This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer File: BG5SgQdApuwTSZPbya0RtkVNmno.cer (raw, json) Hash identifier: kAJN+uHHbG3Z+Lqbq76h/HqG+wpf8aBYTctVFLk11aY= Subject key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA437F60F6F0E387DE97910D8626AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203460 AS: 204598 IP: 91.226.206.0/24 IP: 93.187.168.0/24 IP: 93.187.170.0/23 IP: 185.115.60.0/22 IP: 185.138.156.0/22 IP: 2a06:7580::/29 IP: 2a0d:6080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:43:7f:60:f6:f0:e3:87:de:97:91:0d:86:26:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:e8:f2:77:f4:05:83:61:93:82:25:a7:90: ab:c7:a4:71:69:5d:ab:c4:7d:f3:58:29:be:55:ac: 41:8c:4f:89:da:e1:a3:91:d3:00:8e:8a:ad:dd:9f: d4:e3:64:77:3d:d4:40:86:bc:4d:cc:0a:9e:56:cd: c7:fa:8c:08:19:2c:9e:22:24:f4:ac:cc:af:c1:d3: f2:4c:fc:d1:1c:c1:86:c5:e9:da:dc:6e:20:31:ca: c0:44:f9:d1:7e:52:70:b0:5d:8b:39:4b:0e:d3:b3: b9:e8:5f:ab:52:e4:9d:a4:a4:bc:5d:12:8f:6a:57: 01:e1:94:f8:a2:1b:9c:5d:c4:e8:34:8e:9b:24:7c: 03:91:b6:08:5c:04:58:1e:4d:d2:79:05:77:74:7b: 4e:41:19:b2:a0:df:4e:4b:3b:98:e6:07:79:d4:46: 24:df:01:fe:8f:90:b0:f1:3f:f2:fb:96:85:51:59: 32:09:aa:c9:98:ef:67:f9:ce:69:bc:86:b8:f6:08: bb:1b:25:e5:1c:06:a6:50:f1:f8:14:8f:2a:38:5e: ea:4c:2b:89:c0:6c:34:97:9d:9f:8e:2e:e0:7e:c7: ee:00:c7:6d:1e:1a:50:55:e4:0e:aa:f2:f6:b2:40: fd:12:d5:6d:a0:d4:d5:2f:12:40:41:0d:53:6b:a5: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.206.0/24 93.187.168.0/24 93.187.170.0/23 185.115.60.0/22 185.138.156.0/22 IPv6: 2a06:7580::/29 2a0d:6080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203460 204598 Signature Algorithm: sha256WithRSAEncryption 6c:5f:ac:f7:5a:8b:f3:25:7b:87:7f:1a:1d:b0:2f:2d:6a:e2: 76:56:0b:30:94:51:0a:50:1e:60:a7:db:44:6e:65:6b:3a:23: 73:4b:be:e6:f5:32:16:ab:dc:a0:0a:e9:5e:fd:17:5b:47:77: ed:95:64:2c:19:4c:bf:6c:1b:4a:1a:33:9c:a6:73:74:be:c0: 5f:33:4e:1e:c4:44:a7:85:f4:00:82:62:1b:d3:bd:05:98:cb: dc:eb:cb:83:39:d4:92:c6:ac:cf:55:05:eb:4e:61:2d:e6:87: 9c:bf:61:b2:72:4a:f5:82:a1:a5:0d:fb:49:04:98:83:73:27: 65:b2:a1:d1:30:1b:d6:a5:38:75:61:69:d3:49:7c:91:39:e2: 64:88:d7:74:12:aa:12:43:e0:b0:66:09:13:37:86:29:77:82: 68:12:7b:5f:ab:2b:8a:99:fa:dd:df:ad:ba:91:2d:5d:f2:7d: bb:8a:4b:49:1b:09:8d:f2:4a:ab:61:3d:1d:60:a9:25:f3:64: a7:70:3a:6f:26:b4:9a:40:a4:45:6c:fd:d1:ae:b5:c0:ed:10: ae:88:be:16:13:b6:4d:f2:d5:ad:52:3a:35:d4:f9:66:12:00: 5d:f6:5f:e6:e1:e4:a3:11:65:b3:ae:25:ca:5a:41:e0:15:ca: dc:53:c2:5a -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt9ykN/YPbw44fel5ENhiasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDZlNTI4MTA3NDBhNmVjMTM0OTkzZGJjOWFkMTFiNjQ1NGQ5YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQfo8nf0BYNhk4Ilp5Crx6RxaV2r xH3zWCm+VaxBjE+J2uGjkdMAjoqt3Z/U42R3PdRAhrxNzAqeVs3H+owIGSyeIiT0 rMyvwdPyTPzRHMGGxena3G4gMcrARPnRflJwsF2LOUsO07O56F+rUuSdpKS8XRKP alcB4ZT4ohucXcToNI6bJHwDkbYIXARYHk3SeQV3dHtOQRmyoN9OSzuY5gd51EYk 3wH+j5Cw8T/y+5aFUVkyCarJmO9n+c5pvIa49gi7GyXlHAamUPH4FI8qOF7qTCuJ wGw0l52fji7gfsfuAMdtHhpQVeQOqvL2skD9EtVtoNTVLxJAQQ1Ta6XTOwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFARuUoEHQKbsE0mT28mtEbZFTZp6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzc3YTY5 OS0wNTViLTQwN2MtYjEyYi1hZDk1NDJhZDRmNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNzdhNjk5 LTA1NWItNDA3Yy1iMTJiLWFkOTU0MmFkNGY0My8xL0JHNVNnUWRBcHV3VFNaUGJ5 YTBSdGtWTm1uby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQAW+LOAwQAXbuoAwQBXbuqAwQCuXM8AwQCuYqc MBQEAgACMA4DBQMqBnWAAwUDKg1ggDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMD GsQCAwMfNjANBgkqhkiG9w0BAQsFAAOCAQEAbF+s91qL8yV7h38aHbAvLWridlYL MJRRClAeYKfbRG5lazojc0u+5vUyFqvcoArpXv0XW0d37ZVkLBlMv2wbShoznKZz dL7AXzNOHsREp4X0AIJiG9O9BZjL3OvLgznUksasz1UF605hLeaHnL9hsnJK9YKh pQ37SQSYg3MnZbKh0TAb1qU4dWFp00l8kTniZIjXdBKqEkPgsGYJEzeGKXeCaBJ7 X6sripn63d+tupEtXfJ9u4pLSRsJjfJKq2E9HWCpJfNkp3A6bya0mkCkRWz90a61 wO0Qroi+FhO2TfLVrVI6NdT5ZhIAXfZf5uHkoxFls64lylpB4BXK3FPCWg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:07 2026 by rpki-client