This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer File: bF5O9VFnmf_guxuDkxfb01W7eps.cer (raw, json) Hash identifier: iqXwhWH1VWkqd/VxgntNfjXH2JDt6jFcW8t+g0BQRtI= Subject key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77594CDFCC04177F9C520F2178EF23DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47527 AS: 60422 AS: 196724 IP: 45.95.208.0/24 IP: 46.30.120.0/21 IP: 62.69.152.0/21 IP: 79.174.152.0/21 IP: 91.223.235.0/24 IP: 91.230.239.0/24 IP: 178.23.176.0/21 IP: 185.31.76.0/22 IP: 185.126.152.0/23 IP: 185.208.212.0/22 IP: 188.116.39.0/24 IP: 194.247.61.0/24 IP: 195.182.36.0/24 IP: 213.142.140.0/23 IP: 2a00:1b18::/29 IP: 2a00:1cf0::/29 IP: 2a00:b920::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:df:cc:04:17:7f:9c:52:0f:21:78:ef:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:70:7f:df:b7:75:dd:f8:66:ca:0d:7f:dd: b5:58:22:a7:36:d4:df:f5:f7:a5:a5:0a:57:96:0a: 17:04:ba:c4:19:bc:ee:8c:42:8f:58:b3:85:0a:63: 59:97:31:4b:43:b5:25:ff:56:f6:ae:c7:c6:d0:88: 43:8d:27:bb:75:c1:33:63:e1:22:e3:f8:ad:67:21: 48:16:69:ca:57:f2:b9:9a:e9:01:cf:f1:47:0d:c2: 58:40:74:e7:61:0e:35:ce:f7:00:e2:82:75:6b:35: 81:53:b6:c5:c7:b3:d6:5b:ed:30:43:20:f4:c8:31: eb:77:f9:41:18:be:a2:de:a1:87:32:df:3c:3c:9a: 57:85:28:9a:c3:10:8f:5d:a7:08:3f:6d:b0:ba:15: 72:27:69:6b:a0:64:cc:5a:36:40:d2:ad:12:80:d0: 02:cd:56:f3:df:17:7b:85:17:c1:81:23:fe:c8:6a: a0:36:49:78:3e:e7:f6:8f:57:86:a0:cc:2e:61:d4: 1a:74:22:65:e1:c9:3b:c8:75:4b:76:1e:3a:f0:9b: 6d:b8:9f:3b:8e:2c:5d:d0:09:88:22:1d:63:77:3c: b2:5c:0e:3f:78:5d:df:32:88:61:fd:1d:2c:10:09: 4a:20:6a:bb:80:ae:1b:7b:55:38:a3:d9:f2:6a:4f: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.208.0/24 46.30.120.0/21 62.69.152.0/21 79.174.152.0/21 91.223.235.0/24 91.230.239.0/24 178.23.176.0/21 185.31.76.0/22 185.126.152.0/23 185.208.212.0/22 188.116.39.0/24 194.247.61.0/24 195.182.36.0/24 213.142.140.0/23 IPv6: 2a00:1b18::/29 2a00:1cf0::/29 2a00:b920::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47527 60422 196724 Signature Algorithm: sha256WithRSAEncryption ae:db:d5:70:6c:32:54:7f:94:1e:bf:60:12:59:b8:21:be:3b: e2:ba:b4:c9:fb:88:8b:72:dd:22:2d:5b:5a:98:01:c8:dc:73: f8:63:a0:eb:92:93:23:90:22:5c:1a:2b:36:8a:35:1f:17:9d: 13:cf:57:6d:31:37:2c:82:5f:5f:86:fc:65:8e:09:86:17:2b: 2d:a0:57:63:f5:c3:38:16:d6:38:4a:53:6b:93:c8:72:b4:fe: 0b:f4:38:3c:46:8e:8f:3f:2e:3c:cf:7f:f2:10:84:fa:67:ef: 1c:01:ac:e7:4d:87:36:01:97:30:95:53:aa:79:35:82:63:16: d1:39:7d:2c:5a:2c:fb:7c:66:8c:5d:ca:f4:c7:d0:2d:8d:e1: f8:a9:a3:f6:24:92:aa:3a:6a:11:2f:96:57:eb:1a:22:1c:94: 63:c6:c9:39:9e:9f:85:f5:88:f3:e4:87:4c:66:89:9a:a0:fc: 25:47:31:19:f1:f2:d2:3c:25:66:f9:bc:5f:65:39:60:23:d0: e3:54:a2:b1:cf:9d:77:da:dc:92:12:3c:2f:3c:44:44:4c:19: 4e:2c:59:c6:cf:d7:37:13:36:93:a3:bc:78:b1:89:eb:32:07: 07:35:c8:8f:af:8c:b4:7b:9b:dc:ab:99:10:fa:bd:f7:96:cc: 95:e9:22:11 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISAZt3WUzfzAQXf5xSDyF47yPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVlNGVmNTUxNjc5OWZmZTBiYjFiODM5MzE3ZGJkMzU1YmI3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJwf9+3dd34ZsoNf921WCKnNtTf 9felpQpXlgoXBLrEGbzujEKPWLOFCmNZlzFLQ7Ul/1b2rsfG0IhDjSe7dcEzY+Ei 4/itZyFIFmnKV/K5mukBz/FHDcJYQHTnYQ41zvcA4oJ1azWBU7bFx7PWW+0wQyD0 yDHrd/lBGL6i3qGHMt88PJpXhSiawxCPXacIP22wuhVyJ2lroGTMWjZA0q0SgNAC zVbz3xd7hRfBgSP+yGqgNkl4Puf2j1eGoMwuYdQadCJl4ck7yHVLdh468JttuJ87 jixd0AmIIh1jdzyyXA4/eF3fMohh/R0sEAlKIGq7gK4be1U4o9nyak/eXwIDAQAB o4IDFjCCAxIwHQYDVR0OBBYEFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzlkOTY4 MC1mZmJmLTQzZDEtOWMwNS0xYmU3NTNmYWQxYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOWQ5Njgw LWZmYmYtNDNkMS05YzA1LTFiZTc1M2ZhZDFiZi8xL2JGNU85VkZubWZfZ3V4dURr eGZiMDFXN2Vwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGKBggrBgEF BQcBBwEB/wR7MHkwWgQCAAEwVAMEAC1f0AMEAy4eeAMEAz5FmAMEA0+umAMEAFvf 6wMEAFvm7wMEA7IXsAMEArkfTAMEAbl+mAMEArnQ1AMEALx0JwMEAML3PQMEAMO2 JAMEAdWOjDAbBAIAAjAVAwUDKgAbGAMFAyoAHPADBQMqALkgMCQGCCsGAQUFBwEI AQH/BBUwE6ARMA8CAwC5pwIDAOwGAgMDAHQwDQYJKoZIhvcNAQELBQADggEBAK7b 1XBsMlR/lB6/YBJZuCG+O+K6tMn7iIty3SItW1qYAcjcc/hjoOuSkyOQIlwaKzaK NR8XnRPPV20xNyyCX1+G/GWOCYYXKy2gV2P1wzgW1jhKU2uTyHK0/gv0ODxGjo8/ LjzPf/IQhPpn7xwBrOdNhzYBlzCVU6p5NYJjFtE5fSxaLPt8ZoxdyvTH0C2N4fip o/Ykkqo6ahEvllfrGiIclGPGyTmen4X1iPPkh0xmiZqg/CVHMRnx8tI8JWb5vF9l OWAj0ONUorHPnXfa3JISPC88RERMGU4sWcbP1zcTNpOjvHixiesyBwc1yI+vjLR7 m9yrmRD6vfeWzJXpIhE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:16 2026 by rpki-client