This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer File: BcCcQdI4lrLVQoGCYj-I-mdubJA.cer (raw, json) Hash identifier: 61Ldb9oQQ3+5q/2blaEQXxAjvE7gQHwn+VV47adzdvc= Subject key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8046A0C54480B40FFA2446797E482C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50446 IP: 109.69.184.0/21 IP: 185.73.52.0/22 IP: 2a03:ba80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:46:a0:c5:44:80:b4:0f:fa:24:46:79:7e:48:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c09c41d23896b2d5428182623f88fa676e6c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:ea:75:28:4f:87:5e:a0:8f:02:e5:56:18: b6:d0:e5:bb:b1:2b:36:f3:da:ef:c2:19:d7:0a:c5: 07:b9:7e:9b:bc:86:50:fb:e7:b3:cc:b0:e3:0f:d1: c8:00:bd:49:1f:31:f2:f8:9e:63:d2:cd:e6:c6:79: 5f:44:8c:e6:7f:5b:b8:bd:4b:cf:3c:7f:16:c2:cc: cd:b5:98:7c:16:9f:67:2b:40:2c:26:8d:fa:56:b6: b1:51:35:54:c5:5b:f1:45:14:17:d1:2c:10:d0:3c: 8a:d5:1e:2c:4f:2d:c9:0f:68:f0:6f:a5:35:e5:ac: a7:2b:e9:7f:e2:0e:d7:cd:2d:1f:cd:e8:ef:c8:7e: 02:78:3d:e3:5d:c1:bc:cf:d9:45:4c:1d:b6:31:8d: 82:c5:cd:46:97:b6:5c:f0:bc:43:75:24:91:b7:bf: 11:da:63:1a:33:3e:81:c3:f1:7f:5b:89:d5:82:b0: 90:d5:1d:76:a5:8b:77:92:46:40:34:46:67:8e:a4: 31:c5:87:f2:da:6f:0e:37:e5:e4:e9:95:62:51:5e: cc:31:1a:9b:ba:a0:9c:8c:05:8b:1c:de:7e:84:cf: 7b:01:ed:3d:ad:36:4b:ba:cf:fd:f7:82:bf:83:6c: 5b:26:2c:ee:20:90:bc:1c:04:a0:e0:35:5b:17:94: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.184.0/21 185.73.52.0/22 IPv6: 2a03:ba80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50446 Signature Algorithm: sha256WithRSAEncryption 39:1b:ad:61:0c:4d:bd:d8:34:43:bf:75:ae:f4:f6:bf:61:2a: cc:1e:91:3e:c6:8b:8e:19:bc:0c:1f:03:55:24:05:3c:dd:4a: 6c:8a:3e:3c:f3:ee:21:7f:5f:f6:31:49:50:2f:a1:a6:a1:bf: 00:36:61:90:42:a6:b9:0b:2b:12:bf:d9:b5:27:7d:69:aa:db: 0a:8b:ce:43:5a:d6:5e:86:b6:ce:5c:97:73:e7:e9:d4:bb:e2: 58:3c:89:6f:57:ba:38:b6:f4:9b:d6:b4:54:cc:28:2d:44:f1: c1:45:ed:85:05:da:00:90:a2:6e:6e:a6:eb:cf:5c:00:e9:c2: 01:6d:d1:2f:eb:69:aa:df:3b:8e:28:31:44:f4:2d:5b:68:87: 22:1d:58:77:38:2d:af:b7:83:59:11:ac:0b:5c:c0:20:ae:7e: 40:a1:b7:9d:ba:02:f0:8b:3b:a5:9a:5a:49:7b:eb:ac:b0:b3: b4:41:f2:f0:a1:f4:b3:44:ea:16:5f:45:74:04:53:2f:c0:8c: f1:a4:97:76:63:1e:b9:b5:8b:dd:3c:b9:2b:48:7b:79:03:13: bf:f1:a4:55:42:f8:e8:ad:17:04:d3:7f:f0:d4:65:3c:66:d0: b0:45:77:a0:ec:d9:cf:aa:75:e9:ca:ed:c5:0a:29:c0:e9:5c: 90:75:23:a2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gEagxUSAtA/6JEZ5fkgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWMwOWM0MWQyMzg5NmIyZDU0MjgxODI2MjNmODhmYTY3NmU2YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeHqdShPh16gjwLlVhi20OW7sSs2 89rvwhnXCsUHuX6bvIZQ++ezzLDjD9HIAL1JHzHy+J5j0s3mxnlfRIzmf1u4vUvP PH8WwszNtZh8Fp9nK0AsJo36VraxUTVUxVvxRRQX0SwQ0DyK1R4sTy3JD2jwb6U1 5aynK+l/4g7XzS0fzejvyH4CeD3jXcG8z9lFTB22MY2Cxc1Gl7Zc8LxDdSSRt78R 2mMaMz6Bw/F/W4nVgrCQ1R12pYt3kkZANEZnjqQxxYfy2m8ON+Xk6ZViUV7MMRqb uqCcjAWLHN5+hM97Ae09rTZLus/994K/g2xbJizuIJC8HASg4DVbF5TMhwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAXAnEHSOJay1UKBgmI/iPpnbmyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzk0ZTVm ZC1lMDMzLTRhNWUtYWVmYy1iMzM0NDBhYWFiNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvOTRlNWZk LWUwMzMtNGE1ZS1hZWZjLWIzMzQ0MGFhYWI3Mi8xL0JjQ2NRZEk0bHJMVlFvR0NZ ai1JLW1kdWJKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbUW4AwQCuUk0MA0EAgACMAcDBQAqA7qAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFDjANBgkqhkiG9w0BAQsFAAOCAQEAORut YQxNvdg0Q791rvT2v2EqzB6RPsaLjhm8DB8DVSQFPN1KbIo+PPPuIX9f9jFJUC+h pqG/ADZhkEKmuQsrEr/ZtSd9aarbCovOQ1rWXoa2zlyXc+fp1LviWDyJb1e6OLb0 m9a0VMwoLUTxwUXthQXaAJCibm6m689cAOnCAW3RL+tpqt87jigxRPQtW2iHIh1Y dzgtr7eDWRGsC1zAIK5+QKG3nboC8Is7pZpaSXvrrLCztEHy8KH0s0TqFl9FdART L8CM8aSXdmMeubWL3Ty5K0h7eQMTv/GkVUL46K0XBNN/8NRlPGbQsEV3oOzZz6p1 6crtxQopwOlckHUjog== -----END CERTIFICATE-----Generated at Tue Feb 10 10:12:33 2026 by rpki-client