This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer File: buw_AiBaTTSwW7hI6LYrL_XlAFg.cer (raw, json) Hash identifier: Oql4zf1HZ6y5st5fnWg6+DmI1PFPZkd8ZCJVOdUsLKQ= Subject key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA05C46152E8014ED870A3E2264B69A0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 08:23:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210440 IP: 194.153.159.128/26 IP: 2001:678:120::/48 IP: 2001:678:10d0::/48 IP: 2001:7f8:fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:5c:46:15:2e:80:14:ed:87:0a:3e:22:64:b6:9a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 08:23:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:ef:2e:20:9a:0c:e9:09:cc:e6:b0:48:d5: 78:23:3b:f2:e1:d1:f3:ff:d5:5a:98:4b:ae:52:84: f4:ce:b5:f0:9c:a5:be:fe:a1:f1:59:b3:fe:59:53: 1a:14:40:0a:74:34:7d:72:0d:80:69:6f:bf:0c:96: 8a:03:6c:5b:de:6c:41:ef:72:94:c1:4d:4e:03:0b: 83:9b:da:69:82:5d:cf:93:35:8a:af:b0:ed:4d:fd: 47:77:9f:bf:35:a5:9d:45:b9:66:4d:ac:db:9c:78: 50:91:f1:50:dc:a2:94:8b:fb:3b:b5:05:c5:a5:5f: 6b:78:97:f0:e2:86:2e:27:c5:06:50:e6:6e:92:da: d9:4f:ab:39:1b:b8:bf:58:98:2b:1b:84:94:df:a2: cc:c0:9d:1a:84:77:ba:74:30:0c:aa:28:ce:1e:4e: 67:99:67:ca:3f:c7:21:4f:f6:99:cb:a5:1d:67:c5: 9f:c7:5e:03:5b:67:4b:f1:56:94:b4:24:d4:58:cf: 4f:de:9a:59:b7:d4:00:cd:99:66:8e:ad:88:ac:63: b1:9a:2e:04:69:e5:20:d9:f7:67:d5:b9:cd:12:a5: 46:09:40:23:00:af:89:e5:70:9b:66:57:1a:71:f6: 77:dd:2e:11:1b:1c:1d:48:db:57:4f:30:a3:29:6c: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.128/26 IPv6: 2001:678:120::/48 2001:678:10d0::/48 2001:7f8:fc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210440 Signature Algorithm: sha256WithRSAEncryption 15:bc:67:11:56:91:eb:ac:76:75:f4:6e:e5:b8:bb:88:77:aa: 7b:a8:f4:2a:d9:e2:40:25:0e:93:83:6e:0e:20:8a:e4:fc:f4: b4:3c:7e:14:9a:ec:bb:85:3c:19:82:b9:20:48:e2:4f:27:00: 41:0b:c2:6c:be:66:06:a7:eb:89:8f:42:59:e6:44:5d:d3:fc: 81:a8:ca:24:11:dc:e2:45:4f:14:e3:d6:6b:f5:1d:98:99:61: 89:d2:f6:3f:ef:dd:c1:79:6c:11:d9:28:1e:25:3c:8d:50:cf: be:04:67:31:fe:6e:f7:ef:ff:fb:07:34:09:9d:39:b0:5e:86: 65:d7:be:c2:45:2b:ae:10:e0:59:44:02:01:e1:de:c9:16:91: 57:f1:04:69:2a:77:8e:e5:c6:2a:29:9c:a6:46:3a:26:49:a3: 99:9d:73:9c:67:6d:bf:64:39:6b:14:59:64:5e:14:a1:b1:67: 0b:22:94:12:a5:5b:d3:c9:a9:e2:fc:71:49:9d:1f:dd:81:71: 6d:21:92:80:28:75:6e:ec:23:1a:1b:62:dd:20:dc:a7:4a:21: cf:1e:3e:a1:f6:0f:a5:cb:9f:7a:b4:e1:f2:21:43:d3:8e:3e: a5:d1:ef:69:15:6c:39:96:ec:0c:79:e9:9a:a1:bc:5e:19:53: 35:b2:d4:fc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZqgXEYVLoAU7YcKPiJktpoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMDgyMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWVjM2YwMjIwNWE0ZDM0YjA1YmI4NDhlOGI2MmIyZmY1ZTUwMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7nvLiCaDOkJzOawSNV4Izvy4dHz /9VamEuuUoT0zrXwnKW+/qHxWbP+WVMaFEAKdDR9cg2AaW+/DJaKA2xb3mxB73KU wU1OAwuDm9ppgl3PkzWKr7DtTf1Hd5+/NaWdRblmTazbnHhQkfFQ3KKUi/s7tQXF pV9reJfw4oYuJ8UGUOZuktrZT6s5G7i/WJgrG4SU36LMwJ0ahHe6dDAMqijOHk5n mWfKP8chT/aZy6UdZ8Wfx14DW2dL8VaUtCTUWM9P3ppZt9QAzZlmjq2IrGOxmi4E aeUg2fdn1bnNEqVGCUAjAK+J5XCbZlcacfZ33S4RGxwdSNtXTzCjKWwq0QIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFG7sPwIgWk00sFu4SOi2Ky/15QBYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U5N2My OWMxLTMxYmQtNGUwOS04MWViLTdhMTk5YjMxMTJhNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTk3 YzI5YzEtMzFiZC00ZTA5LTgxZWItN2ExOTliMzExMmE3LzAvNkVFQzNGMDIyMDVB NEQzNEIwNUJCODQ4RThCNjJCMkZGNUU1MDA1OC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwDQQCAAEwBwMF BsKZn4AwIQQCAAIwGwMHACABBngBIAMHACABBngQ0AMHACABB/gA/DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDNggwDQYJKoZIhvcNAQELBQADggEBABW8ZxFWkeus dnX0buW4u4h3qnuo9CrZ4kAlDpODbg4giuT89LQ8fhSa7LuFPBmCuSBI4k8nAEEL wmy+Zgan64mPQlnmRF3T/IGoyiQR3OJFTxTj1mv1HZiZYYnS9j/v3cF5bBHZKB4l PI1Qz74EZzH+bvfv//sHNAmdObBehmXXvsJFK64Q4FlEAgHh3skWkVfxBGkqd47l xiopnKZGOiZJo5mdc5xnbb9kOWsUWWReFKGxZwsilBKlW9PJqeL8cUmdH92BcW0h koAodW7sIxobYt0g3KdKIc8ePqH2D6XLn3q04fIhQ9OOPqXR72kVbDmW7Ax56Zqh vF4ZUzWy1Pw= -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:41 2025 by rpki-client