This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer (raw, json) Hash identifier: hwf9Kxi4FByOz0JXj1TBbovLxnydz0jVvMhzaCLQqz4= Subject key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EBCB6C7FB95FC5C5CEFAFC7F32523 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199242 IP: 46.245.239.0/24 IP: 2a13:cb80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:b6:c7:fb:95:fc:5c:5c:ef:af:c7:f3:25:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:d2:bd:c2:5d:9c:af:5a:39:8b:98:c5:31: 8c:e2:c4:02:9d:6e:47:8c:c5:7e:7e:82:31:a8:f7: 69:6d:42:b8:55:c9:2e:81:47:8e:1b:33:38:23:e3: b3:0a:9e:f7:ee:77:57:e6:af:8a:bf:7c:98:bb:b3: 5c:04:6c:aa:35:f8:19:c4:4a:b4:7c:cf:6a:25:59: 4e:67:39:40:67:d0:83:07:fa:8f:60:b4:54:2a:86: 2a:34:60:25:68:74:d8:ac:d6:05:ad:7c:b3:09:5c: f5:6d:79:8c:96:29:dd:84:01:c9:21:3a:3a:3f:7b: 2b:3e:03:ec:30:1a:57:25:1b:5f:5f:7b:1f:04:7a: 40:49:3b:8b:21:8c:9f:a3:dc:d8:43:3f:ad:c9:8d: ca:1c:15:fb:03:d0:e7:b6:c0:65:07:7c:1f:ac:1f: 82:f6:f0:bd:89:06:0d:8a:42:38:16:60:8d:79:76: 43:08:b2:39:02:cf:68:88:0c:84:08:87:15:f8:a7: 63:20:55:c1:b4:69:d8:b4:11:b6:88:f8:66:91:49: d9:b1:77:91:5d:a0:e5:d5:b9:47:c9:21:3c:ca:3f: 23:b1:fa:e2:2f:94:65:ee:f0:ba:57:2f:b0:04:b1: e7:35:97:05:61:99:ac:ac:34:8c:f1:22:7a:14:c0: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.239.0/24 IPv6: 2a13:cb80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199242 Signature Algorithm: sha256WithRSAEncryption 0e:ef:34:69:17:a2:44:2f:35:32:76:d6:4a:c6:6f:4d:64:27: 11:04:c1:f2:07:83:71:5e:a7:49:6d:e5:7f:b2:ce:94:45:21: a1:1e:b4:bf:cd:99:f7:63:fa:99:d9:cc:8d:3f:5e:06:e3:99: 1a:72:a9:18:7c:c1:13:87:56:23:39:05:03:4c:b2:8c:e5:74: b1:e9:3b:81:18:a5:21:c7:5b:79:1d:72:cf:7a:31:89:de:30: 09:57:49:0a:2f:16:1e:9b:48:03:05:f7:f0:3f:d2:16:05:0a: c2:05:03:9f:d5:3c:ea:d3:7e:ec:d6:c0:11:8e:17:2c:0c:cf: 8f:e3:a2:90:05:c8:56:1d:d6:b0:0b:b6:bd:29:7e:fa:8e:03: f7:92:88:8a:20:dc:d4:fa:92:a9:91:0c:ec:93:cd:0d:4a:fe: f6:d0:42:66:87:e6:65:b1:48:70:6f:32:fa:a5:d2:9b:82:e8: 5c:27:38:94:43:71:15:54:3d:00:e7:02:c5:f0:f7:c8:91:c0: 8e:8a:cb:e0:10:b6:42:53:17:59:16:39:ea:c6:f5:89:93:e2: 40:4f:50:90:1b:05:de:d4:ce:21:44:39:ee:c6:d6:80:aa:04: 73:ec:7e:7d:b7:ed:29:df:7f:b3:aa:2a:d6:0d:27:0a:24:b5: c5:c3:c6:50 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fry2x/uV/Fxc76/H8yUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGRkNDJmZmRiN2U4Mjc3MDIzZjEwMTliNTU0ZmViMTlmNWMzZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoizSvcJdnK9aOYuYxTGM4sQCnW5H jMV+foIxqPdpbUK4VckugUeOGzM4I+OzCp737ndX5q+Kv3yYu7NcBGyqNfgZxEq0 fM9qJVlOZzlAZ9CDB/qPYLRUKoYqNGAlaHTYrNYFrXyzCVz1bXmMlindhAHJITo6 P3srPgPsMBpXJRtfX3sfBHpASTuLIYyfo9zYQz+tyY3KHBX7A9DntsBlB3wfrB+C 9vC9iQYNikI4FmCNeXZDCLI5As9oiAyECIcV+KdjIFXBtGnYtBG2iPhmkUnZsXeR XaDl1blHySE8yj8jsfriL5Rl7vC6Vy+wBLHnNZcFYZmsrDSM8SJ6FMBB5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2YxYzM3 NS00MWRhLTRlYTYtYWNkMS0wOWJjOTJkNGVkOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZjFjMzc1 LTQxZGEtNGVhNi1hY2QxLTA5YmM5MmQ0ZWQ5Ni8xL2JkMUNfOXQtZ25jQ1B4QVp0 VlQtc1o5Y1B5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALvXvMA0EAgACMAcDBQMqE8uAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKSjANBgkqhkiG9w0BAQsFAAOCAQEADu80aReiRC81 MnbWSsZvTWQnEQTB8geDcV6nSW3lf7LOlEUhoR60v82Z92P6mdnMjT9eBuOZGnKp GHzBE4dWIzkFA0yyjOV0sek7gRilIcdbeR1yz3oxid4wCVdJCi8WHptIAwX38D/S FgUKwgUDn9U86tN+7NbAEY4XLAzPj+OikAXIVh3WsAu2vSl++o4D95KIiiDc1PqS qZEM7JPNDUr+9tBCZofmZbFIcG8y+qXSm4LoXCc4lENxFVQ9AOcCxfD3yJHAjorL 4BC2QlMXWRY56sb1iZPiQE9QkBsF3tTOIUQ57sbWgKoEc+x+fbftKd9/s6oq1g0n CiS1xcPGUA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:46 2026 by rpki-client