This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer (raw, json) Hash identifier: MbjA3R6/rv0emeVNnWKtCUTdIZA/e3uuduibf7Md7vI= Subject key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F822F6D296BD0C50108E5686B61A576 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197190 AS: 212055 AS: 216298 IP: 185.209.216.0/22 IP: 2a0b:5240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2f:6d:29:6b:d0:c5:01:08:e5:68:6b:61:a5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:98:87:21:bd:23:b4:68:d5:0c:eb:81:3c:10: c9:57:49:fe:74:af:87:2f:76:0c:88:53:15:f6:33: c7:7a:d2:e3:10:d5:f1:c5:a6:50:bb:f3:50:0d:40: 30:36:72:05:bb:8b:44:79:73:b3:7c:82:1a:8d:b4: 08:1a:8e:4e:9b:50:ac:b2:9b:cc:d8:9d:57:91:ec: 47:38:f2:b8:95:7e:ec:3d:e8:8c:95:50:6a:58:f9: 6a:5a:3a:18:f1:01:35:9e:6c:6b:a6:e5:57:01:e4: ff:18:db:56:f1:4b:7e:9a:1a:e3:57:b5:c2:70:13: dc:c1:84:83:59:63:61:aa:f0:31:22:b5:bd:60:97: 77:7f:66:66:32:44:76:3b:87:6b:1c:95:6b:d9:7b: 0c:2b:cc:b5:af:2a:dd:73:4e:b5:a6:5f:5f:ff:d3: 0c:c3:03:52:bd:5e:f8:a4:ed:18:5d:b5:73:6b:aa: 37:05:97:f0:8a:8f:5e:5a:2b:46:9d:76:1c:f1:27: 91:86:06:2d:b6:b4:c0:e7:2c:7d:0f:29:f1:77:fd: 05:dc:a7:8a:63:b9:81:94:df:f0:16:9e:8a:48:19: c3:a7:a2:7b:95:c9:10:51:ae:23:d6:71:2d:d0:72: 4c:70:0c:9b:6b:be:92:38:89:ae:e9:ab:61:31:dd: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.216.0/22 IPv6: 2a0b:5240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197190 212055 216298 Signature Algorithm: sha256WithRSAEncryption 02:34:49:99:ed:d3:3b:84:54:f7:94:0f:b7:40:b9:6f:52:bb: a0:40:d8:e5:12:a8:5a:d2:9f:94:3e:76:98:a8:99:25:69:0c: a1:aa:2c:f6:71:e4:6b:00:42:4f:65:03:87:d8:3d:f1:2f:26: 08:e8:7f:7c:4a:56:d2:34:17:a6:c2:0a:50:97:37:e4:b9:4a: cb:09:99:0e:a6:fa:30:b8:d1:4c:f1:de:4a:ae:e5:30:2e:8d: 02:cb:03:3f:5e:29:49:de:5c:ad:3d:02:d9:34:42:7a:0e:ef: 88:7e:28:21:47:10:a4:4b:b6:a4:07:ca:eb:24:63:14:f0:e5: 1f:a7:a7:cc:d1:96:ce:63:9a:92:93:a7:18:40:1a:d3:60:90: 91:f4:4a:d1:f4:20:e1:70:d1:ea:ea:2e:b0:89:57:4d:6b:1e: 95:52:ca:e3:4f:06:1e:a4:1f:5f:a8:13:c0:4c:3c:39:82:44: 54:35:a9:d6:7f:94:e3:6b:03:1f:a0:82:1c:53:35:23:e4:7e: 92:2f:b3:18:78:87:b6:77:32:30:e7:47:dd:61:51:a3:42:b7: b1:cd:bb:87:7c:b2:c2:e8:b7:a0:17:2b:9b:fc:4a:d0:5f:ff: 44:1d:cd:87:a4:71:b2:ec:67:ae:2a:77:59:fe:87:36:4d:a7: 0d:12:a1:a8 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt/gi9tKWvQxQEI5WhrYaV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWRmMWNhM2I2NjVmMjRjYmUxMDFjZmMyZjM4MzQ0ZGE4YjE3NjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZiHIb0jtGjVDOuBPBDJV0n+dK+H L3YMiFMV9jPHetLjENXxxaZQu/NQDUAwNnIFu4tEeXOzfIIajbQIGo5Om1CsspvM 2J1XkexHOPK4lX7sPeiMlVBqWPlqWjoY8QE1nmxrpuVXAeT/GNtW8Ut+mhrjV7XC cBPcwYSDWWNhqvAxIrW9YJd3f2ZmMkR2O4drHJVr2XsMK8y1ryrdc061pl9f/9MM wwNSvV74pO0YXbVza6o3BZfwio9eWitGnXYc8SeRhgYttrTA5yx9Dynxd/0F3KeK Y7mBlN/wFp6KSBnDp6J7lckQUa4j1nEt0HJMcAyba76SOImu6athMd17DQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFAXfHKO2ZfJMvhAc/C84NE2osXaNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzg4ZDNi My04MjU3LTQ3YWEtYTIyNy1kMDJhYWZiODMyYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODhkM2Iz LTgyNTctNDdhYS1hMjI3LWQwMmFhZmI4MzJjNC8xL0JkOGNvN1psOGt5LUVCejhM emcwVGFpeGRvMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudHYMA0EAgACMAcDBQMqC1JAMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwMCRgIDAzxXAgMDTOowDQYJKoZIhvcNAQELBQADggEB AAI0SZnt0zuEVPeUD7dAuW9Su6BA2OUSqFrSn5Q+dpiomSVpDKGqLPZx5GsAQk9l A4fYPfEvJgjof3xKVtI0F6bCClCXN+S5SssJmQ6m+jC40Uzx3kqu5TAujQLLAz9e KUneXK09Atk0QnoO74h+KCFHEKRLtqQHyuskYxTw5R+np8zRls5jmpKTpxhAGtNg kJH0StH0IOFw0erqLrCJV01rHpVSyuNPBh6kH1+oE8BMPDmCRFQ1qdZ/lONrAx+g ghxTNSPkfpIvsxh4h7Z3MjDnR91hUaNCt7HNu4d8ssLot6AXK5v8StBf/0QdzYek cbLsZ64qd1n+hzZNpw0Soag= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:38 2026 by rpki-client