This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer File: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer (raw, json) Hash identifier: zF+nPIBEl/+gbJrO4mmnd21UYIZcW+edc+IA6WQ20FM= Subject key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE9F6CA95FAB6EA83792BA7B02E74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6745 AS: 202818 IP: 145.233.0.0/16 IP: 193.240.0.0/16 IP: 195.166.0.0/17 IP: 217.156.128.0/17 IP: 2a07:aa00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e9:f6:ca:95:fa:b6:ea:83:79:2b:a7:b0:2e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:5f:2e:b7:c7:96:33:f5:a5:c2:76:2a:a1: 10:18:ff:aa:2a:6a:26:a7:6f:b2:de:2e:cd:a7:d5: 1e:4a:c1:62:a1:9c:98:1f:f5:ac:43:ed:07:3b:1a: 00:e2:47:af:27:42:a5:df:5f:0c:fb:cf:a0:3b:15: ee:0b:1a:35:d7:b7:97:c0:9a:d7:21:54:b3:d7:60: 3d:0e:cb:d3:ba:57:e0:bc:d7:bb:9b:72:c0:cc:ad: 33:ed:ba:b2:94:9d:68:7b:25:44:cc:16:ad:8c:a3: 87:ce:57:28:96:99:ad:fa:e9:73:2d:94:59:b6:94: 95:77:e4:b3:52:f5:f5:55:bc:5a:bf:d3:08:5b:a1: 2d:2d:da:ec:10:c7:c0:50:4f:18:e0:13:cb:bf:d4: fb:65:13:a7:dc:79:30:20:d5:b8:5a:a0:17:de:43: ad:d1:b2:af:d9:96:8c:04:6d:79:bc:2e:e0:67:32: 6e:e5:5a:01:9a:4d:a6:cd:db:41:b2:fa:06:63:67: 87:73:3e:53:3e:f8:8b:91:7b:02:64:a3:b2:85:2a: be:ed:44:d9:d9:2e:d9:76:c8:31:85:49:f7:ed:48: d4:e6:94:70:32:8b:aa:22:87:a9:bb:92:a3:56:95: 5c:fa:51:f5:1c:3d:44:6e:b6:0a:c2:86:7d:fd:d5: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.233.0.0/16 193.240.0.0/16 195.166.0.0/17 217.156.128.0/17 IPv6: 2a07:aa00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6745 202818 Signature Algorithm: sha256WithRSAEncryption 84:47:73:43:69:e1:54:e4:9e:97:fe:16:39:c4:b5:d7:7c:1e: fe:a0:3d:d3:68:22:43:32:fd:de:1e:79:22:8d:37:d5:9b:54: 30:0e:c6:1a:6f:9e:e1:ab:30:32:bf:2a:9e:79:07:4c:a7:9d: e8:d3:78:8c:99:55:0e:3d:65:ca:68:7e:77:1c:6f:ad:8c:e6: d6:d9:f9:0e:78:b4:04:aa:a8:d4:c7:29:a3:24:a6:96:3f:11: 3c:d2:16:42:7b:a6:f0:3a:2a:cf:24:c7:3e:e4:50:a4:aa:2f: 65:2d:c0:43:b1:78:dc:31:9d:35:21:12:a9:f9:b4:f2:d9:c8: a4:b0:df:30:7f:0c:22:45:96:15:bd:22:aa:09:0a:04:0b:4a: ef:0d:42:b3:18:d7:bf:9f:72:8c:27:ec:fd:cc:f9:d0:31:23: ba:17:fb:1c:49:2e:82:e3:bc:73:48:36:39:ec:39:8b:8a:fd: 7a:5a:73:7e:e2:c4:68:82:ec:3e:ff:bc:ac:50:1b:0f:f4:6f: 2c:3b:78:fd:38:9c:00:c7:23:83:4e:b2:f2:08:1a:1e:66:5d: 1d:24:74:84:7e:e4:40:7c:3e:76:ec:03:f0:1b:75:07:05:7c: c6:a3:1f:31:8a:10:7b:b1:0a:74:78:43:ad:af:58:4e:0e:cb: 07:a0:b8:6c -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt87On2ypX6tuqDeSunsC50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUzYzQzM2Y2YzIyNTAxOWQ5Y2I1YTQzMzAwMTJmNGM3N2ExZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn5fLrfHljP1pcJ2KqEQGP+qKmom p2+y3i7Np9UeSsFioZyYH/WsQ+0HOxoA4kevJ0Kl318M+8+gOxXuCxo117eXwJrX IVSz12A9DsvTulfgvNe7m3LAzK0z7bqylJ1oeyVEzBatjKOHzlcolpmt+ulzLZRZ tpSVd+SzUvX1Vbxav9MIW6EtLdrsEMfAUE8Y4BPLv9T7ZROn3HkwINW4WqAX3kOt 0bKv2ZaMBG15vC7gZzJu5VoBmk2mzdtBsvoGY2eHcz5TPviLkXsCZKOyhSq+7UTZ 2S7ZdsgxhUn37UjU5pRwMouqIoepu5KjVpVc+lH1HD1EbrYKwoZ9/dVo2wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFAVTxDP2wiUBnZy1pDMAEvTHeh8+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzMyNGE5 ZC1jZjA3LTRlNzEtODNhMS0xODI1MTJmOGJjZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMzI0YTlk LWNmMDctNGU3MS04M2ExLTE4MjUxMmY4YmNkZS8xL0JWUEVNX2JDSlFHZG5MV2tN d0FTOU1kNkh6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF BwEHAQH/BC8wLTAcBAIAATAWAwMAkekDAwDB8AMEB8OmAAMEB9mcgDANBAIAAjAH AwUDKgeqADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIaWQIDAxhCMA0GCSqGSIb3 DQEBCwUAA4IBAQCER3NDaeFU5J6X/hY5xLXXfB7+oD3TaCJDMv3eHnkijTfVm1Qw DsYab57hqzAyvyqeeQdMp53o03iMmVUOPWXKaH53HG+tjObW2fkOeLQEqqjUxymj JKaWPxE80hZCe6bwOirPJMc+5FCkqi9lLcBDsXjcMZ01IRKp+bTy2ciksN8wfwwi RZYVvSKqCQoEC0rvDUKzGNe/n3KMJ+z9zPnQMSO6F/scSS6C47xzSDY57DmLiv16 WnN+4sRoguw+/7ysUBsP9G8sO3j9OJwAxyODTrLyCBoeZl0dJHSEfuRAfD527APw G3UHBXzGox8xihB7sQp0eEOtr1hODssHoLhs -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:42 2026 by rpki-client