This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer File: BjDTqdwDknrlWoHYbKkb3J7nTHM.cer (raw, json) Hash identifier: AkXuYwQB6Xp1t1W652QM7ni7syS44gPtwkoLy1EPn9c= Subject key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32ABB6113AED53141EB5701B0D636 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49262 IP: 185.107.236.0/24 IP: 2a06:1140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2a:bb:61:13:ae:d5:31:41:eb:57:01:b0:d6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:5f:d3:3b:b7:ad:cb:e0:7b:cd:71:c8:5d: df:e5:78:ee:7c:e3:e9:9f:bf:80:4c:a5:98:59:0a: 9a:13:bf:2a:84:d5:23:c8:7e:30:dc:94:97:2f:19: 72:2a:b4:d8:40:a0:4a:17:66:86:86:3f:0e:f8:11: a0:5a:ab:32:b2:73:59:15:54:27:38:5b:a3:71:64: 31:dc:ac:6f:10:4b:d2:de:14:0e:2e:63:d5:16:9e: d5:a5:7b:5c:5a:58:ff:3f:9c:5a:82:8b:bb:11:0c: dc:89:99:66:e6:a9:79:25:45:07:0d:b0:a0:96:3b: 46:30:96:ce:37:91:d8:4e:b5:ad:86:17:9f:10:a3: 99:2b:ab:94:21:67:69:16:3a:2d:6a:c1:51:f7:f9: 9b:cc:e1:0d:85:8e:41:e5:57:6b:76:23:fb:38:46: e6:b2:f0:0b:c8:7e:4f:89:7b:15:5e:f7:78:65:8b: a2:e5:a9:50:9a:a6:42:c7:37:73:eb:29:21:21:19: fa:ae:f5:ad:34:a6:cc:a4:a6:51:b5:8e:1c:3d:a4: 3f:c3:af:ec:b3:4a:64:05:f5:43:76:53:fc:63:3f: 1d:d4:1f:b6:29:49:78:a7:ec:e3:c1:cb:5b:90:90: dd:92:2e:2d:69:60:22:f0:27:e1:a6:bb:c6:be:c6: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.236.0/24 IPv6: 2a06:1140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49262 Signature Algorithm: sha256WithRSAEncryption 1a:eb:1d:d6:e6:1f:0f:44:91:39:f3:19:db:05:58:b2:74:12: aa:2d:8a:d5:4b:5d:84:58:3d:3f:9f:33:ca:25:2a:0a:23:0c: 0c:33:a7:f5:50:fd:78:7f:e3:33:48:14:d4:90:d0:d9:e9:88: 9e:94:81:79:31:4f:4a:ab:63:fe:ac:e4:13:e0:2f:13:3c:d7: ee:a0:9a:e8:f8:d5:87:21:bf:90:87:89:47:6f:9d:2d:2c:11: 62:e8:e0:a5:89:45:3e:39:bc:20:11:49:46:fe:c3:fa:08:8c: b1:06:6d:38:87:45:8f:1f:5f:e5:36:1e:04:7e:4a:dd:fc:6c: 22:33:ac:02:7e:6e:ba:6e:53:b9:ee:92:e4:63:e4:9e:01:03: 52:89:04:a3:8a:a8:f5:7f:16:78:53:04:4b:b2:f9:ae:70:76: 73:fe:0a:bf:16:60:ce:d8:b8:99:35:de:80:14:36:b1:f7:9f: 8c:3b:f8:66:4d:c6:d1:ed:fd:e9:c3:e9:60:5b:06:3b:d2:6b: 7c:35:7d:0e:68:0e:d4:63:2d:ef:d3:43:41:68:93:6a:59:08: e1:a1:20:ed:00:2a:0f:f2:0d:09:d2:2d:d1:70:1f:a9:81:cc: 7a:5b:21:fe:ed:2e:95:c2:c5:31:1d:f4:62:1f:9f:1a:96:33: a4:30:39:e1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7oyq7YROu1TFB61cBsNY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjMwZDNhOWRjMDM5MjdhZTU1YTgxZDg2Y2E5MWJkYzllZTc0YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5f0zu3rcvge81xyF3f5XjufOPp n7+ATKWYWQqaE78qhNUjyH4w3JSXLxlyKrTYQKBKF2aGhj8O+BGgWqsysnNZFVQn OFujcWQx3KxvEEvS3hQOLmPVFp7VpXtcWlj/P5xagou7EQzciZlm5ql5JUUHDbCg ljtGMJbON5HYTrWthhefEKOZK6uUIWdpFjotasFR9/mbzOENhY5B5VdrdiP7OEbm svALyH5PiXsVXvd4ZYui5alQmqZCxzdz6ykhIRn6rvWtNKbMpKZRtY4cPaQ/w6/s s0pkBfVDdlP8Yz8d1B+2KUl4p+zjwctbkJDdki4taWAi8CfhprvGvsYo/wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAYw06ncA5J65VqB2GypG9ye50xzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzBlOGQ3 My01OWRhLTQzNGUtOTlmYi1jM2Y0ZDExMjc0ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMGU4ZDcz LTU5ZGEtNDM0ZS05OWZiLWMzZjRkMTEyNzRkNC8xL0JqRFRxZHdEa25ybFdvSFli S2tiM0o3blRITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuWvsMA0EAgACMAcDBQMqBhFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAbjANBgkqhkiG9w0BAQsFAAOCAQEAGusd1uYfD0SR OfMZ2wVYsnQSqi2K1UtdhFg9P58zyiUqCiMMDDOn9VD9eH/jM0gU1JDQ2emInpSB eTFPSqtj/qzkE+AvEzzX7qCa6PjVhyG/kIeJR2+dLSwRYujgpYlFPjm8IBFJRv7D +giMsQZtOIdFjx9f5TYeBH5K3fxsIjOsAn5uum5Tue6S5GPkngEDUokEo4qo9X8W eFMES7L5rnB2c/4KvxZgzti4mTXegBQ2sfefjDv4Zk3G0e396cPpYFsGO9JrfDV9 DmgO1GMt79NDQWiTalkI4aEg7QAqD/INCdIt0XAfqYHMelsh/u0ulcLFMR30Yh+f GpYzpDA54Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:49 2026 by rpki-client