This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer File: BjJUIiHK72RIzFRSFOAABxvVa4Y.cer (raw, json) Hash identifier: cBqIwxdRRcMDAxy2CGDcp2syEUsgBaiHPs/8UBllW+A= Subject key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79111288AC01686FAC09E209FBB8AFD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.129.192.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:12:88:ac:01:68:6f:ac:09:e2:09:fb:b8:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0632542221caef6448cc545214e000071bd56b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:ba:04:45:38:ea:b3:b3:3e:48:4c:f9:8c: 62:aa:37:9f:33:af:b3:8c:c9:11:c3:9c:d6:cb:af: 41:40:55:96:1e:a2:53:43:1e:70:38:47:1a:4c:44: d0:3b:c8:bb:e9:b1:05:92:42:60:f1:ce:c1:48:19: 10:05:7c:32:ec:a0:70:1b:aa:2f:87:c6:a2:9c:cd: de:09:ac:17:fa:a2:24:ad:5c:8d:a4:e1:0d:44:26: 3c:82:90:27:c6:04:70:44:10:40:94:dc:cb:f4:48: 09:ad:bf:7b:0f:32:78:bf:3b:13:46:7b:4f:58:54: 5e:18:5c:73:f1:79:70:ff:7f:97:46:59:fb:f3:b1: 9a:c6:05:f1:e2:5a:0c:19:9c:aa:d4:96:bf:f5:0f: e5:ba:10:24:b1:1e:e0:98:3d:d0:06:f0:c3:f3:28: 00:76:22:9c:73:6a:b5:0c:f9:08:74:ef:7f:42:04: d1:04:36:3b:81:f1:e8:69:91:8e:5f:78:39:27:3d: bf:0c:16:43:64:99:06:bc:c3:33:2b:27:a4:d4:d9: ff:49:8a:78:3d:b6:03:2c:cc:0f:fa:9b:ad:20:e6: c3:1e:96:60:74:4f:fb:ea:20:2f:ec:1b:ac:56:a2: d9:63:1e:9b:d5:53:d6:cc:a3:7a:53:29:16:82:08: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:e0:df:37:8f:9a:6f:9b:38:36:6c:26:a9:82:67:be:e9:6f: 28:91:98:bd:89:44:72:62:9f:16:ac:cf:73:52:31:91:26:12: 15:58:f8:a0:e2:a3:d8:cc:f3:53:dd:46:5e:96:ca:b5:d8:86: 0b:be:f2:ef:0e:ca:af:ba:4b:20:13:8b:d8:ac:1d:bb:62:63: 38:f4:48:a2:27:30:62:ce:c2:73:1a:39:f8:30:d0:dc:c8:dd: 27:66:1a:b1:c9:e8:23:1e:b8:ff:05:2b:41:95:d5:67:ad:32: 73:8c:46:2f:7b:fe:13:63:c0:9f:6d:e2:69:ad:74:37:95:0f: 96:2d:23:d9:c2:59:26:26:82:fd:26:2d:0e:3d:61:25:4a:e8: a7:c0:f9:a7:1d:9e:69:f7:e0:de:65:1e:fb:0d:fa:fc:27:7a: c4:74:02:06:0f:ce:b1:20:f9:ea:9c:2c:b1:85:3e:bf:26:7b: 68:1a:47:83:ae:67:a1:5a:ea:73:d1:c3:8c:20:f0:35:67:15: 3c:60:c8:9f:90:ec:5f:b8:f0:fa:84:85:36:aa:98:70:71:6c: 9c:03:b7:f7:c8:de:86:f1:20:a8:fe:fd:c1:6b:d0:37:5e:69: 7f:c2:b1:8d:86:c1:b0:f6:9d:ea:b7:da:ce:3e:0b:75:7f:9b: be:b6:63:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ERKIrAFob6wJ4gn7uK/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjMyNTQyMjIxY2FlZjY0NDhjYzU0NTIxNGUwMDAwNzFiZDU2Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd26BEU46rOzPkhM+YxiqjefM6+z jMkRw5zWy69BQFWWHqJTQx5wOEcaTETQO8i76bEFkkJg8c7BSBkQBXwy7KBwG6ov h8ainM3eCawX+qIkrVyNpOENRCY8gpAnxgRwRBBAlNzL9EgJrb97DzJ4vzsTRntP WFReGFxz8Xlw/3+XRln787GaxgXx4loMGZyq1Ja/9Q/luhAksR7gmD3QBvDD8ygA diKcc2q1DPkIdO9/QgTRBDY7gfHoaZGOX3g5Jz2/DBZDZJkGvMMzKyek1Nn/SYp4 PbYDLMwP+putIObDHpZgdE/76iAv7BusVqLZYx6b1VPWzKN6UykWgggk1QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAYyVCIhyu9kSMxUUhTgAAcb1WuGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzZjNWFh MS01ODgwLTQ2NTEtODVhNC1hZmQzYmY2YmM1OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvNmM1YWEx LTU4ODAtNDY1MS04NWE0LWFmZDNiZjZiYzU4Yy8xL0JqSlVJaUhLNzJSSXpGUlNG T0FBQnh2VmE0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFH4HAMA0GCSqGSIb3DQEBCwUAA4IBAQBP4N83 j5pvmzg2bCapgme+6W8okZi9iURyYp8WrM9zUjGRJhIVWPig4qPYzPNT3UZelsq1 2IYLvvLvDsqvuksgE4vYrB27YmM49EiiJzBizsJzGjn4MNDcyN0nZhqxyegjHrj/ BStBldVnrTJzjEYve/4TY8CfbeJprXQ3lQ+WLSPZwlkmJoL9Ji0OPWElSuinwPmn HZ5p9+DeZR77Dfr8J3rEdAIGD86xIPnqnCyxhT6/JntoGkeDrmehWupz0cOMIPA1 ZxU8YMifkOxfuPD6hIU2qphwcWycA7f3yN6G8SCo/v3Ba9A3Xml/wrGNhsGw9p3q t9rOPgt1f5u+tmON -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:15 2026 by rpki-client