This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer File: BwSD09YvGcCDV0bctyHIgyw7eSY.cer (raw, json) Hash identifier: CgQpD0Gicaxyu48VUaW5LWocjGpcLV8/nuaa4XC5DLI= Subject key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C1BD8C4994101E738663333451AE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60619 IP: 45.85.204.0/22 IP: 45.90.48.0/22 IP: 45.131.12.0/22 IP: 45.134.92.0/22 IP: 185.249.144.0/22 IP: 2a0c:6280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1b:d8:c4:99:41:01:e7:38:66:33:33:45:1a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=070483d3d62f19c0835746dcb721c8832c3b7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:2a:d7:08:72:15:6c:0a:08:31:86:3a:2e: 48:44:9c:5e:46:80:8b:32:31:57:8e:b7:0c:21:67: 5f:c1:75:92:f1:ac:e9:4e:70:d7:cd:54:91:73:4a: 9f:c7:45:4a:ec:6d:c4:1d:1d:d6:6a:ad:bc:f5:cb: 83:f7:34:30:2b:9d:b6:d6:49:0c:8e:9c:f0:ef:e0: 59:5b:4a:20:ea:9a:49:4c:77:06:c3:0b:ee:68:ba: 74:7a:1f:a9:bf:a3:b8:97:89:dd:00:02:15:5f:42: 47:b8:9f:f2:e4:ce:13:3e:9b:02:bd:96:28:80:f1: 8f:20:2f:2a:77:d2:60:d4:b4:25:a1:33:f9:9a:ea: f3:c6:f3:6c:a3:e4:b9:b1:f3:19:87:85:29:e2:f2: e2:58:32:c8:4e:a9:c8:c2:87:4d:88:a6:a3:59:0e: 65:2c:45:ae:a4:9f:b9:a9:0d:3b:db:5e:f9:1f:72: ad:51:64:7a:4a:01:bd:5a:3e:bf:f9:d7:58:8b:3a: 2e:80:d6:ac:f1:2a:86:b9:b0:3f:ed:15:94:a7:10: b8:78:c0:0d:25:3a:61:d9:c5:d2:52:3c:3e:cf:5a: 82:ce:57:59:9a:df:5d:29:f9:c5:db:63:0d:4c:6c: f5:91:78:e5:7f:d4:5e:2c:18:8c:97:ae:cf:c4:84: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.204.0/22 45.90.48.0/22 45.131.12.0/22 45.134.92.0/22 185.249.144.0/22 IPv6: 2a0c:6280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60619 Signature Algorithm: sha256WithRSAEncryption 20:c2:1d:d7:92:da:dd:97:96:ff:72:a8:86:b0:1c:65:a2:4d: bb:64:0a:0c:88:2b:6b:d6:aa:53:99:e0:bd:0a:76:c8:64:7c: de:62:63:d8:24:56:ca:6e:74:40:38:67:91:b5:95:95:70:6b: 79:be:00:f9:73:7c:f4:75:b0:cc:d2:2b:5e:fc:1a:ed:e8:ab: 4f:a8:6a:ab:31:6d:bc:7a:39:ab:5f:0a:5b:59:cc:b1:7d:74: ce:91:35:40:35:6a:37:80:0c:82:ac:e7:e5:68:34:9a:03:b3: c6:05:55:99:bb:5b:16:2d:d2:02:ac:41:a0:78:3c:27:2b:52: 52:ba:9b:a4:86:85:be:92:98:46:c4:4c:fb:89:32:7b:49:89: 6f:4d:c6:51:29:65:d8:9d:2c:5e:24:9c:c6:8a:de:99:a8:c9: 5e:1a:79:8b:da:da:83:6d:f9:90:2b:4a:94:87:eb:40:e8:5c: 01:89:aa:73:fb:92:e1:ab:65:b8:8b:12:ac:88:08:99:a0:e1: 21:9c:28:3d:06:72:64:eb:60:9e:98:ab:50:d8:e8:b7:62:95: 8b:74:bb:9e:66:86:be:2a:73:a5:dd:d8:e4:6f:61:06:a5:d9: 63:02:4a:49:82:87:03:9f:e3:85:a2:58:e1:b1:77:29:6d:bd: c0:ab:f3:1d -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9XBvYxJlBAec4ZjMzRRrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA0ODNkM2Q2MmYxOWMwODM1NzQ2ZGNiNzIxYzg4MzJjM2I3OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUkq1whyFWwKCDGGOi5IRJxeRoCL MjFXjrcMIWdfwXWS8azpTnDXzVSRc0qfx0VK7G3EHR3Waq289cuD9zQwK5221kkM jpzw7+BZW0og6ppJTHcGwwvuaLp0eh+pv6O4l4ndAAIVX0JHuJ/y5M4TPpsCvZYo gPGPIC8qd9Jg1LQloTP5murzxvNso+S5sfMZh4Up4vLiWDLITqnIwodNiKajWQ5l LEWupJ+5qQ072175H3KtUWR6SgG9Wj6/+ddYizougNas8SqGubA/7RWUpxC4eMAN JTph2cXSUjw+z1qCzldZmt9dKfnF22MNTGz1kXjlf9ReLBiMl67PxIQxWQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFAcEg9PWLxnAg1dG3LchyIMsO3kmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzY0NTFj MS0yYmNkLTQ0NjMtYTcwMC1kNDQyYzRmOWU5YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNjQ1MWMx LTJiY2QtNDQ2My1hNzAwLWQ0NDJjNGY5ZTliZC8xL0J3U0QwOVl2R2NDRFYwYmN0 eUhJZ3l3N2VTWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLVXMAwQCLVowAwQCLYMMAwQCLYZcAwQCufmQ MA0EAgACMAcDBQMqDGKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsyzANBgkq hkiG9w0BAQsFAAOCAQEAIMId15La3ZeW/3KohrAcZaJNu2QKDIgra9aqU5ngvQp2 yGR83mJj2CRWym50QDhnkbWVlXBreb4A+XN89HWwzNIrXvwa7eirT6hqqzFtvHo5 q18KW1nMsX10zpE1QDVqN4AMgqzn5Wg0mgOzxgVVmbtbFi3SAqxBoHg8JytSUrqb pIaFvpKYRsRM+4kye0mJb03GUSll2J0sXiScxoremajJXhp5i9rag235kCtKlIfr QOhcAYmqc/uS4atluIsSrIgImaDhIZwoPQZyZOtgnpirUNjot2KVi3S7nmaGvipz pd3Y5G9hBqXZYwJKSYKHA5/jhaJY4bF3KW29wKvzHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:38:59 2026 by rpki-client