This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer (raw, json) Hash identifier: zsjxoM7Y96pbsGXNXJDhtZH4a8hWRZwxsVR3vBA1ilE= Subject key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775926AF872DA52D2D85E7DF16711583 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.151.68.0/22 IP: 185.173.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:af:87:2d:a5:2d:2d:85:e7:df:16:71:15:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=054ab196a5b113660d401f806b32be66625afbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:08:a3:8c:62:ef:17:37:5f:42:2e:56:a2: 87:fc:76:c7:53:9c:94:05:f0:8e:74:b2:d5:36:5b: 9a:3e:39:30:f8:a5:3e:8c:ce:36:a2:70:9b:7e:da: a4:64:db:5e:21:d8:3d:f9:56:56:41:61:fa:25:2f: ae:cb:15:12:5d:e2:62:50:41:2b:83:df:49:8f:dd: 44:14:5d:15:ff:e0:99:48:ef:1a:e7:7e:8b:fd:6b: ae:27:5a:e7:91:89:2a:5c:16:9d:5e:fd:82:7e:06: c1:a7:1f:7b:f5:9f:6d:bf:07:04:87:ed:69:e0:21: 70:a9:e6:f2:23:77:43:4b:ef:b2:26:8e:77:9f:da: 7f:18:6d:a9:00:19:7f:64:4e:8a:36:f4:6a:5f:71: d5:26:a5:e7:2b:ea:e4:41:28:1c:1c:b9:2b:e5:ae: f7:4d:b9:54:c6:09:08:8f:b0:ba:b0:f3:bc:26:6f: 95:5f:3f:2e:7d:50:20:ce:fd:9a:36:dd:7e:32:93: 52:6b:2d:10:32:b2:76:c1:bd:7c:5f:89:f9:b7:18: ea:b5:ca:0f:90:81:b6:40:3c:66:84:16:93:80:07: 03:f5:fa:7b:47:8b:4d:02:2d:8e:54:a0:fc:5b:2c: 3e:17:aa:df:19:38:8a:90:8a:e1:18:0a:0d:14:48: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.68.0/22 185.173.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:af:3f:00:55:b2:79:8e:2b:b7:5b:e2:82:55:47:8d:e5:a4: bd:94:4b:a8:30:54:5d:49:ee:1f:a4:54:4b:59:71:e0:03:ab: 65:ff:1c:ad:99:eb:4c:b6:92:ba:32:b6:70:fb:7c:a3:82:0a: 31:c8:3f:ce:28:a6:ac:6e:39:aa:0d:3f:0c:68:fe:42:03:58: 33:5c:ee:ec:fd:e0:a9:69:55:b1:01:b0:ae:11:c3:d7:cc:a5: 0a:b4:68:f5:1c:94:ce:c8:39:cc:93:c0:ba:35:4d:61:a7:e3: 99:d0:2d:71:d3:6b:44:59:37:56:da:1b:01:36:9d:1b:a2:99: 7a:cc:3e:17:f2:b6:c4:ac:64:90:3c:bb:3f:17:a1:1d:e2:2b: 26:0f:b7:a7:fe:53:c9:09:94:cc:57:e8:87:b7:5f:aa:4d:3a: 96:cf:de:83:9f:a7:8f:19:2f:9a:2c:9a:2d:42:8b:fd:19:f0: 50:89:4b:a4:fd:73:ed:d4:2b:b5:c4:12:73:cb:5e:49:ca:56: 87:7c:9b:a2:d1:26:4d:6c:54:19:63:83:0f:e6:3f:f5:b9:0c: be:53:46:9d:c8:ae:63:0d:36:04:65:4b:69:29:7f:f8:bf:b2: 78:61:c9:b9:eb:ad:71:78:f5:78:79:39:bc:bd:50:b5:42:b3: a7:47:2d:6a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3WSavhy2lLS2F598WcRWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTRhYjE5NmE1YjExMzY2MGQ0MDFmODA2YjMyYmU2NjYyNWFmYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztUIo4xi7xc3X0IuVqKH/HbHU5yU BfCOdLLVNluaPjkw+KU+jM42onCbftqkZNteIdg9+VZWQWH6JS+uyxUSXeJiUEEr g99Jj91EFF0V/+CZSO8a536L/WuuJ1rnkYkqXBadXv2CfgbBpx979Z9tvwcEh+1p 4CFwqebyI3dDS++yJo53n9p/GG2pABl/ZE6KNvRqX3HVJqXnK+rkQSgcHLkr5a73 TblUxgkIj7C6sPO8Jm+VXz8ufVAgzv2aNt1+MpNSay0QMrJ2wb18X4n5txjqtcoP kIG2QDxmhBaTgAcD9fp7R4tNAi2OVKD8Wyw+F6rfGTiKkIrhGAoNFEjBKQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFAVKsZalsRNmDUAfgGsyvmZiWvuqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2RjNDUw Zi0xMWE4LTRlOTItYjZlOC1kMmRhNTE3YTk2ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZGM0NTBm LTExYTgtNGU5Mi1iNmU4LWQyZGE1MTdhOTZmZC8xL0JVcXhscVd4RTJZTlFCLUFh ekstWm1KYS02by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLZdEAwQCua2QMA0GCSqGSIb3DQEBCwUAA4IB AQBurz8AVbJ5jiu3W+KCVUeN5aS9lEuoMFRdSe4fpFRLWXHgA6tl/xytmetMtpK6 MrZw+3yjggoxyD/OKKasbjmqDT8MaP5CA1gzXO7s/eCpaVWxAbCuEcPXzKUKtGj1 HJTOyDnMk8C6NU1hp+OZ0C1x02tEWTdW2hsBNp0bopl6zD4X8rbErGSQPLs/F6Ed 4ismD7en/lPJCZTMV+iHt1+qTTqWz96Dn6ePGS+aLJotQov9GfBQiUuk/XPt1Cu1 xBJzy15JylaHfJui0SZNbFQZY4MP5j/1uQy+U0adyK5jDTYEZUtpKX/4v7J4Ycm5 661xePV4eTm8vVC1QrOnRy1q -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:28 2026 by rpki-client