This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer File: BqTXfcLhnm-WAydMCSOmGordtJY.cer (raw, json) Hash identifier: 9XnY5dA08a2ThTzTFXqz0eqim/WW+VnyAlX8X608/D4= Subject key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB3EBE8CD0802FBBB8529A1CBDF0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.163.4.0/24 IP: 2a05:39c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b3:eb:e8:cd:08:02:fb:bb:85:29:a1:cb:df:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:9b:e6:34:ae:44:b0:0d:f4:88:7e:d3:1a: 6e:a1:c9:fc:bc:72:92:b2:ab:2f:b8:2c:c8:34:23: e2:93:a2:00:58:28:5b:f2:9b:43:30:4c:cf:27:24: 52:44:bb:03:a9:ed:4e:9f:8f:e8:70:4f:cd:e4:e3: 8c:8e:e2:44:a4:f3:05:a2:a2:db:e1:2a:bd:7f:e0: 8b:cf:32:53:7a:2d:18:8f:a6:65:9e:00:cb:cc:52: e1:9c:92:be:35:0d:e7:85:82:76:22:2f:39:0c:d8: 3e:13:da:28:9e:e0:c5:83:a7:a3:fb:3c:aa:e5:5c: 91:2f:91:80:6b:a5:f6:ec:ba:3c:40:f0:1e:f6:5d: d8:1d:5e:3d:b9:48:15:3c:82:20:6f:53:dd:ea:4e: d7:ba:3c:0f:32:6e:30:2d:12:b5:cc:c0:96:1b:d7: 04:98:c3:f3:60:83:d0:e7:4a:cd:6f:a6:a0:b0:44: 32:ec:50:14:da:88:53:c6:14:d0:93:8f:8a:48:48: 8e:99:82:9f:43:68:e4:43:1f:9a:96:50:5c:d7:30: 7a:98:a1:e9:4d:2c:79:2b:b9:e1:42:c9:95:48:6a: de:62:3c:87:aa:79:b9:b2:ec:ae:bf:ee:80:48:39: 57:77:17:7d:81:1f:d6:7c:2d:c5:81:58:53:b8:8d: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.4.0/24 IPv6: 2a05:39c0::/29 Signature Algorithm: sha256WithRSAEncryption 04:3c:30:17:86:13:b7:f6:dd:d8:87:8b:2c:e5:ac:30:33:34: ec:f7:fb:1f:cb:af:01:a6:f5:69:87:3d:80:a2:f5:57:2b:0a: 15:b5:73:e6:6f:bf:d4:d7:d2:78:b5:c6:d6:5f:ea:e7:f2:ab: cd:67:c4:78:8d:e4:9b:85:9f:ad:05:3b:72:4c:23:00:79:40: 05:e4:03:6d:50:d2:88:41:31:43:30:e4:9c:44:ea:b0:e0:c7: 7c:41:9d:a2:b4:95:f2:9c:cb:a9:af:10:25:a8:09:36:6b:76: 36:98:dd:e8:d9:e0:ab:b4:d5:82:7e:86:20:85:9c:e1:0d:da: 2f:30:cf:e6:eb:c1:99:06:22:60:f0:73:90:f2:9a:b4:8e:d1: 63:d0:1f:f6:11:ce:66:0f:7e:14:44:b3:31:63:e2:7d:3a:df: fb:4e:0d:c8:f4:28:d0:f0:a9:59:55:ad:f8:a8:69:f0:0a:73: f7:4b:73:4a:9a:a8:37:e7:0b:d9:29:3e:6b:f2:15:40:72:fb: 42:66:4c:5e:4e:96:21:3f:b3:2b:2f:ff:a5:76:41:56:6f:a6: 27:d3:84:11:5f:9f:b4:0f:4d:3f:89:8d:4a:1a:01:76:a7:4a: d7:9c:4b:57:e3:66:d5:da:e2:ac:cf:06:70:b1:e3:a0:4e:bf: d2:32:44:a1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XLPr6M0IAvu7hSmhy98OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE0ZDc3ZGMyZTE5ZTZmOTYwMzI3NGMwOTIzYTYxYThhZGRiNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+b5jSuRLAN9Ih+0xpuocn8vHKS sqsvuCzINCPik6IAWChb8ptDMEzPJyRSRLsDqe1On4/ocE/N5OOMjuJEpPMFoqLb 4Sq9f+CLzzJTei0Yj6ZlngDLzFLhnJK+NQ3nhYJ2Ii85DNg+E9oonuDFg6ej+zyq 5VyRL5GAa6X27Lo8QPAe9l3YHV49uUgVPIIgb1Pd6k7XujwPMm4wLRK1zMCWG9cE mMPzYIPQ50rNb6agsEQy7FAU2ohTxhTQk4+KSEiOmYKfQ2jkQx+allBc1zB6mKHp TSx5K7nhQsmVSGreYjyHqnm5suyuv+6ASDlXdxd9gR/WfC3FgVhTuI3nxQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAak133C4Z5vlgMnTAkjphqK3bSWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2QzYjU0 Mi02ZjIxLTRkYzgtOWU2Zi00NDkyZDlmMmY0MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDNiNTQy LTZmMjEtNGRjOC05ZTZmLTQ0OTJkOWYyZjQzOC8xL0JxVFhmY0xobm0tV0F5ZE1D U09tR29yZHRKWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaMEMA0EAgACMAcDBQMqBTnAMA0GCSqGSIb3 DQEBCwUAA4IBAQAEPDAXhhO39t3Yh4ss5awwMzTs9/sfy68BpvVphz2AovVXKwoV tXPmb7/U19J4tcbWX+rn8qvNZ8R4jeSbhZ+tBTtyTCMAeUAF5ANtUNKIQTFDMOSc ROqw4Md8QZ2itJXynMuprxAlqAk2a3Y2mN3o2eCrtNWCfoYghZzhDdovMM/m68GZ BiJg8HOQ8pq0jtFj0B/2Ec5mD34URLMxY+J9Ot/7Tg3I9CjQ8KlZVa34qGnwCnP3 S3NKmqg35wvZKT5r8hVAcvtCZkxeTpYhP7MrL/+ldkFWb6Yn04QRX5+0D00/iY1K GgF2p0rXnEtX42bV2uKszwZwseOgTr/SMkSh -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:56 2026 by rpki-client