This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer File: bW-_qXU9uNhGQz21NR2ansB8lr0.cer (raw, json) Hash identifier: zeGMLmFN6M4/IiG+TNG7zdyw5DtVc8y+1SvV2+R8Ts0= Subject key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6D068C808799787FC2A0CC6E82FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft caRepository: rsync://ca.rg.net/rpki/RGnet-OU/ Notify URL: https://ca.rg.net/rrdp/notify.xml Certificate not before: Thu 01 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3130 AS: 3927 AS: 3970 AS: 4128 IP: 45.132.188.0/22 IP: 147.28.0.0/20 IP: 192.83.230.0/24 IP: 198.133.206.0/24 IP: 198.180.150.0 -- 198.180.153.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:06:8c:80:87:99:78:7f:c2:a0:cc:6e:82:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:f3:7a:84:e2:22:56:f9:b4:8c:cc:c2:7a: 4d:35:5a:9d:ef:29:11:b9:23:38:b9:7b:9d:9a:ca: 6c:bf:83:e9:17:f5:68:53:d6:49:8e:aa:28:6b:fe: 0f:a1:ca:5b:67:9d:92:bb:51:8d:9e:09:d1:ec:2d: 2e:37:f6:34:a0:f3:a3:d2:a8:57:18:75:ea:81:74: 37:8b:02:0d:67:aa:71:13:8f:a1:65:59:47:15:24: ad:13:be:9e:7e:75:2a:46:9d:50:e5:35:b8:b8:33: da:70:c1:ad:81:37:f5:95:c2:7a:af:be:bb:bb:e6: 59:e8:c3:55:15:15:ba:4e:96:4d:69:76:80:57:cf: c1:03:54:46:60:81:a0:f4:f6:1f:80:9a:84:a9:27: 62:a8:ba:17:67:42:f2:04:c8:75:70:57:48:e6:a0: dd:58:55:ae:c5:40:c8:9a:b1:5d:78:7b:8b:d8:8e: 8e:c5:3d:fa:e7:a8:4f:82:8a:0d:56:4e:ce:f3:a5: 20:24:75:1d:47:2f:0a:35:14:ec:eb:e9:ff:24:e2: 40:a4:2e:df:fe:5e:9b:fd:99:e1:51:f0:1e:8f:cd: 7e:1f:73:a1:e7:48:2d:9c:ae:55:ac:5c:7b:77:6d: f7:88:fd:11:a8:b2:6e:20:20:1d:ee:b7:36:4d:85: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/ RPKI Manifest - URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.188.0/22 147.28.0.0/20 192.83.230.0/24 198.133.206.0/24 198.180.150.0-198.180.153.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3130 3927 3970 4128 Signature Algorithm: sha256WithRSAEncryption 93:e4:74:2d:b0:9b:29:65:28:90:50:6d:5b:74:3b:f0:ff:0b: 6c:bb:db:4a:fe:66:7b:8d:f3:cd:aa:6d:eb:f7:d4:ff:87:91: 3a:35:c7:29:6a:00:37:f5:52:e9:95:01:4c:5d:14:5f:80:c2: 40:45:d8:7b:75:f0:73:a4:a9:c3:92:71:62:9d:cc:8d:f8:5a: d5:d4:a0:da:37:66:15:da:45:fc:68:26:c9:f3:bf:56:12:cc: 16:81:fe:41:b4:04:89:20:75:2d:fc:a1:d5:b5:8d:25:2c:95: 3d:69:08:21:38:1e:c4:42:f1:a9:6e:84:9f:a9:d6:7e:5d:ff: b8:c5:ff:8d:bc:c3:2b:f1:ac:b8:5f:e8:8b:ad:72:f9:77:75: 1a:66:61:0d:06:ac:a5:89:59:9e:17:45:a1:1e:6e:f6:4d:e0: 68:e5:8c:61:c8:54:09:72:94:17:f9:99:63:ee:c8:f9:67:48: 3c:ed:f0:52:66:e3:87:66:7f:a1:9b:5e:cf:1e:19:ae:47:d4: 23:b3:17:ff:9b:66:e2:38:46:66:10:20:1c:84:5b:a4:5b:29: 42:e3:c8:fe:52:f0:03:6c:e8:bb:30:49:10:c4:06:22:45:4b: 90:7f:e0:9e:c6:6c:23:11:86:a8:56:9d:a8:32:0c:1f:64:0f: 2f:fb:3d:bf -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt2620GjICHmXh/wqDMboL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDZmYmZhOTc1M2RiOGQ4NDY0MzNkYjUzNTFkOWE5ZWMwN2M5NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BPzeoTiIlb5tIzMwnpNNVqd7ykR uSM4uXudmspsv4PpF/VoU9ZJjqooa/4PocpbZ52Su1GNngnR7C0uN/Y0oPOj0qhX GHXqgXQ3iwINZ6pxE4+hZVlHFSStE76efnUqRp1Q5TW4uDPacMGtgTf1lcJ6r767 u+ZZ6MNVFRW6TpZNaXaAV8/BA1RGYIGg9PYfgJqEqSdiqLoXZ0LyBMh1cFdI5qDd WFWuxUDImrFdeHuL2I6OxT3656hPgooNVk7O86UgJHUdRy8KNRTs6+n/JOJApC7f /l6b/ZnhUfAej81+H3Oh50gtnK5VrFx7d233iP0RqLJuICAd7rc2TYVOlwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFG1vv6l1PbjYRkM9tTUdmp7AfJa9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgboGCCsGAQUFBwELBIGtMIGqMCwGCCsGAQUFBzAFhiByc3lu YzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VLzBLBggrBgEFBQcwCoY/cnN5bmM6 Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVOaEdRejIxTlIyYW5z QjhscjAubWZ0MC0GCCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25v dGlmeS54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsu Y3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAu MCwEAgABMCYDBAIthLwDBASTHAADBADAU+YDBADGhc4wDAMEAca0lgMEAca0mDAl BggrBgEFBQcBCAEB/wQWMBSgEjAQAgIMOgICD1cCAg+CAgIQIDANBgkqhkiG9w0B AQsFAAOCAQEAk+R0LbCbKWUokFBtW3Q78P8LbLvbSv5me43zzapt6/fU/4eROjXH KWoAN/VS6ZUBTF0UX4DCQEXYe3Xwc6Spw5JxYp3Mjfha1dSg2jdmFdpF/GgmyfO/ VhLMFoH+QbQEiSB1Lfyh1bWNJSyVPWkIITgexELxqW6En6nWfl3/uMX/jbzDK/Gs uF/oi61y+Xd1GmZhDQaspYlZnhdFoR5u9k3gaOWMYchUCXKUF/mZY+7I+WdIPO3w Umbjh2Z/oZtezx4ZrkfUI7MX/5tm4jhGZhAgHIRbpFspQuPI/lLwA2zouzBJEMQG IkVLkH/gnsZsIxGGqFadqDIMH2QPL/s9vw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:22 2026 by rpki-client