This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer File: Be02xlZG2ssRSqcsG7y3QYG3_0M.cer (raw, json) Hash identifier: TOBY7ynqgtQSNjNlEJ6RxCIfK/ZgyDtuNNLElxLmKTg= Subject key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F156A5247FA105AF811723BBA5BF4CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20705 IP: 91.214.4.0/22 IP: 193.108.72.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6a:52:47:fa:10:5a:f8:11:72:3b:ba:5b:f4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:47:f9:df:c6:36:6a:89:12:9d:1e:db:5d: 2f:fc:d8:f8:0d:ce:08:1f:b7:c5:06:d5:8a:15:6b: 50:ec:65:62:4b:a6:17:0a:1d:c5:c8:65:fc:e8:1b: 01:20:66:6d:c4:94:0b:e2:c0:73:1c:7f:2c:ab:ea: 60:73:a7:79:a8:75:0e:32:a0:21:b4:8d:dd:b9:55: cb:a8:db:cd:86:76:f9:72:10:75:28:d1:e0:8d:09: 5c:d7:7d:4d:f0:02:fd:e1:4c:9e:7d:a2:e4:a7:e8: 13:be:59:a7:8a:9b:ea:96:c5:eb:5b:aa:ae:6c:75: 4b:d3:69:61:9c:6d:22:62:f4:ba:eb:44:9d:c5:bd: 1d:01:9c:bf:16:c2:67:b7:0f:30:32:a4:26:6e:44: 4f:eb:e0:54:8d:b2:3b:7a:a5:a2:c3:77:95:24:f2: 4c:6f:21:4c:c3:60:12:4f:3b:6b:14:9d:44:2a:86: 95:21:0a:09:03:a2:c3:88:4e:5c:71:1c:17:aa:fa: 4e:6c:f9:42:99:75:b6:6c:37:7a:69:54:e7:75:a4: 26:23:d9:ce:1b:0f:dc:52:d1:bb:3a:1a:75:c4:49: 92:7e:92:4b:38:41:e1:d0:5f:b1:21:ca:44:47:cc: 18:33:cc:e2:c8:86:43:46:41:74:4b:77:8e:e2:87: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.4.0/22 193.108.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20705 Signature Algorithm: sha256WithRSAEncryption 59:d7:c8:d1:9c:1e:a7:4e:49:9e:26:58:b4:ac:b9:85:55:b3: 6a:9e:46:29:7a:d9:27:c9:9a:0a:ca:c0:e5:40:4d:db:77:23: df:4a:c1:0f:b3:5d:93:c8:f8:c2:71:3f:ed:7c:43:01:cd:61: 6d:22:bd:d6:85:a8:fd:7d:42:63:fa:1e:b4:d3:84:d8:85:bf: 54:40:89:b2:e3:99:8e:d9:f6:c8:ed:7e:1a:b4:81:d8:03:76: d6:6c:4c:1c:07:a0:f5:77:3f:e5:7b:fe:75:22:91:5f:f4:87: 3f:c7:35:85:84:cc:f5:4d:1c:b9:b9:23:1c:83:e4:fb:71:53: 37:88:c0:3f:5b:05:e3:b3:b0:8c:de:bf:3c:de:5e:68:f0:82: 89:e8:24:8e:01:7a:9f:9d:ee:b1:61:c2:7e:75:81:59:19:74: 24:4a:2a:cc:13:13:b4:eb:46:c9:97:7b:21:48:33:90:fe:44: 66:0b:2c:da:c5:61:be:ee:3b:00:8b:3a:b8:e8:a8:05:a3:4b: 58:83:2c:6e:f7:7a:42:91:9f:6d:34:c1:28:7f:ca:13:34:7c: ae:4f:0e:7f:af:64:58:e5:85:a9:a4:6b:0a:55:df:26:a4:d7: e1:f0:b8:b9:5d:4a:2e:82:73:e9:cb:07:f7:10:c4:a1:82:3f: dd:25:b7:74 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/FWpSR/oQWvgRcju6W/TMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWVkMzZjNjU2NDZkYWNiMTE0YWE3MmMxYmJjYjc0MTgxYjdmZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMJH+d/GNmqJEp0e210v/Nj4Dc4I H7fFBtWKFWtQ7GViS6YXCh3FyGX86BsBIGZtxJQL4sBzHH8sq+pgc6d5qHUOMqAh tI3duVXLqNvNhnb5chB1KNHgjQlc131N8AL94UyefaLkp+gTvlmnipvqlsXrW6qu bHVL02lhnG0iYvS660Sdxb0dAZy/FsJntw8wMqQmbkRP6+BUjbI7eqWiw3eVJPJM byFMw2ASTztrFJ1EKoaVIQoJA6LDiE5ccRwXqvpObPlCmXW2bDd6aVTndaQmI9nO Gw/cUtG7Ohp1xEmSfpJLOEHh0F+xIcpER8wYM8ziyIZDRkF0S3eO4oeBpwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAXtNsZWRtrLEUqnLBu8t0GBt/9DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2U5NTgy Mi0xODEzLTQ5NTgtYmY2NC04ZGRkYjljMzRkOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZTk1ODIy LTE4MTMtNDk1OC1iZjY0LThkZGRiOWMzNGQ5Ny8xL0JlMDJ4bFpHMnNzUlNxY3NH N3kzUVlHM18wTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9YEAwQDwWxIMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAlDhMA0GCSqGSIb3DQEBCwUAA4IBAQBZ18jRnB6nTkmeJli0rLmFVbNq nkYpetknyZoKysDlQE3bdyPfSsEPs12TyPjCcT/tfEMBzWFtIr3Whaj9fUJj+h60 04TYhb9UQImy45mO2fbI7X4atIHYA3bWbEwcB6D1dz/le/51IpFf9Ic/xzWFhMz1 TRy5uSMcg+T7cVM3iMA/WwXjs7CM3r883l5o8IKJ6CSOAXqfne6xYcJ+dYFZGXQk SirMExO060bJl3shSDOQ/kRmCyzaxWG+7jsAizq46KgFo0tYgyxu93pCkZ9tNMEo f8oTNHyuTw5/r2RY5YWppGsKVd8mpNfh8Li5XUougnPpywf3EMShgj/dJbd0 -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:11 2026 by rpki-client