This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer (raw, json) Hash identifier: XPk2LeF/IhwPxi7oL47hYpOn9Ctz3rzv+YxVku7gRlk= Subject key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA412BD105B9996844B78F1297351E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56582 IP: 31.169.64.0/22 IP: 31.169.69.0 -- 31.169.72.255 IP: 31.169.74.0 -- 31.169.90.255 IP: 31.169.92.0/22 IP: 185.33.63.0/24 IP: 2a00:5740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:12:bd:10:5b:99:96:84:4b:78:f1:29:73:51:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:77:40:db:82:53:26:05:c0:5b:45:4b:5b: 43:e3:ff:49:92:ad:1c:1d:ad:f8:d2:d7:67:b0:d2: 25:fb:8e:e5:ab:ab:a4:eb:58:2c:47:88:2f:a3:9e: 3c:ac:14:df:1e:f6:65:75:0a:4e:cb:81:d4:d7:c8: b3:c2:f9:35:d6:91:64:c7:7f:fc:4e:d2:65:01:83: b0:fe:91:2d:84:4e:f2:bf:45:f3:f5:3f:f7:b2:e4: ac:39:4b:18:1d:80:c9:f3:53:c1:8c:9f:3a:28:41: 3b:fe:4a:7f:e2:d6:46:47:ec:d0:5a:16:98:80:1b: f9:1e:fb:c5:fc:0e:f4:3b:7b:d5:e8:48:2d:45:f1: 69:68:9d:68:64:a4:24:eb:a6:60:61:24:92:8e:75: ee:39:ae:f4:4d:04:a4:6a:53:02:c8:ef:2a:85:8d: 9a:09:9a:c5:d0:d9:0d:08:74:4e:0f:30:a4:ef:91: d7:32:40:6d:bc:65:a6:3e:27:be:16:a8:ee:e6:5b: 2a:2d:8e:a1:86:f3:6f:0e:3a:26:18:c5:81:77:02: bd:d4:fb:39:fc:93:78:15:4e:8a:93:2c:eb:c9:40: 0c:a0:d9:8d:30:e2:c4:0f:1f:43:fb:75:3a:fe:b3: c2:7f:40:0d:1f:4d:d1:12:27:9b:33:4b:09:d8:0d: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.64.0/22 31.169.69.0-31.169.72.255 31.169.74.0-31.169.90.255 31.169.92.0/22 185.33.63.0/24 IPv6: 2a00:5740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56582 Signature Algorithm: sha256WithRSAEncryption 43:42:12:9c:c1:9a:7c:ed:7c:35:15:07:e3:95:94:93:99:7b: 56:64:b5:65:a6:d0:27:83:51:e2:aa:2c:8c:f5:a5:d2:7e:11: 38:a7:ac:0f:0d:5d:79:43:18:35:9f:4f:f1:ac:eb:fe:55:18: f5:e4:55:dd:38:7e:b6:93:49:6f:2b:c2:3d:6b:7c:48:17:e5: 01:53:a9:7b:73:16:98:fb:ad:ff:7d:5f:07:5c:bb:e5:e9:7e: ac:eb:c6:16:3a:8b:74:7e:69:bb:0a:01:37:b2:27:17:cb:ef: 79:2e:8d:72:6b:c7:d9:01:a3:f9:b8:1d:9c:e1:11:64:8e:10: ad:c4:45:07:97:de:6a:6d:07:fa:a5:ad:f2:7c:df:b3:72:19: 1f:90:3d:28:4e:9d:2c:9f:ba:32:b4:f6:d0:f1:a4:94:ad:86: 88:e1:13:c5:fe:5e:32:db:d4:06:61:1c:1b:ce:ca:b8:ef:8f: 97:e4:d6:ff:6a:04:03:51:d0:c8:f7:b8:e6:5b:a3:d8:52:63: 36:63:2d:c2:64:fc:16:0b:85:61:94:01:94:6c:e2:3e:14:f5: 0a:79:c1:6e:5b:54:f5:8d:b9:86:2d:06:9e:bc:73:e3:c8:cc: 13:4a:9c:e0:47:98:37:cc:c5:46:91:16:56:e3:a9:c2:92:4a: 96:b1:9c:be -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt7pBK9EFuZloRLePEpc1HmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDY5ZGE0NGFlMDY3ZmMxYTk4YTVmNmYwNWYxMmU1NDVkMGZjNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3d3QNuCUyYFwFtFS1tD4/9Jkq0c Ha340tdnsNIl+47lq6uk61gsR4gvo548rBTfHvZldQpOy4HU18izwvk11pFkx3/8 TtJlAYOw/pEthE7yv0Xz9T/3suSsOUsYHYDJ81PBjJ86KEE7/kp/4tZGR+zQWhaY gBv5HvvF/A70O3vV6EgtRfFpaJ1oZKQk66ZgYSSSjnXuOa70TQSkalMCyO8qhY2a CZrF0NkNCHRODzCk75HXMkBtvGWmPie+Fqju5lsqLY6hhvNvDjomGMWBdwK91Ps5 /JN4FU6KkyzryUAMoNmNMOLEDx9D+3U6/rPCf0ANH03REiebM0sJ2A3jgwIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFG1p2kSuBn/BqYpfbwXxLlRdD8YqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2IxYTgy YS00OTBmLTQzZmItOTg2ZS0yNjE3MGRhNGEwYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYjFhODJh LTQ5MGYtNDNmYi05ODZlLTI2MTcwZGE0YTBiMS8xL2JXbmFSSzRHZjhHcGlsOXZC ZkV1VkYwUHhpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUF BwEHAQH/BEcwRTA0BAIAATAuAwQCH6lAMAwDBAAfqUUDBAAfqUgwDAMEAR+pSgME AB+pWgMEAh+pXAMEALkhPzANBAIAAjAHAwUDKgBXQDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA3QYwDQYJKoZIhvcNAQELBQADggEBAENCEpzBmnztfDUVB+OVlJOZ e1ZktWWm0CeDUeKqLIz1pdJ+ETinrA8NXXlDGDWfT/Gs6/5VGPXkVd04fraTSW8r wj1rfEgX5QFTqXtzFpj7rf99Xwdcu+XpfqzrxhY6i3R+absKATeyJxfL73kujXJr x9kBo/m4HZzhEWSOEK3ERQeX3mptB/qlrfJ837NyGR+QPShOnSyfujK09tDxpJSt hojhE8X+XjLb1AZhHBvOyrjvj5fk1v9qBANR0Mj3uOZbo9hSYzZjLcJk/BYLhWGU AZRs4j4U9Qp5wW5bVPWNuYYtBp68c+PIzBNKnOBHmDfMxUaRFlbjqcKSSpaxnL4= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:15 2026 by rpki-client