This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer File: BMXx0XeetwkJA2XbmCkXrf0PgEk.cer (raw, json) Hash identifier: EXEyldo1rUiGdrc6zQ+S2baXGdbT+KYXLGFyG1iDMqk= Subject key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4EBCAC64215370803F1642252BB42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39358 IP: 194.126.231.0/24 IP: 195.114.106.0/23 IP: 2001:67c:3e8::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:eb:ca:c6:42:15:37:08:03:f1:64:22:52:bb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c5f1d1779eb709090365db982917adfd0f8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:98:d4:a1:40:11:90:93:e6:58:40:2a:a0: 6b:d5:43:8a:a4:55:cd:5a:40:45:26:92:27:61:fb: 7e:e0:f2:44:02:19:18:6c:41:1a:a4:fd:4e:a0:ff: 31:ed:67:c1:a8:5a:4a:27:8b:0f:96:92:d0:6f:ea: 21:b7:d5:88:74:a8:43:5c:8d:fc:03:c4:ca:8c:49: 8a:2e:87:62:fa:9c:4d:8f:e1:60:f7:50:db:85:06: fe:f4:b5:5e:21:6e:21:b8:33:ed:cf:8e:d3:fd:2f: 61:33:a3:1c:ac:b6:c1:00:1c:51:a6:80:c8:e9:0a: db:a9:fb:33:06:7c:1d:b2:16:41:5a:c2:ac:34:17: 5d:cf:0a:62:f8:b6:b4:64:29:5e:10:9c:ba:66:f0: 7a:ff:3f:1b:25:5a:a6:a0:38:16:d4:f3:d5:9e:98: 1b:1b:70:4e:c0:a0:30:26:19:95:66:d7:16:e1:cf: 6b:f5:35:10:12:e3:e6:82:b6:a5:26:19:a4:9f:d1: b0:9e:fe:2b:ab:ca:9d:bc:8d:73:2a:5b:7f:c6:ea: a2:4c:6e:d9:89:fc:37:1f:df:71:8c:b6:58:a2:e0: 9e:7f:cd:2c:82:40:b4:93:32:fc:ed:bf:6b:44:db: 42:72:cb:2a:1c:b9:6d:92:e1:50:e5:89:0f:b6:4f: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.231.0/24 195.114.106.0/23 IPv6: 2001:67c:3e8::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39358 Signature Algorithm: sha256WithRSAEncryption 39:42:a7:16:7e:74:fa:44:21:4d:ed:28:28:9e:6d:91:eb:45: 10:3e:5e:9d:c4:16:dd:30:fb:40:f6:b0:c5:22:eb:c8:58:33: b5:c9:58:eb:74:a9:7d:90:00:72:62:eb:1f:21:80:fc:42:d5: d6:c3:a1:a8:fa:60:d4:77:8a:b7:1b:0e:8f:42:af:d1:8c:8c: f3:cf:b1:3a:57:7a:ff:f9:34:b8:5d:55:35:8c:a9:ef:23:de: f8:5a:04:58:d0:e3:f6:b9:99:6e:47:f8:91:17:89:a9:2f:86: 34:88:d4:a0:45:24:86:bf:58:b4:c2:a4:be:40:7c:e2:a0:fe: 47:a6:3e:70:ca:42:a8:f8:bd:69:a6:c3:46:bf:a7:39:bd:c1: bf:f9:84:80:ef:83:68:d9:d5:35:f3:33:7a:a6:0e:ed:7d:bc: ba:9b:8b:a9:28:de:61:2d:6e:68:39:0e:f7:5b:b3:c8:4c:49: 01:21:d5:ec:6f:0a:f0:72:e1:c3:74:89:d4:af:ba:9e:96:24: 47:7b:42:d7:14:f8:44:f9:91:3b:a9:5a:d6:b6:4a:1c:f5:50: 2f:c6:a9:be:be:20:5b:bf:18:7b:a9:34:66:07:d4:74:08:74: 6f:71:0b:fe:b3:b7:5e:92:fb:2d:9b:77:dd:05:fe:5e:95:ea: 24:95:9e:9b -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt7pOvKxkIVNwgD8WQiUrtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGM1ZjFkMTc3OWViNzA5MDkwMzY1ZGI5ODI5MTdhZGZkMGY4MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4CY1KFAEZCT5lhAKqBr1UOKpFXN WkBFJpInYft+4PJEAhkYbEEapP1OoP8x7WfBqFpKJ4sPlpLQb+oht9WIdKhDXI38 A8TKjEmKLodi+pxNj+Fg91DbhQb+9LVeIW4huDPtz47T/S9hM6McrLbBABxRpoDI 6QrbqfszBnwdshZBWsKsNBddzwpi+La0ZCleEJy6ZvB6/z8bJVqmoDgW1PPVnpgb G3BOwKAwJhmVZtcW4c9r9TUQEuPmgralJhmkn9Gwnv4rq8qdvI1zKlt/xuqiTG7Z ifw3H99xjLZYouCef80sgkC0kzL87b9rRNtCcssqHLltkuFQ5YkPtk/WtQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFATF8dF3nrcJCQNl25gpF639D4BJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzcwYjMz Yi1kMWViLTRiYmItOTdkNi0wNTkyNDUzZGY3ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNzBiMzNi LWQxZWItNGJiYi05N2Q2LTA1OTI0NTNkZjdkMi8xL0JNWHgwWGVldHdrSkEyWGJt Q2tYcmYwUGdFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwn7nAwQBw3JqMA8EAgACMAkDBwEgAQZ8A+gw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJm+MA0GCSqGSIb3DQEBCwUAA4IBAQA5 QqcWfnT6RCFN7Sgonm2R60UQPl6dxBbdMPtA9rDFIuvIWDO1yVjrdKl9kAByYusf IYD8QtXWw6Go+mDUd4q3Gw6PQq/RjIzzz7E6V3r/+TS4XVU1jKnvI974WgRY0OP2 uZluR/iRF4mpL4Y0iNSgRSSGv1i0wqS+QHzioP5Hpj5wykKo+L1ppsNGv6c5vcG/ +YSA74No2dU18zN6pg7tfby6m4upKN5hLW5oOQ73W7PITEkBIdXsbwrwcuHDdInU r7qeliRHe0LXFPhE+ZE7qVrWtkoc9VAvxqm+viBbvxh7qTRmB9R0CHRvcQv+s7de kvstm3fdBf5eleoklZ6b -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:33 2026 by rpki-client