This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer File: BG82Rli2TivxUNIPyDjDZCB5deI.cer (raw, json) Hash identifier: HzvWFxx3ffnRjOTygGHOsqJY7tmFRdThzbOyc8M/8Rs= Subject key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77587C90C9261DD7D82509851CF34AFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31252 IP: 37.233.0.0/18 IP: 87.248.160.0/19 IP: 89.28.0.0/17 IP: 91.216.97.0/24 IP: 95.65.0.0/17 IP: 178.18.32.0/20 IP: 178.168.0.0/17 IP: 185.17.224.0/22 IP: 185.70.188.0/22 IP: 185.175.80.0/22 IP: 188.138.128.0/17 IP: 188.244.16.0/20 IP: 195.93.218.0/23 IP: 2a00:9900::/29 IP: 2a01:320::/29 IP: 2a0b:dd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7c:90:c9:26:1d:d7:d8:25:09:85:1c:f3:4a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=046f364658b64e2bf150d20fc838c364207975e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:49:ac:a0:5e:64:e7:73:23:1c:6b:21:36: 00:9a:58:b8:f5:cd:7e:cc:5c:f2:85:03:65:e1:d5: 89:7c:d2:fe:b7:fe:de:f5:da:bd:fb:20:31:e4:96: 3f:9c:40:e6:d4:68:4c:00:d5:a1:cd:92:6b:5f:5e: ba:50:e4:d2:c2:d6:86:42:d7:da:a8:63:08:cf:2d: 69:f0:3a:3d:a5:35:20:db:35:17:76:a2:0a:a1:71: 81:59:65:21:67:26:76:08:17:4d:00:7e:22:7c:a5: d8:91:90:4c:ca:f5:80:87:44:ed:f6:30:1c:71:a8: f8:bd:b3:9c:1b:6c:b2:c0:b9:5a:1a:db:90:b7:f4: e0:b9:54:6e:d3:00:b7:ec:d0:34:a6:de:ad:0b:bc: 98:f3:c6:a7:16:f4:67:c7:53:27:c5:99:cb:ae:a0: 94:5b:d4:7f:5d:7f:38:9a:28:fc:ad:f1:59:fa:79: 44:02:da:04:a3:d4:93:c3:75:aa:d6:19:09:1d:34: 0b:54:6d:0b:95:a4:4d:3c:cb:dc:dc:dd:60:50:74: cf:e4:f4:c8:48:ba:4a:31:83:9f:5b:f9:20:a2:77: 6c:b7:d7:af:47:67:aa:3c:fc:28:8e:ec:08:cb:e7: fb:7c:8b:94:82:af:4a:da:c4:c7:5d:4d:81:77:99: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.233.0.0/18 87.248.160.0/19 89.28.0.0/17 91.216.97.0/24 95.65.0.0/17 178.18.32.0/20 178.168.0.0/17 185.17.224.0/22 185.70.188.0/22 185.175.80.0/22 188.138.128.0/17 188.244.16.0/20 195.93.218.0/23 IPv6: 2a00:9900::/29 2a01:320::/29 2a0b:dd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31252 Signature Algorithm: sha256WithRSAEncryption a0:fc:be:df:5b:55:2f:70:e9:61:54:92:28:b2:02:e7:be:4e: b1:52:dc:32:ed:79:bb:5b:7a:28:2e:cc:9e:1e:4d:4b:9b:a2: 1c:a4:f7:8e:ad:bc:8e:df:2f:f6:9d:f2:11:59:2a:05:94:dd: f0:22:e9:bc:8a:d6:48:70:74:96:35:4f:4e:d1:d1:b7:c8:ff: d6:7a:9d:c5:b8:a6:e2:0f:6b:88:93:61:9d:4f:42:25:68:e5: 19:3e:bd:00:ec:6c:6d:4d:ac:67:62:e4:d8:8c:d3:45:c2:2a: eb:4f:bb:da:bb:b0:81:a3:98:e3:d0:2a:ee:24:f6:07:f8:f3: 1a:1d:88:c3:8c:af:0d:63:f3:3f:19:2a:40:14:8b:6c:fa:42: 71:e3:fb:12:67:e2:2c:04:6d:40:89:7f:74:ee:c6:51:14:71: b1:76:42:38:43:eb:d2:49:1d:62:82:b6:2e:69:a7:2b:f6:58: f4:b7:fe:6f:56:d6:4e:6b:7e:fc:ce:62:df:36:51:72:5e:ca: af:b5:b3:1a:e4:a9:71:5a:51:71:83:53:02:8b:ad:eb:48:1e: ce:18:0b:48:0e:5e:80:b2:5e:9d:36:f5:2b:24:22:c0:7c:f9: 98:2b:0d:56:24:a1:09:5a:82:1a:7c:16:c4:7b:d9:44:20:22: 5d:12:a1:db -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt3WHyQySYd19glCYUc80r6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDZmMzY0NjU4YjY0ZTJiZjE1MGQyMGZjODM4YzM2NDIwNzk3NWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+5JrKBeZOdzIxxrITYAmli49c1+ zFzyhQNl4dWJfNL+t/7e9dq9+yAx5JY/nEDm1GhMANWhzZJrX166UOTSwtaGQtfa qGMIzy1p8Do9pTUg2zUXdqIKoXGBWWUhZyZ2CBdNAH4ifKXYkZBMyvWAh0Tt9jAc caj4vbOcG2yywLlaGtuQt/TguVRu0wC37NA0pt6tC7yY88anFvRnx1MnxZnLrqCU W9R/XX84mij8rfFZ+nlEAtoEo9STw3Wq1hkJHTQLVG0LlaRNPMvc3N1gUHTP5PTI SLpKMYOfW/kgondst9evR2eqPPwojuwIy+f7fIuUgq9K2sTHXU2Bd5nNfwIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFARvNkZYtk4r8VDSD8g4w2QgeXXiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2Q0YjVm OS1hZjQ0LTQxZDAtYjVmMS1hMjVlMDdjZWEyYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZDRiNWY5 LWFmNDQtNDFkMC1iNWYxLWEyNWUwN2NlYTJjMC8xL0JHODJSbGkyVGl2eFVOSVB5 RGpEWkNCNWRlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGEBggrBgEF BQcBBwEB/wR1MHMwVAQCAAEwTgMEBiXpAAMEBVf4oAMEB1kcAAMEAFvYYQMEB19B AAMEBLISIAMEB7KoAAMEArkR4AMEArlGvAMEArmvUAMEB7yKgAMEBLz0EAMEAcNd 2jAbBAIAAjAVAwUDKgCZAAMFAyoBAyADBQMqC90AMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAnoUMA0GCSqGSIb3DQEBCwUAA4IBAQCg/L7fW1UvcOlhVJIosgLnvk6x Utwy7Xm7W3ooLsyeHk1Lm6IcpPeOrbyO3y/2nfIRWSoFlN3wIum8itZIcHSWNU9O 0dG3yP/Wep3FuKbiD2uIk2GdT0IlaOUZPr0A7GxtTaxnYuTYjNNFwirrT7vau7CB o5jj0CruJPYH+PMaHYjDjK8NY/M/GSpAFIts+kJx4/sSZ+IsBG1AiX907sZRFHGx dkI4Q+vSSR1igrYuaacr9lj0t/5vVtZOa378zmLfNlFyXsqvtbMa5KlxWlFxg1MC i63rSB7OGAtIDl6Asl6dNvUrJCLAfPmYKw1WJKEJWoIafBbEe9lEICJdEqHb -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:58 2026 by rpki-client