This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer File: bacdwHnJ2MLSAprWQOejv5f03O0.cer (raw, json) Hash identifier: 7Ie9Ngv0sF45YjM5+mOCnmoSP7px8OvK8LHkBbvJLqI= Subject key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8DF2F5C6B010823AFC2FB269F4EB24A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 11:37:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215110 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:f2:f5:c6:b0:10:82:3a:fc:2f:b2:69:f4:eb:24:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 11:37:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:00:5f:8f:4f:ba:98:56:c4:d3:9e:86:63: e7:26:ce:11:63:31:24:0f:ad:22:f2:24:f8:12:dc: 73:7c:9b:dd:2d:3f:21:43:b4:1b:cc:d1:77:fb:48: a3:87:fc:bd:23:23:b6:a9:82:64:fe:75:ac:37:ce: 7b:88:c9:93:23:59:9c:55:48:06:61:ad:38:21:6e: 14:0c:89:f2:f5:49:7f:33:27:eb:b6:d0:4e:63:c9: 3a:dd:b7:a0:33:70:de:e8:d9:03:7a:f0:da:a6:64: 37:87:e5:0a:b1:cf:e7:1c:7d:73:e0:89:82:cf:f2: a4:da:08:db:cf:41:2a:09:0d:ea:cb:72:2b:b3:29: b7:25:9b:98:c2:0c:7e:4f:b8:e9:5b:85:62:ec:fc: 32:38:91:78:5c:eb:84:25:75:1e:e5:bd:76:77:36: e9:06:10:8c:31:22:f3:d2:6c:68:0e:88:2a:07:06: 4f:6a:d0:ad:71:80:41:56:74:b4:2e:43:48:0e:d1: 50:73:f4:72:b1:0e:81:31:42:e7:3b:80:ab:ab:dd: 70:62:e1:cf:f9:e2:14:50:ea:bb:04:af:d1:a6:35: ec:0b:52:6e:74:20:86:fc:6c:fa:1e:c3:30:e4:54: 68:b1:7a:a4:61:1f:4d:ba:e4:a6:83:85:8e:e2:f1: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215110 Signature Algorithm: sha256WithRSAEncryption 28:77:6b:16:e8:53:63:d2:b6:37:c4:55:e4:ee:3a:5e:65:2b: 0c:29:31:c3:77:f1:0a:fd:1e:b7:01:3f:fb:c4:9f:10:38:a4: 64:a9:2d:a4:db:8c:7b:ac:76:3c:f7:5b:09:1c:2c:45:bf:61: d4:d4:72:7c:e3:c1:fd:ba:3a:fb:fd:12:08:90:4b:ec:f6:40: af:ae:be:2c:c3:93:fa:1a:bd:16:9a:ad:20:4c:a1:a5:0a:5d: 41:27:82:ed:63:04:6f:5b:b3:a4:db:ad:28:f5:db:db:25:92: 8e:63:7e:05:11:f3:6b:af:03:86:e9:3c:5b:ff:6c:cd:7e:bd: 38:d6:03:e7:6b:f9:00:a2:a4:c7:12:e4:b5:7f:c1:5e:1c:f2: df:37:cd:67:ee:fe:76:46:f1:aa:c3:92:3e:6a:4c:fe:ca:c8: 68:78:0a:4f:22:d4:21:04:21:29:cf:ff:da:10:04:de:e8:06: 0a:f3:74:28:cd:2f:1d:f1:a6:83:84:83:c2:b7:8b:50:5c:f2: c4:45:16:33:b5:a2:2c:e4:ac:e6:97:11:c3:24:da:88:5d:32: e4:32:28:8b:0e:8f:9a:8f:7d:69:63:51:0f:82:f9:93:94:a0: 52:18:0b:c6:f6:b8:a1:ba:0c:28:ee:e7:bb:8a:ca:7d:7d:b4: 68:c2:3a:0f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZuN8vXGsBCCOvwvsmn06ySpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTEzNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGE3MWRjMDc5YzlkOGMyZDIwMjlhZDY0MGU3YTNiZjk3ZjRkY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0QAX49PuphWxNOehmPnJs4RYzEk D60i8iT4EtxzfJvdLT8hQ7QbzNF3+0ijh/y9IyO2qYJk/nWsN857iMmTI1mcVUgG Ya04IW4UDIny9Ul/MyfrttBOY8k63begM3De6NkDevDapmQ3h+UKsc/nHH1z4ImC z/Kk2gjbz0EqCQ3qy3Irsym3JZuYwgx+T7jpW4Vi7PwyOJF4XOuEJXUe5b12dzbp BhCMMSLz0mxoDogqBwZPatCtcYBBVnS0LkNIDtFQc/RysQ6BMULnO4Crq91wYuHP +eIUUOq7BK/RpjXsC1JudCCG/Gz6HsMw5FRosXqkYR9NuuSmg4WO4vGzowIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFG2nHcB5ydjC0gKa1kDno7+X9NztMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzU5ODNh ZS1mNDNmLTRjZjctOTM1Mi02MDg1N2Y2ODhjZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNTk4M2Fl LWY0M2YtNGNmNy05MzUyLTYwODU3ZjY4OGNmNy8xL2JhY2R3SG5KMk1MU0FwcldR T2VqdjVmMDNPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIRjANBgkqhkiG9w0BAQsFAAOCAQEAKHdrFuhTY9K2 N8RV5O46XmUrDCkxw3fxCv0etwE/+8SfEDikZKktpNuMe6x2PPdbCRwsRb9h1NRy fOPB/bo6+/0SCJBL7PZAr66+LMOT+hq9FpqtIEyhpQpdQSeC7WMEb1uzpNutKPXb 2yWSjmN+BRHza68Dhuk8W/9szX69ONYD52v5AKKkxxLktX/BXhzy3zfNZ+7+dkbx qsOSPmpM/srIaHgKTyLUIQQhKc//2hAE3ugGCvN0KM0vHfGmg4SDwreLUFzyxEUW M7WiLOSs5pcRwyTaiF0y5DIoiw6Pmo99aWNRD4L5k5SgUhgLxva4oboMKO7nu4rK fX20aMI6Dw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:35 2026 by rpki-client