This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
File:                     bwdNLvtfPh01wpH4oRwLwL5-wbg.cer (raw, json)
Hash identifier:          yOE103J2L8njLNW3oaf5iT/BUAdI25l2y958zmnz82Q=
Subject key identifier:   6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA4D3CB4F4BC2E509BBA71D315268AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:19:18 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 193.108.130.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:d3:cb:4f:4b:c2:e5:09:bb:a7:1d:31:52:68:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:fe:a9:af:f3:9a:e6:d4:fa:e2:07:e0:bf:
                    af:7a:d7:ba:9d:6f:20:35:d8:4a:de:5f:8b:a0:c5:
                    ca:86:16:c9:c3:ee:e3:9f:ce:34:ad:ab:1b:99:b9:
                    f6:04:e6:94:62:37:b0:af:5c:c5:88:ab:6f:ea:0e:
                    d0:ee:bb:d7:3b:db:56:cb:ad:ea:9e:26:6f:04:3c:
                    c3:a0:80:f8:ac:3b:05:c4:52:1c:fa:1d:fe:68:80:
                    f2:89:29:e9:b2:14:9f:a3:5f:2c:0a:f1:71:53:ef:
                    15:c7:39:96:81:db:98:bc:f2:0e:a3:a0:a3:c3:50:
                    cd:53:79:13:19:d0:0a:3c:b9:94:26:b5:33:3b:f3:
                    80:11:a4:c0:3d:b7:3b:0d:ae:7b:34:5b:89:dc:e1:
                    84:19:fc:f5:4e:21:1d:17:d6:10:24:2a:11:e5:e9:
                    32:2d:96:7e:ef:89:7c:9f:ed:60:55:8b:15:d6:bf:
                    4f:e3:7d:3e:a5:ce:7b:43:98:43:66:f7:e8:ab:91:
                    00:45:3f:55:9a:94:d8:03:80:61:06:14:71:a4:08:
                    93:26:51:ff:51:74:95:ff:6b:85:da:f7:1b:a5:d8:
                    8b:7e:1e:9a:e3:fa:0b:e0:3c:42:ad:21:86:53:93:
                    3c:52:30:2d:d6:12:c5:db:c9:62:58:b2:72:c2:01:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:aa:7d:4e:ec:2b:17:96:4a:af:bc:fa:fc:8f:97:6b:af:e0:
         40:80:12:e2:f8:c9:3b:08:d4:2a:cd:c5:00:69:f3:2f:ed:ad:
         18:41:e0:ff:9f:c3:5c:63:cd:51:5b:47:ec:a2:37:42:a3:44:
         22:67:aa:46:39:90:61:34:01:f2:49:30:65:72:e6:1a:71:8a:
         19:f8:95:74:86:37:cd:70:09:d8:91:19:32:cb:d7:12:4c:bb:
         d9:0b:36:1c:18:65:29:e3:fc:d6:4c:e9:21:f4:4b:ed:13:4e:
         0c:01:ca:6e:a1:39:66:3d:77:c2:89:c1:86:24:c4:61:81:6d:
         5f:f4:1a:46:26:12:9d:62:5d:b7:e8:42:94:2e:f1:f3:79:03:
         c6:ca:34:e2:6d:c3:9d:2e:ec:03:b5:e7:38:26:63:2d:1c:53:
         1b:5f:03:76:36:89:4e:67:16:fc:a1:5b:69:3a:ac:60:67:fa:
         19:ba:29:5f:ef:06:f7:bc:91:b2:36:94:4a:4b:fd:b5:1f:fc:
         31:97:1a:23:18:83:31:39:d0:93:c6:7a:4a:f5:f5:1b:8f:f1:
         ef:4d:f5:fb:25:ec:39:39:30:75:17:f6:e9:c8:2a:dd:4d:81:
         4d:42:e7:45:88:ac:91:71:85:47:7d:24:93:d3:3b:11:99:c9:
         19:35:c5:15
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt7pNPLT0vC5Qm7px0xUmisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjA3NGQyZWZiNWYzZTFkMzVjMjkxZjhhMTFjMGJjMGJlN2VjMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2z+qa/zmubU+uIH4L+vete6nW8g
NdhK3l+LoMXKhhbJw+7jn840rasbmbn2BOaUYjewr1zFiKtv6g7Q7rvXO9tWy63q
niZvBDzDoID4rDsFxFIc+h3+aIDyiSnpshSfo18sCvFxU+8VxzmWgduYvPIOo6Cj
w1DNU3kTGdAKPLmUJrUzO/OAEaTAPbc7Da57NFuJ3OGEGfz1TiEdF9YQJCoR5eky
LZZ+74l8n+1gVYsV1r9P430+pc57Q5hDZvfoq5EART9VmpTYA4BhBhRxpAiTJlH/
UXSV/2uF2vcbpdiLfh6a4/oL4DxCrSGGU5M8UjAt1hLF28liWLJywgG1JQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFG8HTS77Xz4dNcKR+KEcC8C+fsG4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2I1NWVm
MS1jYTYzLTRjYTEtYTY1OS1mOTcyMDI4NWU3OTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvYjU1ZWYx
LWNhNjMtNGNhMS1hNjU5LWY5NzIwMjg1ZTc5Ny8xL2J3ZE5MdnRmUGgwMXdwSDRv
UndMd0w1LXdiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWyCMA0GCSqGSIb3DQEBCwUAA4IBAQCVqn1O
7CsXlkqvvPr8j5drr+BAgBLi+Mk7CNQqzcUAafMv7a0YQeD/n8NcY81RW0fsojdC
o0QiZ6pGOZBhNAHySTBlcuYacYoZ+JV0hjfNcAnYkRkyy9cSTLvZCzYcGGUp4/zW
TOkh9EvtE04MAcpuoTlmPXfCicGGJMRhgW1f9BpGJhKdYl236EKULvHzeQPGyjTi
bcOdLuwDtec4JmMtHFMbXwN2NolOZxb8oVtpOqxgZ/oZuilf7wb3vJGyNpRKS/21
H/wxlxojGIMxOdCTxnpK9fUbj/HvTfX7Jew5OTB1F/bpyCrdTYFNQudFiKyRcYVH
fSST0zsRmckZNcUV
-----END CERTIFICATE-----