This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer File: BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer (raw, json) Hash identifier: bbDUCOInEER7sgK75q/tqT7x1CpnTYqJpdTVdknFMZM= Subject key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F826B5A4BB522ECA26066C0DDA932FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59445 IP: 5.144.80.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:6b:5a:4b:b5:22:ec:a2:60:66:c0:dd:a9:32:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=052b864969e9680764899015e163ece77bb4cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:bc:8e:83:e2:97:3e:80:3f:01:e7:4c:d5: 9c:24:e4:f2:a2:c8:f4:c6:99:86:b9:09:07:cf:7f: ac:3e:2f:5c:b6:e5:bc:2e:cc:ae:97:44:f8:b3:be: f6:1f:e5:52:3e:8c:68:84:91:10:bb:60:81:87:bd: 56:49:9c:1d:95:3b:ca:b7:0c:83:70:38:bb:1f:25: 05:6c:d0:68:c0:d1:69:20:cf:df:e6:14:24:ad:4e: 9d:89:fa:22:a1:96:f9:72:ab:83:00:bd:04:a9:75: c0:72:9c:ef:b8:7f:e5:b4:a6:09:6b:f0:e2:9b:fe: 40:53:4c:27:b9:ce:af:58:9e:ce:71:d0:09:27:22: 6b:b2:4b:ef:53:61:7a:27:d0:29:ef:83:46:40:0d: a6:fb:ab:f9:24:ad:ff:9c:51:30:0c:84:f1:6b:21: b9:bb:98:00:78:a5:b1:08:38:27:49:d0:39:c8:f7: ec:ad:0a:f9:7e:cf:b5:c0:ea:e6:a4:f7:21:0a:88: f5:a2:f1:c4:3c:f4:4e:0e:fa:32:8e:75:34:1f:9b: 8b:3b:3e:2f:d3:83:9b:89:e8:68:6f:af:22:b7:31: a5:8f:3e:cf:d4:07:97:19:cb:5b:73:03:d1:c5:18: d0:f6:f9:dd:09:b5:6f:b5:bc:0d:75:d3:0f:0d:eb: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59445 Signature Algorithm: sha256WithRSAEncryption 25:3d:3c:67:ac:45:f2:7d:0c:17:07:69:d7:9a:94:93:4c:cb: d4:77:c8:b0:26:b5:21:d0:7d:92:2b:ba:1d:9d:d0:4c:0d:63: 3a:bd:77:16:06:01:29:a6:73:bb:b4:ca:97:17:a7:0a:fb:a6: 0d:6b:45:db:7e:46:7c:15:36:25:f7:1b:a7:e8:60:8b:3b:8e: 7c:fb:30:b2:10:4c:e5:7f:a7:9f:a1:bc:ba:eb:67:13:a8:c3: 2b:65:3c:b2:39:f8:05:0b:93:88:0d:e9:3e:7a:3d:73:60:d2: af:d7:9f:b2:a7:6b:a5:6b:2e:43:39:8a:ab:59:a0:45:6b:44: 49:38:34:d7:d7:ca:bc:69:72:1d:7c:72:a3:9d:94:c4:36:d4: 82:49:48:96:a0:48:4b:bd:5f:50:a1:97:ad:50:06:cc:b3:0b: 30:e1:6c:28:75:72:7f:34:ea:78:01:8e:25:28:3e:38:66:02: 76:3f:7b:d5:df:b7:24:98:a8:90:84:e7:8b:e0:07:9a:94:34: b9:7f:79:6a:90:23:80:44:29:10:d8:e8:b7:b2:9a:cf:f1:44: 9b:04:0f:64:7c:97:f5:44:95:6b:99:95:2e:2a:db:5b:49:e4: fb:cb:cc:92:db:c9:d8:fa:11:3c:c9:ab:03:88:6a:c7:d3:ec: 33:c8:f4:25 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gmtaS7Ui7KJgZsDdqTL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTJiODY0OTY5ZTk2ODA3NjQ4OTkwMTVlMTYzZWNlNzdiYjRjYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAa8joPilz6APwHnTNWcJOTyosj0 xpmGuQkHz3+sPi9ctuW8Lsyul0T4s772H+VSPoxohJEQu2CBh71WSZwdlTvKtwyD cDi7HyUFbNBowNFpIM/f5hQkrU6difoioZb5cquDAL0EqXXAcpzvuH/ltKYJa/Di m/5AU0wnuc6vWJ7OcdAJJyJrskvvU2F6J9Ap74NGQA2m+6v5JK3/nFEwDITxayG5 u5gAeKWxCDgnSdA5yPfsrQr5fs+1wOrmpPchCoj1ovHEPPRODvoyjnU0H5uLOz4v 04Obiehob68itzGljz7P1AeXGctbcwPRxRjQ9vndCbVvtbwNddMPDevy8QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAUrhklp6WgHZImQFeFj7Od7tMt2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzQ3NTlm OS03ZmRmLTQ5MTYtYTk5NS02OTcwZWNkOWE2MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvNDc1OWY5 LTdmZGYtNDkxNi1hOTk1LTY5NzBlY2Q5YTYxMC8xL0JTdUdTV25wYUFka2laQVY0 V1BzNTN1MHkzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEBZBQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDoNTANBgkqhkiG9w0BAQsFAAOCAQEAJT08Z6xF8n0MFwdp15qUk0zL1HfIsCa1 IdB9kiu6HZ3QTA1jOr13FgYBKaZzu7TKlxenCvumDWtF235GfBU2Jfcbp+hgizuO fPswshBM5X+nn6G8uutnE6jDK2U8sjn4BQuTiA3pPno9c2DSr9efsqdrpWsuQzmK q1mgRWtESTg019fKvGlyHXxyo52UxDbUgklIlqBIS71fUKGXrVAGzLMLMOFsKHVy fzTqeAGOJSg+OGYCdj971d+3JJiokITni+AHmpQ0uX95apAjgEQpENjot7Kaz/FE mwQPZHyX9USVa5mVLirbW0nk+8vMktvJ2PoRPMmrA4hqx9PsM8j0JQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:49:41 2026 by rpki-client