This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer File: BGLgBWSpNA_0c505USFsRqjvxk8.cer (raw, json) Hash identifier: i3uKwGYWyV0lYjD58HWM7StJSuXsSluG35bGLbC3ZQA= Subject key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C125C909F57DEF58480E0DECB196CF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60398 IP: 217.150.86.0/23 IP: 2a02:65c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:90:9f:57:de:f5:84:80:e0:de:cb:19:6c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0462e00564a9340ff4739d3951216c46a8efc64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:1b:ec:dc:55:1e:e6:b4:d3:bb:39:b1:09: 47:fa:1c:f5:a2:03:7f:19:0b:33:89:cb:94:ea:a3: 83:fc:80:07:4c:f1:0d:53:55:69:e0:ca:b3:5f:80: 5e:98:49:e1:fd:58:29:61:f2:2a:b8:b3:09:3b:b3: f6:66:b8:cd:a4:04:dd:5e:81:fe:df:cd:ef:e2:28: 70:a6:4f:72:70:08:7f:90:3a:67:77:3d:28:6d:0a: e4:f9:17:30:8f:09:7b:e0:a4:81:1e:25:11:22:f6: 30:67:5f:50:e7:a3:43:5f:de:e7:a8:88:47:fc:0d: 19:51:d2:6d:7b:1f:e8:1b:68:9e:fa:84:2d:88:cd: eb:11:70:1f:96:83:e1:58:50:16:ed:4c:b2:d0:fb: 0b:ae:f5:fd:6c:94:c8:5e:8c:5a:bc:45:b5:21:cc: 9f:47:ae:81:70:5f:aa:21:1d:28:57:d9:aa:f8:9c: 52:b5:2a:cc:72:9e:e4:b2:2e:bb:7d:51:dd:ab:53: a0:a1:42:03:f6:eb:b8:b6:2c:3e:83:fd:81:22:0e: 2f:de:b8:98:db:af:b9:de:89:58:c2:c0:ef:1c:b5: d8:f3:cd:be:b1:36:9e:e1:84:bf:0f:d3:56:cc:b6: 8d:d1:0b:3d:eb:c3:ac:66:c9:9d:98:2f:cf:74:3a: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.150.86.0/23 IPv6: 2a02:65c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60398 Signature Algorithm: sha256WithRSAEncryption 0a:fa:28:5b:e5:03:d7:36:48:a0:c9:92:b8:71:31:a0:c5:25: 56:50:75:9e:89:9d:77:14:10:b8:1a:35:fe:5d:d9:e1:ea:aa: 15:ea:25:c3:0f:64:8f:6f:bf:da:4a:46:eb:8b:bf:99:72:0e: 6e:fc:d2:7c:8e:b5:87:cb:9b:a3:d3:66:ff:3a:08:cf:04:75: e8:4c:b0:b0:c5:a0:9b:d4:b8:72:81:8d:c8:5d:9c:d9:3c:72: c6:c9:63:11:ef:39:9d:cd:5f:b7:1b:7a:14:8d:89:48:b7:f8: 80:08:2b:84:ac:dd:54:ed:25:be:45:5c:dc:a3:f1:95:25:ec: 3d:e8:5e:39:1a:b3:63:67:f3:87:fd:2e:2c:1a:ab:ed:90:f2: ed:a9:a6:aa:0f:4e:07:73:c1:e0:b3:fa:a4:17:59:d2:c8:7d: 3f:46:04:73:be:37:7e:72:e0:49:9f:6c:36:df:3e:69:ad:c9: be:5b:89:21:9b:c2:d2:1c:cf:bb:cc:75:aa:4c:aa:02:0e:8b: b5:71:35:91:d5:8e:60:58:ca:d0:96:8a:be:a3:ec:7c:cc:49: 22:c1:cd:bf:99:9f:76:a5:a0:ac:0b:b9:72:0f:17:fa:a6:5d: d7:d0:56:2b:b6:e9:2f:7d:38:71:5e:d0:97:12:b4:ac:d4:e0: 9f:f1:b6:f0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8ElyQn1fe9YSA4N7LGWzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDYyZTAwNTY0YTkzNDBmZjQ3MzlkMzk1MTIxNmM0NmE4ZWZjNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrIb7NxVHua007s5sQlH+hz1ogN/ GQszicuU6qOD/IAHTPENU1Vp4MqzX4BemEnh/VgpYfIquLMJO7P2ZrjNpATdXoH+ 383v4ihwpk9ycAh/kDpndz0obQrk+Rcwjwl74KSBHiURIvYwZ19Q56NDX97nqIhH /A0ZUdJtex/oG2ie+oQtiM3rEXAfloPhWFAW7Uyy0PsLrvX9bJTIXoxavEW1Icyf R66BcF+qIR0oV9mq+JxStSrMcp7ksi67fVHdq1OgoUID9uu4tiw+g/2BIg4v3riY 26+53olYwsDvHLXY882+sTae4YS/D9NWzLaN0Qs968OsZsmdmC/PdDq6PwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFARi4AVkqTQP9HOdOVEhbEao78ZPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzhjOWFh OC1jMTBhLTRlMmQtOWI2NC0yMjczMDJkNTk1NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvOGM5YWE4 LWMxMGEtNGUyZC05YjY0LTIyNzMwMmQ1OTU3Mi8xL0JHTGdCV1NwTkFfMGM1MDVV U0ZzUnFqdnhrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQB2ZZWMA0EAgACMAcDBQAqAmXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDr7jANBgkqhkiG9w0BAQsFAAOCAQEACvooW+UD1zZI oMmSuHExoMUlVlB1nomddxQQuBo1/l3Z4eqqFeolww9kj2+/2kpG64u/mXIObvzS fI61h8ubo9Nm/zoIzwR16EywsMWgm9S4coGNyF2c2TxyxsljEe85nc1ftxt6FI2J SLf4gAgrhKzdVO0lvkVc3KPxlSXsPeheORqzY2fzh/0uLBqr7ZDy7ammqg9OB3PB 4LP6pBdZ0sh9P0YEc743fnLgSZ9sNt8+aa3JvluJIZvC0hzPu8x1qkyqAg6LtXE1 kdWOYFjK0JaKvqPsfMxJIsHNv5mfdqWgrAu5cg8X+qZd19BWK7bpL304cV7QlxK0 rNTgn/G28A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:16 2026 by rpki-client