This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer (raw, json) Hash identifier: OM5o3JfJd8tosj9PaONsEZGOnLN9iftyDlz9NHFU7Us= Subject key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B77EBFC773F0C810D004B634E9330 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212635 IP: 45.159.140.0/22 IP: 2a10:6e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:77:eb:fc:77:3f:0c:81:0d:00:4b:63:4e:93:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:ef:13:52:ce:ed:5f:29:53:05:f4:61:aa: 67:ae:b0:e4:04:13:10:75:e0:4b:c4:96:57:8a:38: b5:f3:17:e3:1b:b3:d4:63:ae:ed:bc:64:4b:1a:d6: 08:9e:81:03:4a:e1:28:e2:7c:de:da:5f:f3:bb:31: 0c:84:2f:24:04:d5:4f:c8:3f:d9:b6:e6:5b:96:79: 6e:1e:6a:13:57:70:27:37:0b:e5:8d:83:57:d8:35: fe:a1:5f:4b:5a:bd:bb:9d:50:9f:3c:1c:1f:e6:1b: 4f:fb:33:82:c0:1d:f6:86:29:83:bd:d3:c5:e5:ac: ba:70:24:3e:d7:34:02:60:6c:74:62:d9:7d:e2:0b: 4c:08:39:3b:fb:93:78:d7:26:5c:98:dc:91:26:9d: 3b:52:00:6c:c5:6c:c0:14:bd:9f:4c:52:ff:5b:d1: 37:b2:c2:dd:89:8f:b6:5a:f7:cc:cd:86:f2:6c:ea: ee:34:d4:0e:6d:96:d9:da:00:1c:ad:ec:af:e5:16: 49:4d:ed:c1:82:0d:03:a1:a5:d4:b6:61:5d:f2:27: f3:97:00:19:53:21:ee:dd:08:98:ac:a6:b0:86:47: fd:f0:f4:94:96:fd:b9:b6:9b:5a:31:51:65:ad:b7: b4:bd:ec:9e:99:0e:a4:55:17:07:f8:02:be:be:c0: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.140.0/22 IPv6: 2a10:6e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212635 Signature Algorithm: sha256WithRSAEncryption 5f:36:29:13:eb:a2:bb:b6:18:35:9b:f3:b9:b0:a0:40:ba:29: 29:19:cd:0c:7b:fa:19:be:a3:10:37:ed:09:c6:15:f0:e7:8c: 54:1d:ae:8b:11:90:db:a3:c6:08:dd:78:14:4d:18:a4:0a:ac: 78:5d:00:31:4d:f0:68:67:f7:a9:71:bd:d5:d7:08:89:c1:fb: 3e:a7:41:5e:e8:3c:bf:42:6b:5f:db:df:6b:99:75:ee:e9:82: bc:e9:3f:47:b5:b0:dc:08:54:9f:76:51:fe:3b:99:41:d2:82: e2:f9:ed:b4:f0:bc:2c:f5:fd:16:d4:79:bf:06:e1:29:71:33: 9b:18:0f:46:43:a1:80:9a:28:2d:7d:e0:08:5e:1b:3a:1e:ba: 14:99:99:2b:08:a3:d2:d9:5e:04:80:dd:b5:8c:a2:4b:87:b5: ff:dc:a2:c0:41:1e:b2:b1:4f:2f:3b:75:3e:cb:c4:14:7b:6d: 56:a0:44:fa:14:f2:f9:7d:9c:8a:c5:b2:3e:ca:50:b5:56:55: ae:15:59:98:ab:71:34:d4:35:7d:fb:28:30:e8:4d:f0:64:b6: e0:5d:a9:5e:36:da:60:4d:e2:67:0a:52:63:9e:1a:fe:56:9b: 05:34:77:8f:56:70:fe:6f:c3:99:c0:b6:99:e1:85:7e:b6:c5: 45:4d:c0:6f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W3fr/Hc/DIENAEtjTpMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGQxZGM0ZDJlYjdiZjJhM2YwOGQ1NDU3NTU0NzcwNTUxNDNmMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3vE1LO7V8pUwX0YapnrrDkBBMQ deBLxJZXiji18xfjG7PUY67tvGRLGtYInoEDSuEo4nze2l/zuzEMhC8kBNVPyD/Z tuZblnluHmoTV3AnNwvljYNX2DX+oV9LWr27nVCfPBwf5htP+zOCwB32himDvdPF 5ay6cCQ+1zQCYGx0Ytl94gtMCDk7+5N41yZcmNyRJp07UgBsxWzAFL2fTFL/W9E3 ssLdiY+2WvfMzYbybOruNNQObZbZ2gAcreyv5RZJTe3Bgg0DoaXUtmFd8ifzlwAZ UyHu3QiYrKawhkf98PSUlv25tptaMVFlrbe0veyemQ6kVRcH+AK+vsDiLQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG3R3E0ut78qPwjVRXVUdwVRQ/F0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2JlZTQ4 My1lZWIzLTRjNTMtYTQ1Ni1mYjRjNTRiNjczM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYmVlNDgz LWVlYjMtNGM1My1hNDU2LWZiNGM1NGI2NzMzYS8xL2JkSGNUUzYzdnlvX0NOVkZk VlIzQlZGRDhYUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ+MMA0EAgACMAcDBQMqEG5AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+mzANBgkqhkiG9w0BAQsFAAOCAQEAXzYpE+uiu7YY NZvzubCgQLopKRnNDHv6Gb6jEDftCcYV8OeMVB2uixGQ26PGCN14FE0YpAqseF0A MU3waGf3qXG91dcIicH7PqdBXug8v0JrX9vfa5l17umCvOk/R7Ww3AhUn3ZR/juZ QdKC4vnttPC8LPX9FtR5vwbhKXEzmxgPRkOhgJooLX3gCF4bOh66FJmZKwij0tle BIDdtYyiS4e1/9yiwEEesrFPLzt1PsvEFHttVqBE+hTy+X2cisWyPspQtVZVrhVZ mKtxNNQ1ffsoMOhN8GS24F2pXjbaYE3iZwpSY54a/labBTR3j1Zw/m/DmcC2meGF frbFRU3Abw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:13 2026 by rpki-client