This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer File: BysethAMDKVkRDcFjUL0_XIjNoE.cer (raw, json) Hash identifier: GXXWHo5BP4RdnJmI0b4G7ZKElFUZe6M9LPJZwecNHA4= Subject key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366E46209815C30A291807C81D4595 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16265 AS: 38930 AS: 60626 AS: 202134 AS: 203774 AS: 203928 IP: 31.31.32.0/21 IP: 46.182.120.0/21 IP: 87.255.32.0/19 IP: 89.255.248.0/21 IP: 185.28.68.0/22 IP: 185.100.132.0/22 IP: 2a00:ec8::/32 IP: 2a00:9d20::/32 IP: 2a03:2280::/32 IP: 2a06:1780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6e:46:20:98:15:c3:0a:29:18:07:c8:1d:45:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=072b1eb6100c0ca5644437058d42f4fd72233681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:a7:b0:4f:a9:85:a2:c1:3e:bc:ee:94:57: 2c:05:1b:d6:33:c2:59:d5:3f:91:35:97:85:80:eb: 7a:60:fa:e3:81:b5:f7:ba:29:6e:37:7e:54:ba:f6: 8c:ec:fd:31:0f:cb:be:a0:a3:5c:ba:23:a6:53:78: 23:78:29:b8:e3:c8:87:39:87:c1:17:83:04:98:d2: dd:6c:b2:5e:96:7d:e8:b3:82:bb:bc:f9:18:86:6a: 14:2f:ff:61:f5:2c:49:d7:81:15:55:93:c6:7c:fc: d8:ca:43:c7:09:59:58:2b:ca:9e:15:d0:7a:c2:c0: 7e:6c:1c:9b:c2:72:7d:ca:d9:da:cd:01:59:d3:16: 2d:4f:d6:09:94:42:ae:14:65:db:e1:fd:b5:5a:de: 93:d6:55:b6:fe:65:5d:1e:68:58:8d:e2:06:75:16: 2c:ed:fe:80:05:b0:c5:fa:3f:d1:4d:15:00:08:68: e5:81:f3:2b:ea:34:b0:37:48:cb:04:85:a0:3b:b6: 83:2e:bc:00:f3:b5:21:ae:bf:ad:67:40:a5:f3:77: 79:87:24:10:ad:5b:0a:b1:22:3a:ea:64:22:d9:44: 6a:08:44:ba:27:1d:a9:d1:ac:5f:33:0f:3c:64:e8: 08:c2:51:d2:98:5d:80:8c:13:a3:82:74:02:47:0b: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.32.0/21 46.182.120.0/21 87.255.32.0/19 89.255.248.0/21 185.28.68.0/22 185.100.132.0/22 IPv6: 2a00:ec8::/32 2a00:9d20::/32 2a03:2280::/32 2a06:1780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16265 38930 60626 202134 203774 203928 Signature Algorithm: sha256WithRSAEncryption 1e:83:b3:58:84:b9:4a:b1:f6:64:76:d5:0b:a7:d5:ed:0e:2d: c3:43:c3:0a:54:51:d3:19:62:cb:07:69:5a:e7:9d:3b:05:6c: 51:f5:2b:77:6c:07:4a:df:dd:3b:e2:64:92:70:7a:d8:ed:b2: 63:56:1c:d6:cd:9d:94:7f:89:c2:2d:73:36:f9:88:23:8d:6c: f6:08:fb:fb:82:87:26:8a:0c:43:33:fc:71:31:91:39:b8:8f: 0e:69:76:6f:aa:36:f9:68:ba:ba:65:da:a9:12:a4:b7:2b:09: 18:49:fc:b6:9b:b4:be:14:c5:3a:ed:bd:17:2c:33:a2:7d:6a: 1f:d9:d4:38:7f:4a:fd:d0:4f:27:80:c4:79:17:d4:13:41:8d: 0f:96:39:e8:eb:5f:f7:83:0f:de:dd:af:2b:6a:5a:bb:c5:df: 43:0c:71:92:25:95:ea:1b:2c:b3:4d:80:06:15:d4:55:01:ad: 62:82:0a:5b:40:0b:9b:55:d4:90:83:ec:dc:e9:54:43:2b:d5: d2:63:9a:8f:bc:45:65:5b:f9:fe:b7:67:bf:08:5e:d7:43:46: 82:33:58:87:22:7f:03:86:b7:13:e9:e8:0f:28:d2:d8:64:b5: bd:23:56:f2:e8:01:4a:d7:e4:3f:10:aa:e4:80:19:ea:2d:6a: a4:d2:14:fb -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt7Nm5GIJgVwwopGAfIHUWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJiMWViNjEwMGMwY2E1NjQ0NDM3MDU4ZDQyZjRmZDcyMjMzNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sinsE+phaLBPrzulFcsBRvWM8JZ 1T+RNZeFgOt6YPrjgbX3uiluN35UuvaM7P0xD8u+oKNcuiOmU3gjeCm448iHOYfB F4MEmNLdbLJeln3os4K7vPkYhmoUL/9h9SxJ14EVVZPGfPzYykPHCVlYK8qeFdB6 wsB+bBybwnJ9ytnazQFZ0xYtT9YJlEKuFGXb4f21Wt6T1lW2/mVdHmhYjeIGdRYs 7f6ABbDF+j/RTRUACGjlgfMr6jSwN0jLBIWgO7aDLrwA87Uhrr+tZ0Cl83d5hyQQ rVsKsSI66mQi2URqCES6Jx2p0axfMw88ZOgIwlHSmF2AjBOjgnQCRwt/lwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFAcrHrYQDAylZEQ3BY1C9P1yIzaBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2YzZjI3 My0zNDI0LTQ2NTEtOWEyMS0wZTA3ZTVhNjZkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZjNmMjcz LTM0MjQtNDY1MS05YTIxLTBlMDdlNWE2NmQ1OS8xL0J5c2V0aEFNREtWa1JEY0Zq VUwwX1hJak5vRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDAqBAIAATAkAwQDHx8gAwQDLrZ4AwQFV/8gAwQDWf/4AwQCuRxE AwQCuWSEMCIEAgACMBwDBQAqAA7IAwUAKgCdIAMFACoDIoADBQMqBheAMDIGCCsG AQUFBwEIAQH/BCMwIaAfMB0CAj+JAgMAmBICAwDs0gIDAxWWAgMDG/4CAwMcmDAN BgkqhkiG9w0BAQsFAAOCAQEAHoOzWIS5SrH2ZHbVC6fV7Q4tw0PDClRR0xliywdp WuedOwVsUfUrd2wHSt/dO+JkknB62O2yY1Yc1s2dlH+Jwi1zNvmII41s9gj7+4KH JooMQzP8cTGRObiPDml2b6o2+Wi6umXaqRKktysJGEn8tpu0vhTFOu29Fywzon1q H9nUOH9K/dBPJ4DEeRfUE0GND5Y56Otf94MP3t2vK2pau8XfQwxxkiWV6hsss02A BhXUVQGtYoIKW0ALm1XUkIPs3OlUQyvV0mOaj7xFZVv5/rdnvwhe10NGgjNYhyJ/ A4a3E+noDyjS2GS1vSNW8ugBStfkPxCq5IAZ6i1qpNIU+w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:21 2026 by rpki-client