This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BMWTwzo9oilIzOIyis8F2YoB8aU.cer File: BMWTwzo9oilIzOIyis8F2YoB8aU.cer (raw, json) Hash identifier: ZfiR6qhN4kwtFsA1L6L3dNryuTnT7jhuSIee2xeWups= Subject key identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38B94C179734C926DFA5A3C34654E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216348 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b9:4c:17:97:34:c9:26:df:a5:a3:c3:46:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c593c33a3da22948cce2328acf05d98a01f1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:ac:05:59:ba:fa:06:2b:1c:2f:89:cd:fc: c0:55:a5:ba:bc:3a:d1:8b:93:e2:8c:9f:4d:4c:59: 3e:df:44:f2:f5:49:9a:64:67:40:bd:33:45:d3:c7: a0:0a:d2:11:a0:a1:57:bb:7c:c4:6d:86:99:66:fd: cc:b5:ec:01:e8:b2:32:fa:60:d7:32:61:d4:c2:a3: 36:ba:54:dd:78:b9:d7:71:82:de:45:95:48:2a:da: 3b:78:39:35:3f:c0:30:5d:46:35:a4:60:04:2b:2f: 2c:72:04:86:09:cd:25:8a:59:6f:e8:a5:c3:ff:c7: 1b:2f:9c:5b:c0:db:8b:12:59:d0:0d:52:4b:5b:72: e6:e8:87:12:24:73:26:22:03:1e:0c:0f:49:53:18: 62:9a:01:6b:f5:46:c6:d7:c7:92:81:29:3e:d7:24: 30:f3:1a:f4:a4:43:89:fd:8a:e0:ff:67:f1:b9:f3: 87:f8:f3:a7:2c:49:e9:f9:c6:b3:8c:d5:7c:4c:fa: 39:c3:5e:3a:3f:5e:cf:fa:25:9e:48:09:1e:b0:72: 53:98:ea:56:12:82:49:0a:48:96:67:2e:43:25:bd: c0:b8:95:cb:20:97:45:7f:1c:c7:7a:27:27:7b:68: 34:75:73:6e:e6:45:5e:26:6b:7c:2a:bb:ce:57:7a: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:93:C3:3A:3D:A2:29:48:CC:E2:32:8A:CF:05:D9:8A:01:F1:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/007683-43ed-4a9c-b3ea-50a735b29760/1/BMWTwzo9oilIzOIyis8F2YoB8aU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216348 Signature Algorithm: sha256WithRSAEncryption 40:c6:f5:b0:c3:ef:3f:ed:ff:ca:11:2b:e4:3a:d2:a6:ff:82: 02:69:09:e7:72:94:e1:ec:e0:34:9f:87:61:76:26:1a:c3:4d: a9:9c:0c:32:92:21:34:1a:e9:2e:63:6d:86:48:25:a3:6b:ac: ee:98:e3:55:6f:0e:26:b7:bf:1a:32:f9:57:f2:b8:f1:22:b7: 31:46:e9:99:55:49:07:c6:06:46:24:26:e0:91:f4:e4:9e:79: 57:bb:b7:ed:5a:ad:f5:f5:86:0c:26:14:d1:fc:7d:62:25:b5: df:5c:8f:9d:0f:85:94:bf:52:a6:3e:e0:bd:db:4a:31:9c:29: 6d:b4:1b:1f:38:f1:16:6f:36:5f:1e:9e:fd:2e:39:f2:62:14: c5:62:1c:ba:f2:a2:03:f9:61:d2:78:44:fe:87:2f:fa:e8:08: eb:d9:b0:c9:6f:3a:80:50:1b:b3:6f:9b:b7:8f:19:ef:c7:3a: 2b:a2:96:3b:2c:6b:95:cd:86:8e:7e:e3:66:01:4e:72:e2:11: 48:bd:63:cb:cc:4a:cc:6e:10:5c:0d:03:44:50:02:97:c8:2c: 50:9a:fe:73:1c:3f:93:42:7c:7b:8e:88:8b:27:8d:3e:1d:5b: 71:a8:80:54:8b:2d:a1:84:9a:61:b2:22:70:86:e5:f3:db:b3: 6a:cf:0a:3e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OLlMF5c0ySbfpaPDRlTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGM1OTNjMzNhM2RhMjI5NDhjY2UyMzI4YWNmMDVkOThhMDFmMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyysBVm6+gYrHC+JzfzAVaW6vDrR i5PijJ9NTFk+30Ty9UmaZGdAvTNF08egCtIRoKFXu3zEbYaZZv3MtewB6LIy+mDX MmHUwqM2ulTdeLnXcYLeRZVIKto7eDk1P8AwXUY1pGAEKy8scgSGCc0lillv6KXD /8cbL5xbwNuLElnQDVJLW3Lm6IcSJHMmIgMeDA9JUxhimgFr9UbG18eSgSk+1yQw 8xr0pEOJ/Yrg/2fxufOH+POnLEnp+cazjNV8TPo5w146P17P+iWeSAkesHJTmOpW EoJJCkiWZy5DJb3AuJXLIJdFfxzHeicne2g0dXNu5kVeJmt8KrvOV3p1AQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFATFk8M6PaIpSMziMorPBdmKAfGlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzAwNzY4 My00M2VkLTRhOWMtYjNlYS01MGE3MzViMjk3NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMDA3Njgz LTQzZWQtNGE5Yy1iM2VhLTUwYTczNWIyOTc2MC8xL0JNV1R3em85b2lsSXpPSXlp czhGMllvQjhhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNHDANBgkqhkiG9w0BAQsFAAOCAQEAQMb1sMPvP+3/ yhEr5DrSpv+CAmkJ53KU4ezgNJ+HYXYmGsNNqZwMMpIhNBrpLmNthkglo2us7pjj VW8OJre/GjL5V/K48SK3MUbpmVVJB8YGRiQm4JH05J55V7u37Vqt9fWGDCYU0fx9 YiW131yPnQ+FlL9Spj7gvdtKMZwpbbQbHzjxFm82Xx6e/S458mIUxWIcuvKiA/lh 0nhE/ocv+ugI69mwyW86gFAbs2+bt48Z78c6K6KWOyxrlc2Gjn7jZgFOcuIRSL1j y8xKzG4QXA0DRFACl8gsUJr+cxw/k0J8e46IiyeNPh1bcaiAVIstoYSaYbIicIbl 89uzas8KPg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:06 2026 by rpki-client