This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer File: BpML6MTKaQDu2y8yYNXdeFBXASk.cer (raw, json) Hash identifier: rWg0bKlkF8Wmq695k2q64bRlxcNCG6505ESO+Q4/j8M= Subject key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153BEEC6D04F14BC4A9350A58F7BA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216329 IP: 86.104.181.0/24 IP: 185.97.213.0/24 IP: 2a13:d740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:ee:c6:d0:4f:14:bc:4a:93:50:a5:8f:7b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06930be8c4ca6900eedb2f3260d5dd7850570129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:f8:3b:9b:fc:31:2b:c9:29:68:cc:4e:90: 6d:69:db:2a:08:7f:f8:97:16:2c:70:1a:b1:cd:a1: 4a:6b:0f:4f:d5:e1:99:f2:15:dc:0c:c7:33:7e:05: 9f:ff:e9:64:86:09:46:8e:8b:42:36:ce:45:79:e9: 76:56:e4:72:94:5e:84:58:85:b3:bf:4d:7c:d6:27: 8c:ba:5f:13:fa:d3:73:a3:19:39:f1:ce:4d:b7:8f: ba:b3:fa:f6:28:11:39:d7:c1:70:d1:c2:83:96:aa: 80:68:da:03:76:54:a2:64:39:87:22:c9:90:c4:29: 00:e2:ae:cf:48:65:55:88:78:37:39:ed:7c:10:3e: 7e:0d:9b:d8:ee:23:99:5e:28:29:0c:20:16:74:d8: af:8b:12:04:0e:81:87:aa:be:db:f2:d1:82:b5:8b: 0b:20:6d:f6:3f:2b:e9:34:53:75:c3:0e:de:2e:4a: 10:b9:14:11:be:b0:54:88:bd:ae:7b:54:5f:0d:9f: 1e:82:c9:45:f0:94:3a:06:7e:c2:af:25:1f:5a:bb: a0:cd:b4:d0:d2:5a:a1:c2:0e:25:19:88:f3:c6:55: 90:1c:f9:8a:df:b9:8b:58:57:7e:11:29:10:01:6a: 3f:82:34:c3:e1:9b:05:73:38:81:fd:9c:bf:68:93: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.181.0/24 185.97.213.0/24 IPv6: 2a13:d740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216329 Signature Algorithm: sha256WithRSAEncryption ae:18:a8:6e:ba:eb:d3:17:c8:d7:b8:e9:b8:e8:ae:13:e1:9b: 01:5f:dd:e7:97:07:46:2f:84:67:83:34:a2:fa:b2:98:29:6a: 3d:7f:70:2e:ae:fe:75:73:65:d8:88:b6:11:23:fd:b7:21:44: 55:5d:a4:73:2e:f5:91:fa:49:be:14:69:29:25:bf:37:9e:e1: d6:52:ad:97:2a:25:11:75:3b:b2:73:75:cf:6b:09:59:40:67: b3:e2:9e:fe:02:a3:c5:0c:27:37:5f:5e:91:b8:b1:59:2d:bb: 0d:07:d0:44:f5:a0:22:1c:ac:2f:4e:8e:ad:8e:91:c9:c6:82: b2:97:cb:ef:92:45:81:9b:fe:a5:78:67:50:eb:6f:2f:82:2c: c0:d5:ea:de:88:e9:ad:6a:cb:8d:7d:96:82:75:5a:0a:5d:fa: b0:e0:4c:7f:d3:62:a3:be:1e:29:a5:60:15:19:ed:9a:78:57: 2e:2f:24:76:75:62:2e:2d:59:bc:47:0e:5e:b8:ee:95:32:38: 38:74:33:95:23:de:8d:ea:f9:52:5a:46:81:6a:47:bf:b2:39: ef:86:ed:41:5b:4b:52:1f:25:c8:a0:60:c0:6e:f1:7b:2c:95: 7a:d8:a4:88:fb:b5:4b:2d:43:bc:29:6b:94:d3:08:bb:80:9e: dd:ca:3a:1f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FTvuxtBPFLxKk1Clj3umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjkzMGJlOGM0Y2E2OTAwZWVkYjJmMzI2MGQ1ZGQ3ODUwNTcwMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWf4O5v8MSvJKWjMTpBtadsqCH/4 lxYscBqxzaFKaw9P1eGZ8hXcDMczfgWf/+lkhglGjotCNs5Feel2VuRylF6EWIWz v0181ieMul8T+tNzoxk58c5Nt4+6s/r2KBE518Fw0cKDlqqAaNoDdlSiZDmHIsmQ xCkA4q7PSGVViHg3Oe18ED5+DZvY7iOZXigpDCAWdNivixIEDoGHqr7b8tGCtYsL IG32PyvpNFN1ww7eLkoQuRQRvrBUiL2ue1RfDZ8egslF8JQ6Bn7CryUfWrugzbTQ 0lqhwg4lGYjzxlWQHPmK37mLWFd+ESkQAWo/gjTD4ZsFcziB/Zy/aJPehQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAaTC+jEymkA7tsvMmDV3XhQVwEpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2E2ODUx OC00Mjk1LTQ1MjgtOGVlNi1mYWJhZThkNTZmYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYTY4NTE4 LTQyOTUtNDUyOC04ZWU2LWZhYmFlOGQ1NmZjNi8xL0JwTUw2TVRLYVFEdTJ5OHlZ TlhkZUZCWEFTay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVmi1AwQAuWHVMA0EAgACMAcDBQMqE9dAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNCTANBgkqhkiG9w0BAQsFAAOCAQEArhio brrr0xfI17jpuOiuE+GbAV/d55cHRi+EZ4M0ovqymClqPX9wLq7+dXNl2Ii2ESP9 tyFEVV2kcy71kfpJvhRpKSW/N57h1lKtlyolEXU7snN1z2sJWUBns+Ke/gKjxQwn N19ekbixWS27DQfQRPWgIhysL06OrY6RycaCspfL75JFgZv+pXhnUOtvL4IswNXq 3ojprWrLjX2WgnVaCl36sOBMf9Nio74eKaVgFRntmnhXLi8kdnViLi1ZvEcOXrju lTI4OHQzlSPejer5UlpGgWpHv7I574btQVtLUh8lyKBgwG7xeyyVetikiPu1Sy1D vClrlNMIu4Ce3co6Hw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:04 2026 by rpki-client