This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer File: bpTN6pNlYSrfdhEURmglSziPphI.cer (raw, json) Hash identifier: HieE4lpP1QW21754BqeFGwoGMaBJHnTXi9drirBZZxs= Subject key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AA433C474DA7B2502027AA798E9D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.217.234.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a4:33:c4:74:da:7b:25:02:02:7a:a7:98:e9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e94cdea9365612adf7611144668254b388fa612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:1d:13:22:49:29:2a:db:f2:3d:45:55:7b: f5:65:b5:a1:88:1d:50:0a:42:68:36:05:fc:a1:c7: a9:db:97:42:27:f0:07:3b:f1:27:fb:fd:c7:9a:40: e3:bb:e5:0d:d8:aa:7b:04:4d:d2:d0:72:7f:70:5b: 0b:22:fa:eb:9f:1a:d5:26:a5:ae:f5:57:38:7f:88: db:5e:36:b0:f3:c3:70:78:73:20:a6:52:10:46:54: aa:27:d3:09:2e:a5:96:a5:fc:ac:50:39:eb:75:2c: c4:f3:ac:d3:3d:69:24:8b:07:ff:8b:f4:d1:9c:5c: 27:bc:b5:5b:0a:c2:c8:e7:c2:f7:05:5d:36:85:8f: 85:7e:0f:c1:17:83:8b:6e:04:06:9a:4f:bc:9e:4e: 29:94:1f:40:11:ac:66:d7:9a:5f:c7:e7:40:70:75: e7:af:7b:c0:c0:3c:5c:55:a5:ce:d5:cb:85:29:b6: 32:3d:17:75:41:de:d4:5b:85:3d:56:4f:ef:1b:4a: a4:4b:33:e3:6b:06:43:30:bb:0f:7e:53:72:74:fc: bc:b3:22:02:6d:a5:a6:02:8c:c1:64:7b:2c:51:76: b2:96:16:b7:79:7b:9a:74:92:d2:e5:9b:ea:be:05: d8:0c:e7:93:ce:51:29:49:27:f9:ab:b3:50:a4:7a: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.234.0/24 Signature Algorithm: sha256WithRSAEncryption 51:36:6a:e2:3c:92:42:66:88:c7:26:14:3a:99:35:86:a0:41: 0c:ce:3c:9c:88:84:be:22:85:27:79:85:79:cd:85:8d:32:01: 36:67:34:13:28:32:e1:86:18:c0:45:8c:a1:fc:5a:51:25:e7: 81:65:57:02:e3:d5:d6:72:ae:7d:c7:3b:91:da:e0:ed:64:fc: f4:e2:8d:91:8a:e0:0a:c5:65:a0:bd:55:8f:3a:ac:b8:c5:fa: 71:8e:b2:02:d5:8c:08:05:fd:c0:ed:29:74:b9:2f:fa:45:de: 28:7b:65:04:8e:72:20:25:64:ca:ed:20:ae:5f:24:4a:51:7b: 4b:8d:b7:c0:d1:f8:35:dd:5f:5d:a3:7d:d2:ca:7a:7a:5c:d4: 30:7b:2b:e2:eb:73:fa:72:e7:7d:2d:1a:9f:66:af:2e:70:b0: 54:10:a3:81:18:97:d4:79:1b:fe:24:ee:c8:a8:34:6f:8e:4d: 5c:70:6c:4b:5e:53:b6:12:ce:f5:cd:40:55:ba:c8:76:07:94: 49:d7:41:56:c6:a4:4f:01:24:11:32:ad:5b:17:57:ba:48:ff: 08:da:db:e5:07:76:79:b7:d5:be:04:87:18:20:c8:bc:4b:f1: 9d:2a:92:fd:8a:ec:66:54:86:a1:dc:8a:6b:6c:f3:ee:95:a8: 5b:87:de:c6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WqQzxHTaeyUCAnqnmOnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTk0Y2RlYTkzNjU2MTJhZGY3NjExMTQ0NjY4MjU0YjM4OGZhNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjMdEyJJKSrb8j1FVXv1ZbWhiB1Q CkJoNgX8ocep25dCJ/AHO/En+/3HmkDju+UN2Kp7BE3S0HJ/cFsLIvrrnxrVJqWu 9Vc4f4jbXjaw88NweHMgplIQRlSqJ9MJLqWWpfysUDnrdSzE86zTPWkkiwf/i/TR nFwnvLVbCsLI58L3BV02hY+Ffg/BF4OLbgQGmk+8nk4plB9AEaxm15pfx+dAcHXn r3vAwDxcVaXO1cuFKbYyPRd1Qd7UW4U9Vk/vG0qkSzPjawZDMLsPflNydPy8syIC baWmAozBZHssUXaylha3eXuadJLS5ZvqvgXYDOeTzlEpSSf5q7NQpHphqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFG6UzeqTZWEq33YRFEZoJUs4j6YSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzMzNmRk ZC0zODMzLTRiYjAtODY2OC05YWY3ZDJiNTlhNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMzM2ZGRk LTM4MzMtNGJiMC04NjY4LTlhZjdkMmI1OWE0Yy8xL2JwVE42cE5sWVNyZmRoRVVS bWdsU3ppUHBoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9nqMA0GCSqGSIb3DQEBCwUAA4IBAQBRNmri PJJCZojHJhQ6mTWGoEEMzjyciIS+IoUneYV5zYWNMgE2ZzQTKDLhhhjARYyh/FpR JeeBZVcC49XWcq59xzuR2uDtZPz04o2RiuAKxWWgvVWPOqy4xfpxjrIC1YwIBf3A 7Sl0uS/6Rd4oe2UEjnIgJWTK7SCuXyRKUXtLjbfA0fg13V9do33Synp6XNQweyvi 63P6cud9LRqfZq8ucLBUEKOBGJfUeRv+JO7IqDRvjk1ccGxLXlO2Es71zUBVush2 B5RJ10FWxqRPASQRMq1bF1e6SP8I2tvlB3Z5t9W+BIcYIMi8S/GdKpL9iuxmVIah 3IprbPPulahbh97G -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:33 2026 by rpki-client