusstRNyS8zGnIvYDjOuuC4IVWdVmq1G9IWgS2emFzSEFMe 6NXHJ0tN2/MOmN9z8frFh9b6sOhv76htz8MYrWsLZwxsWLWOYl5KVQpPpwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAaQkT277trd6V3ORwRSYoTnrnzKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2ZhYjkx OC04ZjRkLTRlZGUtYmFkMS0zMWI5NTAyNzA1MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZmFiOTE4 LThmNGQtNGVkZS1iYWQxLTMxYjk1MDI3MDUzNi8xL0JwQ1JQYnZ1MnQzcFhjNUhC RkppaE9ldWZNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw7bSMA0GCSqGSIb3DQEBCwUAA4IBAQAMs5RG 0HMb8IhETW5aRB83PCzn/TVDnsTPo7cH/Dj9VPDA1vGrxmFwnTDHaEQrkrSITYjC 8oGH/5r9JfpBZ1UBxzbfMu09+YfsZhIZ1H8Pg/7X+YBKsdgQJp/enKOMdWRjI+WY uA5Q884ig6ywmwxOf40L5j75bDv2DI+V4PSU35r3I8lPxaPE9YlxWWf4zY27McNl NgZSnyqRbBQMqNIJ0q4xyUju3WtCw0++Dwetn7SsMTYiBedVHUftl/WPjvMXDRtn nbFyT4rfpsHMd8pcjtPTYfd0rqukouAXDx4xp3kAxVHhvVWr16ZriGL84K0i69lE hAp3+guYQ+FZ0Bfz -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:22 2026 by rpki-client