This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer File: bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer (raw, json) Hash identifier: TZ7ucHcdkv8FXaD13aTdexErTtW9aWQUuG8xGxs/TwI= Subject key identifier: 6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEB3E09EEE7DF018ECAD73841A399E9FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 21:21:42 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 60153 IP: 185.55.196.0/22 IP: 185.182.64.0/24 IP: 2a02:4da0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:3e:09:ee:e7:df:01:8e:ca:d7:38:41:a3:99:e9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 21:21:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d085d177eeb0cb91a42f43e2d4c3c808dec5708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:f4:b7:bf:73:2b:bf:ed:61:05:31:65:91: a8:ec:0b:88:16:46:05:9e:28:71:46:bf:04:d3:f7: 4b:46:91:4d:4e:02:d1:25:b0:76:7c:ce:5f:50:83: cc:17:93:42:89:7d:0b:43:d6:7a:cd:b2:61:7e:5b: 8b:bc:df:93:32:2d:67:eb:51:05:ee:3c:22:6d:82: 7c:73:d5:4d:93:a2:44:e9:65:6b:9d:9a:d3:c4:a5: 2a:f6:f3:fe:4e:42:e0:94:83:48:40:74:42:f6:6f: 45:0b:69:86:b2:06:08:df:ee:6c:67:12:a0:71:5d: e2:a3:73:4f:73:e9:7c:9a:b5:86:81:4f:e4:dd:60: 9d:45:3c:00:50:92:49:05:00:e2:12:cf:18:17:61: 2f:c0:10:b3:43:74:36:6f:06:ea:2e:b0:c5:d0:87: b0:52:65:a8:18:dc:94:db:e2:6e:e8:d1:fe:86:fd: 7f:5a:92:e7:ae:8a:69:ed:95:71:94:67:e7:6f:aa: f5:99:14:e9:ca:97:f2:34:0a:2e:4a:48:4b:d7:04: 1e:7e:12:40:ea:8a:e7:3b:b0:fc:8f:01:c2:ef:58: 8a:ae:10:90:ec:ff:26:79:8b:57:14:e7:60:b0:a6: 99:d6:96:41:2b:ae:42:80:0f:26:af:f6:34:03:23: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.196.0/22 185.182.64.0/24 IPv6: 2a02:4da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60153 Signature Algorithm: sha256WithRSAEncryption 9a:5d:96:70:2e:0e:f5:2d:b2:8a:39:35:fd:ba:cf:81:bc:19: a8:d9:1b:0e:8b:a5:d1:f0:2c:31:b5:ea:4d:2d:9f:b0:6d:14: 9b:e1:18:88:6d:75:fd:cb:4f:57:0b:df:08:47:18:1f:7d:ad: 75:1a:89:81:ec:2c:da:76:8b:62:f4:81:4d:9f:44:9f:49:e8: e9:f0:94:d7:96:5b:2d:de:08:1c:c1:e2:f5:36:35:15:3f:c1: 73:b1:56:dd:b4:e8:5a:f8:e5:28:64:c5:10:de:a4:7e:68:2c: 7c:0a:8b:37:83:f8:24:ee:93:89:2c:b5:1d:8e:3d:da:0f:0a: 64:97:35:9a:e0:e3:d9:a2:6e:b5:7a:12:2e:64:8c:97:d1:b3: 1e:cb:1c:56:2c:8e:51:6d:24:01:45:02:6d:2f:7d:3a:46:da: 82:da:4e:c8:ba:81:95:2b:01:6e:e5:d5:54:61:f3:db:22:15: f0:e2:40:50:d8:64:10:30:2b:c8:ee:51:94:e9:6d:34:ef:e8: 52:15:57:3e:1d:e4:15:ba:17:05:91:d9:1f:27:a5:4b:c4:25: 16:a1:2a:92:f9:d6:38:3e:a2:0f:6d:7b:79:2a:ff:99:7f:47: 3b:44:ec:04:7f:75:9c:57:08:52:33:3b:7f:49:d9:6e:1b:0e: 3a:62:35:9a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZrrPgnu598BjsrXOEGjmen8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MjEyMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA4NWQxNzdlZWIwY2I5MWE0MmY0M2UyZDRjM2M4MDhkZWM1NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dD0t79zK7/tYQUxZZGo7AuIFkYF nihxRr8E0/dLRpFNTgLRJbB2fM5fUIPMF5NCiX0LQ9Z6zbJhfluLvN+TMi1n61EF 7jwibYJ8c9VNk6JE6WVrnZrTxKUq9vP+TkLglINIQHRC9m9FC2mGsgYI3+5sZxKg cV3io3NPc+l8mrWGgU/k3WCdRTwAUJJJBQDiEs8YF2EvwBCzQ3Q2bwbqLrDF0Iew UmWoGNyU2+Ju6NH+hv1/WpLnropp7ZVxlGfnb6r1mRTpypfyNAouSkhL1wQefhJA 6ornO7D8jwHC71iKrhCQ7P8meYtXFOdgsKaZ1pZBK65CgA8mr/Y0AyPlIQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFG0IXRd+6wy5GkL0Pi1MPICN7FcIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzA1Mzg5 Mi03M2JlLTQxMmUtOTU1OS05N2Q0OTM0OGNjMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDUzODky LTczYmUtNDEyZS05NTU5LTk3ZDQ5MzQ4Y2MwMS8xL2JRaGRGMzdyRExrYVF2US1M VXc4Z0kzc1Z3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTfEAwQAubZAMA0EAgACMAcDBQAqAk2gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDq+TANBgkqhkiG9w0BAQsFAAOCAQEAml2W cC4O9S2yijk1/brPgbwZqNkbDoul0fAsMbXqTS2fsG0Um+EYiG11/ctPVwvfCEcY H32tdRqJgews2naLYvSBTZ9En0no6fCU15ZbLd4IHMHi9TY1FT/Bc7FW3bToWvjl KGTFEN6kfmgsfAqLN4P4JO6TiSy1HY492g8KZJc1muDj2aJutXoSLmSMl9GzHssc ViyOUW0kAUUCbS99OkbagtpOyLqBlSsBbuXVVGHz2yIV8OJAUNhkEDAryO5RlOlt NO/oUhVXPh3kFboXBZHZHyelS8QlFqEqkvnWOD6iD217eSr/mX9HO0TsBH91nFcI UjM7f0nZbhsOOmI1mg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:12 2025 by rpki-client