This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer File: BjcCShgkPkX40Eqtrr66kKVp6IM.cer (raw, json) Hash identifier: YhNRqXX6deBcsc3JnYggDxN18k+3vhjwl5zMHyptwZg= Subject key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3581185B9DD447079077AA18260CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197552 IP: 91.218.164.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:58:11:85:b9:dd:44:70:79:07:7a:a1:82:60:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0637024a18243e45f8d04aadaebeba90a569e883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:51:cc:30:58:5b:a8:02:64:2e:2e:21:11: c5:42:4d:48:a1:c3:f0:f8:a9:be:6e:6a:1a:58:79: cf:71:3f:e5:c7:a9:cd:13:67:69:13:bf:ab:55:b8: 3f:39:6a:b5:8d:63:77:3f:6a:bd:7a:eb:a6:cf:52: 04:54:7e:47:1a:ee:ed:2d:5d:11:cc:cc:fc:ee:27: 64:ad:a7:65:81:8d:88:5f:7f:7b:06:c2:49:fb:f7: d4:a6:de:5e:d9:70:fa:9d:a7:d7:c2:ef:46:2a:16: 66:84:17:ac:40:ba:65:23:8d:e8:dd:6e:dd:00:ec: 59:60:45:0f:f6:0f:1a:0c:d0:80:c2:8d:68:e3:8f: dc:ac:33:41:f0:ba:16:36:3f:2d:54:ce:3e:cd:4e: 52:4c:c9:d7:58:b9:43:88:4e:24:2e:65:dc:78:fd: 0a:b4:57:94:f5:2d:f4:0a:c6:be:ad:2c:d0:cf:27: 8e:95:1f:17:b3:3e:ba:25:8d:eb:8d:a1:c3:33:b8: d7:6f:d9:97:c7:1f:80:56:51:97:d2:9a:e8:c5:79: 2b:c8:aa:4b:3e:88:43:f4:5a:e9:1a:a0:37:5b:05: 05:47:f1:bd:bb:d2:cb:03:dd:cf:52:e6:dc:4d:d6: c1:a3:e2:86:60:9f:05:15:43:f1:a5:dd:62:de:17: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.164.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197552 Signature Algorithm: sha256WithRSAEncryption 54:de:8e:0a:ef:d8:70:f1:dc:ea:a6:8f:00:a1:3d:25:32:5c: 85:e0:cb:6d:fd:a6:8f:e1:cf:c7:92:c6:67:d2:0b:46:b8:b0: 87:dd:fd:67:ee:ad:4c:3c:55:fd:3f:c4:67:b3:db:6f:df:db: 34:4e:7a:70:65:6d:67:61:70:18:18:80:5d:96:85:7d:28:5a: 1f:56:86:b4:67:3e:23:bc:00:94:ff:ed:29:dc:5c:6a:3b:93: 56:59:ab:17:58:61:ee:ea:5b:fa:5e:89:f1:49:45:99:8d:df: ed:75:c4:df:3b:14:44:51:08:6b:c6:29:f1:32:51:70:1a:7c: 1f:39:af:de:c2:6a:f8:2d:b7:3b:cf:32:0b:29:55:c4:53:1a: f6:12:e4:b5:90:5e:6a:50:4e:67:4f:88:60:8c:80:6d:22:ca: bf:09:70:e5:d5:5e:b3:30:be:b4:16:39:eb:1f:55:39:66:d4: a5:f3:6d:d2:cd:e4:15:98:af:76:e7:1a:72:25:8c:e8:9b:b4: 66:4b:c5:dc:e1:da:1c:b2:55:55:e7:a9:dc:db:f8:dd:4d:61: 59:bd:f1:13:b7:41:17:1a:98:9e:0f:1d:52:b4:2b:e9:4c:e5: 15:e4:ed:ce:f7:8f:de:6d:5b:a9:c6:be:cc:ed:20:d2:b9:66: f8:85:76:24 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o1gRhbndRHB5B3qhgmDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjM3MDI0YTE4MjQzZTQ1ZjhkMDRhYWRhZWJlYmE5MGE1NjllODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdBRzDBYW6gCZC4uIRHFQk1IocPw +Km+bmoaWHnPcT/lx6nNE2dpE7+rVbg/OWq1jWN3P2q9euumz1IEVH5HGu7tLV0R zMz87idkradlgY2IX397BsJJ+/fUpt5e2XD6nafXwu9GKhZmhBesQLplI43o3W7d AOxZYEUP9g8aDNCAwo1o44/crDNB8LoWNj8tVM4+zU5STMnXWLlDiE4kLmXceP0K tFeU9S30Csa+rSzQzyeOlR8Xsz66JY3rjaHDM7jXb9mXxx+AVlGX0proxXkryKpL PohD9FrpGqA3WwUFR/G9u9LLA93PUubcTdbBo+KGYJ8FFUPxpd1i3hcLuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAY3AkoYJD5F+NBKra6+upClaeiDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3Lzk3MzBk NC00ZjdkLTQ5NDMtYjlmYi03ZDk0YTk0ZTMzMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvOTczMGQ0 LTRmN2QtNDk0My1iOWZiLTdkOTRhOTRlMzMxMi8xL0JqY0NTaGdrUGtYNDBFcXRy cjY2a0tWcDZJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9qkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDsDANBgkqhkiG9w0BAQsFAAOCAQEAVN6OCu/YcPHc6qaPAKE9JTJcheDLbf2m j+HPx5LGZ9ILRriwh939Z+6tTDxV/T/EZ7Pbb9/bNE56cGVtZ2FwGBiAXZaFfSha H1aGtGc+I7wAlP/tKdxcajuTVlmrF1hh7upb+l6J8UlFmY3f7XXE3zsURFEIa8Yp 8TJRcBp8Hzmv3sJq+C23O88yCylVxFMa9hLktZBealBOZ0+IYIyAbSLKvwlw5dVe szC+tBY56x9VOWbUpfNt0s3kFZivducaciWM6Ju0ZkvF3OHaHLJVVeep3Nv43U1h Wb3xE7dBFxqYng8dUrQr6UzlFeTtzveP3m1bqca+zO0g0rlm+IV2JA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:16 2026 by rpki-client