This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer (raw, json) Hash identifier: b/dY9qp7CnRx9VuNrw1ppJEn6xZxt0yjG81cLzFm/nA= Subject key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83F5D0E6580F50684E6C721C41AF8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211580 IP: 91.197.120.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f5:d0:e6:58:0f:50:68:4e:6c:72:1c:41:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:56:5a:32:a1:38:c1:b7:a6:60:c2:81:bc: 37:4b:9b:48:d6:8f:df:de:1b:6e:a0:98:a1:05:0e: b2:27:fa:ef:ba:54:67:d2:58:0a:2d:0a:bc:99:02: 3e:84:99:b7:aa:b8:04:f7:5a:36:7f:ce:ba:f5:96: 15:7c:26:1d:87:75:60:12:82:ac:54:80:71:1e:b1: 15:14:fe:f7:56:c6:bf:17:69:3d:ef:99:77:42:f4: be:ef:15:52:dc:f1:0a:16:2f:7e:32:8d:b4:2f:ad: c9:c2:74:f6:7e:1c:49:1f:c4:9c:25:a0:c0:5a:a2: 94:ea:72:17:19:d0:3c:42:92:ad:63:66:83:ad:25: 16:99:3a:16:05:ca:5b:ff:13:dd:06:98:83:23:41: 30:6c:7f:3d:fb:73:c4:20:09:09:a9:1e:9c:86:2c: e7:40:ec:6d:a5:dd:97:54:1c:42:c9:ae:1f:8e:3f: 30:74:9e:31:5d:33:ea:78:dd:d0:13:7e:30:14:de: 94:8f:f7:45:e0:90:38:56:a9:48:fb:0f:65:99:5d: ac:b3:91:48:d8:6f:11:a5:ed:f7:e0:74:f7:b9:a2: 49:f5:50:7c:3d:73:fe:d7:33:64:4f:22:ed:65:4e: 66:ce:df:a7:9f:2b:1d:7b:1a:86:3b:a0:48:90:df: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.120.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211580 Signature Algorithm: sha256WithRSAEncryption 64:77:5a:92:3a:72:ec:6c:46:3b:c3:bb:6e:8e:40:6c:c4:45: 52:02:c6:16:c2:b7:0f:b2:37:d8:f7:d8:24:10:16:8b:0a:4d: d8:e0:6c:24:fc:e9:b9:7f:c5:03:9c:b9:1d:f1:4d:0b:1f:d1: ef:f5:4c:12:e3:21:45:c5:5d:8e:d3:20:28:08:1c:4c:e0:94: c4:30:c3:bb:f9:07:ca:70:1c:b5:25:f5:4a:9c:d7:9f:a7:dd: 48:1c:7a:d0:4e:3f:e4:34:9d:ec:80:c4:34:78:a8:ad:f7:54: f6:38:8a:e0:50:0f:ac:0a:de:f9:bd:63:a0:0f:5f:35:e5:09: f9:b5:cc:c1:fe:71:f9:4c:50:8d:fc:2f:13:e3:69:ec:eb:04: 4b:03:c1:b5:1a:61:1c:8d:47:dc:c6:e9:1d:5f:dd:fa:41:51: 38:a2:dc:6b:b0:08:11:85:dc:a6:da:19:30:5e:47:99:99:59: 76:88:25:6b:9f:5d:0b:d4:e1:6e:d0:98:a5:59:92:04:fa:83: 58:7b:94:2e:24:1e:78:59:57:99:2b:aa:00:d3:78:e1:dc:4d: 81:6c:72:54:6e:62:d0:ff:dc:0d:49:eb:3a:a0:04:0c:f1:b2: 5b:ba:c6:0c:49:93:84:61:6a:a5:e1:fa:59:67:84:4a:c8:05: e8:b0:cb:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/g/XQ5lgPUGhObHIcQa+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDYyYjliNThlZTA4ZTgzZjFhOWFkNGU5NjQzZTgwZDNiNDBjYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zxWWjKhOMG3pmDCgbw3S5tI1o/f 3htuoJihBQ6yJ/rvulRn0lgKLQq8mQI+hJm3qrgE91o2f8669ZYVfCYdh3VgEoKs VIBxHrEVFP73Vsa/F2k975l3QvS+7xVS3PEKFi9+Mo20L63JwnT2fhxJH8ScJaDA WqKU6nIXGdA8QpKtY2aDrSUWmToWBcpb/xPdBpiDI0EwbH89+3PEIAkJqR6chizn QOxtpd2XVBxCya4fjj8wdJ4xXTPqeN3QE34wFN6Uj/dF4JA4VqlI+w9lmV2ss5FI 2G8Rpe334HT3uaJJ9VB8PXP+1zNkTyLtZU5mzt+nnysdexqGO6BIkN+AdQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFARiubWO4I6D8amtTpZD6A07QMs+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2UxZWU1 Yi0wMjNiLTQzMGEtOWM2Zi0wZWUyZWE3ZDQ4ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvZTFlZTVi LTAyM2ItNDMwYS05YzZmLTBlZTJlYTdkNDg4NC8xL0JHSzV0WTdnam9QeHFhMU9s a1BvRFR0QXl6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8V4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM6fDANBgkqhkiG9w0BAQsFAAOCAQEAZHdakjpy7GxGO8O7bo5AbMRFUgLGFsK3 D7I32PfYJBAWiwpN2OBsJPzpuX/FA5y5HfFNCx/R7/VMEuMhRcVdjtMgKAgcTOCU xDDDu/kHynActSX1SpzXn6fdSBx60E4/5DSd7IDENHiorfdU9jiK4FAPrAre+b1j oA9fNeUJ+bXMwf5x+UxQjfwvE+Np7OsESwPBtRphHI1H3MbpHV/d+kFROKLca7AI EYXcptoZMF5HmZlZdogla59dC9ThbtCYpVmSBPqDWHuULiQeeFlXmSuqANN44dxN gWxyVG5i0P/cDUnrOqAEDPGyW7rGDEmThGFqpeH6WWeESsgF6LDL+A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:45 2026 by rpki-client