This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer File: bDLcnlJJ-0HEffSRQSGpsaau8f8.cer (raw, json) Hash identifier: 1ygQPO8PZFX7W4Zx53W78tjk5rAUiFopA82YQfzVPK4= Subject key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED600A55B6B838BC638363C46EB9DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210377 IP: 93.93.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:60:0a:55:b6:b8:38:bc:63:83:63:c4:6e:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:0b:07:5c:36:ff:fa:fd:3f:55:07:58:53: 65:1c:8c:25:cd:c2:24:ea:03:ee:59:f3:72:44:23: 32:f7:e7:4b:9b:b3:e7:ee:6b:be:ef:1e:68:b2:79: 42:db:75:bb:a5:08:2f:29:ec:ed:9b:5c:86:7a:46: fa:3d:1b:43:0c:73:da:01:84:7d:89:68:38:e6:a6: c3:58:87:07:c0:3c:65:06:e3:f2:e5:11:8b:09:5e: 0c:b3:7b:9a:44:35:98:35:c1:aa:ad:c8:28:f3:7c: f9:c7:21:a9:69:bf:91:ce:51:60:ef:07:86:61:1a: 76:bf:bb:04:18:21:68:9c:e2:41:26:45:9f:57:ae: e1:84:62:1a:1f:4d:0a:18:d0:77:31:0d:61:46:2f: 49:ad:d9:31:64:89:2d:99:13:e2:c9:d2:08:d2:e2: 73:7d:e9:9d:06:f8:56:df:d2:d3:63:87:6a:0a:9a: 59:61:93:1f:f2:a0:bf:54:bb:96:d4:77:de:8c:b6: b1:a2:9c:35:4c:e1:18:5d:5b:23:e8:f7:ce:92:4e: f3:24:77:92:14:54:af:28:f7:4d:a4:ad:5f:7d:9a: cd:9d:f2:e9:77:6b:5b:4a:8b:d8:b9:5e:c6:33:d8: 79:1c:77:e8:05:70:22:89:cf:67:44:e4:91:bb:c7: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.224.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210377 Signature Algorithm: sha256WithRSAEncryption 08:69:bc:44:49:05:3c:ef:75:1f:e3:2f:90:dd:b3:d8:c6:fa: 2d:f5:92:cd:22:e4:93:04:a3:b3:9f:42:11:dd:c7:b9:37:35: b4:22:a1:51:70:4c:aa:ae:de:28:f9:c1:1d:0f:29:72:d8:53: 26:6f:25:07:00:55:ac:db:35:03:87:ad:91:5a:cf:fe:56:49: 34:f3:84:89:0d:f6:02:59:9a:4e:37:b0:cd:04:89:0a:4b:9c: b6:ab:1d:4e:2b:e0:01:08:c9:9e:f0:0f:db:11:7c:8e:d7:d0: cd:2f:7b:4d:9e:01:5d:0b:44:75:e0:bc:34:af:44:3c:c0:1b: e4:67:2c:cd:4c:e8:95:02:52:09:9b:86:9d:c7:d1:bb:11:f6: a7:74:84:a9:4b:be:32:02:a1:94:ca:85:30:dc:0e:05:d2:03: 3d:83:9e:5b:33:2d:97:70:c1:f6:64:81:30:a3:e1:00:cb:63: 57:c4:89:35:7f:61:00:37:4a:f2:b2:02:f0:2e:12:f3:f4:1a: 11:24:12:75:43:0b:c5:30:a9:83:5d:fe:fb:f2:f8:bd:61:a8: 7a:1a:7c:2f:af:75:fa:0d:21:02:06:1b:a0:25:a7:aa:47:4b: cc:c0:6d:78:ee:d2:61:ed:94:2a:52:31:f5:39:6c:46:05:0b: f5:a4:c7:3b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57WAKVba4OLxjg2PEbrndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzMyZGM5ZTUyNDlmYjQxYzQ3ZGY0OTE0MTIxYTliMWE2YWVmMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuELB1w2//r9P1UHWFNlHIwlzcIk 6gPuWfNyRCMy9+dLm7Pn7mu+7x5osnlC23W7pQgvKeztm1yGekb6PRtDDHPaAYR9 iWg45qbDWIcHwDxlBuPy5RGLCV4Ms3uaRDWYNcGqrcgo83z5xyGpab+RzlFg7weG YRp2v7sEGCFonOJBJkWfV67hhGIaH00KGNB3MQ1hRi9JrdkxZIktmRPiydII0uJz femdBvhW39LTY4dqCppZYZMf8qC/VLuW1HfejLaxopw1TOEYXVsj6PfOkk7zJHeS FFSvKPdNpK1ffZrNnfLpd2tbSovYuV7GM9h5HHfoBXAiic9nROSRu8fTDwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGwy3J5SSftBxH30kUEhqbGmrvH/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzUxYmEy Ny0yNWUyLTQ3MjctYTRiNS0zZmJjOTc1OWViNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvNTFiYTI3 LTI1ZTItNDcyNy1hNGI1LTNmYmM5NzU5ZWI2YS8xL2JETGNubEpKLTBIRWZmU1JR U0dwc2FhdThmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXV3gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM1yTANBgkqhkiG9w0BAQsFAAOCAQEACGm8REkFPO91H+MvkN2z2Mb6LfWSzSLk kwSjs59CEd3HuTc1tCKhUXBMqq7eKPnBHQ8pcthTJm8lBwBVrNs1A4etkVrP/lZJ NPOEiQ32AlmaTjewzQSJCkuctqsdTivgAQjJnvAP2xF8jtfQzS97TZ4BXQtEdeC8 NK9EPMAb5GcszUzolQJSCZuGncfRuxH2p3SEqUu+MgKhlMqFMNwOBdIDPYOeWzMt l3DB9mSBMKPhAMtjV8SJNX9hADdK8rIC8C4S8/QaESQSdUMLxTCpg13++/L4vWGo ehp8L691+g0hAgYboCWnqkdLzMBteO7SYe2UKlIx9TlsRgUL9aTHOw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:39 2026 by rpki-client