This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer File: bM3IK654APfVB8c3kkhpvetaduo.cer (raw, json) Hash identifier: KuuRXc+k8Hp9WLJd8bwibenOmPVoyhhoSqwnm+fUbIY= Subject key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78491819F8B427240453186DD3D24F8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:40:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2488 IP: 147.125.0.0/16 IP: 2001:67c:1b70::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:49:18:19:f8:b4:27:24:04:53:18:6d:d3:d2:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:40:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:84:0b:93:68:4a:e9:67:c7:be:c9:d3:b9: 01:df:45:31:ab:7b:f0:6b:fb:ce:07:2a:e1:8e:5d: 28:ec:d9:21:9f:42:b0:18:b3:5e:a4:81:af:b9:1a: ce:55:02:ba:93:41:51:c4:05:72:2d:02:6b:2a:21: db:e4:31:27:71:68:77:62:3b:27:07:8b:e0:43:45: 0c:1d:64:f8:e0:a6:3f:65:14:66:0e:2b:93:b7:f2: 8b:25:60:e6:46:cf:cb:75:6b:34:a1:01:99:fb:2b: 9e:8e:7d:64:14:76:11:3f:43:8e:52:c1:18:29:34: 35:89:13:66:fb:bb:fb:b2:d4:3b:0d:aa:6d:5c:61: 92:2d:a7:ab:b9:ce:c8:4e:9d:28:4a:57:1a:4b:92: 63:d0:32:dc:47:6f:94:51:63:30:d1:3c:7a:55:58: 54:5d:95:66:e2:9b:3d:8f:bb:1f:15:5a:d6:22:09: 35:1a:82:8f:86:52:17:52:a6:20:ed:5b:23:46:9a: 89:d5:68:93:ad:ae:d9:63:3d:74:a0:f9:e6:66:ea: b6:56:1c:02:53:e9:57:00:92:a1:75:ce:90:1a:90: de:37:b0:a9:aa:d5:6d:37:52:50:f4:d9:bd:49:9c: 34:99:47:ca:f8:a1:b3:b4:9c:b1:4d:fc:18:50:10: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.0.0/16 IPv6: 2001:67c:1b70::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2488 Signature Algorithm: sha256WithRSAEncryption a6:c8:eb:b4:aa:e9:c5:4c:05:e9:fc:c3:4a:49:13:bb:b2:31: ac:dc:25:80:c6:1e:9a:b9:15:48:97:4f:3f:83:e7:21:d4:64: 5e:c8:68:ed:3d:99:cc:48:f8:57:73:29:f4:83:8c:49:20:55: 8b:c8:8a:41:fe:32:9e:2b:dd:d3:a6:dd:2a:f8:af:03:cb:74: 9b:eb:e0:30:78:29:d7:32:e7:b5:eb:33:87:25:be:19:ec:0d: 59:ec:87:3a:c8:9f:79:8b:9f:db:50:d4:4e:77:67:5f:22:b5: c8:af:d6:95:43:d0:51:3b:04:6b:de:43:92:16:34:b6:1a:da: 65:47:93:f8:c0:a3:3e:99:ac:0b:51:37:a6:cf:ff:6a:8c:a3: 7c:88:fd:ca:d7:1e:da:5a:5d:ea:c7:86:ec:bf:b0:30:5f:09: 30:b3:c9:a3:f9:70:a9:cb:88:88:50:5f:2a:e3:a5:a8:d1:72: ef:98:b9:3b:77:87:a5:af:0b:6a:72:a7:51:ac:d0:46:7f:c5: 07:25:fa:0c:99:53:55:2a:a8:75:5f:86:a4:d0:60:c7:6e:3b: 89:87:8c:28:aa:a1:0c:c3:96:60:82:7f:ad:8c:2a:f1:48:77: 10:68:92:f6:67:e5:12:d7:7b:57:7b:88:80:9b:9c:1d:2c:8d: 06:4c:90:b8 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt4SRgZ+LQnJARTGG3T0k+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDY0MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NkYzgyYmFlNzgwMGY3ZDUwN2M3Mzc5MjQ4NjliZGViNWE3NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYCEC5NoSulnx77J07kB30Uxq3vw a/vOByrhjl0o7Nkhn0KwGLNepIGvuRrOVQK6k0FRxAVyLQJrKiHb5DEncWh3Yjsn B4vgQ0UMHWT44KY/ZRRmDiuTt/KLJWDmRs/LdWs0oQGZ+yuejn1kFHYRP0OOUsEY KTQ1iRNm+7v7stQ7DaptXGGSLaeruc7ITp0oSlcaS5Jj0DLcR2+UUWMw0Tx6VVhU XZVm4ps9j7sfFVrWIgk1GoKPhlIXUqYg7VsjRpqJ1WiTra7ZYz10oPnmZuq2VhwC U+lXAJKhdc6QGpDeN7CpqtVtN1JQ9Nm9SZw0mUfK+KGztJyxTfwYUBBnrQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFGzNyCuueAD31QfHN5JIab3rWnbqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZDM4 ODRhLWMzODUtNGI2NS05ODY2LTRmNjM4MzE3MjY3Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2Nk Mzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvNkNDREM4MkJBRTc4 MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wCwQCAAEwBQMD AJN9MA8EAgACMAkDBwAgAQZ8G3AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICCbgw DQYJKoZIhvcNAQELBQADggEBAKbI67Sq6cVMBen8w0pJE7uyMazcJYDGHpq5FUiX Tz+D5yHUZF7IaO09mcxI+FdzKfSDjEkgVYvIikH+Mp4r3dOm3Sr4rwPLdJvr4DB4 Kdcy57XrM4clvhnsDVnshzrIn3mLn9tQ1E53Z18itciv1pVD0FE7BGveQ5IWNLYa 2mVHk/jAoz6ZrAtRN6bP/2qMo3yI/crXHtpaXerHhuy/sDBfCTCzyaP5cKnLiIhQ XyrjpajRcu+YuTt3h6WvC2pyp1Gs0EZ/xQcl+gyZU1UqqHVfhqTQYMduO4mHjCiq oQzDlmCCf62MKvFIdxBokvZn5RLXe1d7iICbnB0sjQZMkLg= -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:50 2026 by rpki-client