This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer (raw, json) Hash identifier: gRs6r7W1Psz6vZZ9jnIcglwqURREwsOtfu3gKaD2Kdg= Subject key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2C18C5E5ED84F3C8D7CF0EBD2C6AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.217.128.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c1:8c:5e:5e:d8:4f:3c:8d:7c:f0:eb:d2:c6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06a757442e47f82608bef423dac344c25358dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:b8:5b:44:10:f1:fb:72:04:54:ab:d3:34: 2d:8d:90:ca:41:6b:98:b3:e4:d5:4c:c9:27:1d:d6: 20:b4:1e:21:df:3c:79:78:66:d3:bd:76:78:c7:e6: 8e:50:62:80:86:a1:16:56:98:bb:a2:b8:aa:06:09: 69:b1:f1:f5:21:f7:9f:70:34:a0:3c:d7:ed:e4:61: b9:4b:e6:0a:2e:77:79:eb:62:28:87:64:c1:46:ed: 31:10:e8:ee:5e:22:15:05:5f:25:b7:ea:b4:61:33: aa:d7:8b:af:1f:76:92:af:20:53:6d:f7:20:25:c4: 70:ab:90:16:68:51:e6:02:40:7c:1c:63:aa:af:2e: b4:da:94:a5:de:25:80:09:ac:b5:76:a2:e6:61:30: 0c:55:2b:dd:ab:68:4b:1d:4d:52:a8:5f:ac:78:f1: b8:30:5e:44:83:74:23:fe:0c:2a:97:1d:9b:c1:3e: 5a:3c:41:a9:2c:c5:ba:80:50:7c:cc:22:09:1a:3b: 08:aa:cb:f0:f3:d8:42:fb:9a:35:8a:bb:0b:68:21: 5b:f1:86:b5:50:6e:1e:9c:58:2e:a1:60:99:dc:76: 78:bf:bc:3a:5d:09:57:0f:33:f6:f8:2f:bb:34:b9: 7d:1b:0e:15:b3:bc:2a:53:a3:29:dc:eb:1d:94:63: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.128.0/24 Signature Algorithm: sha256WithRSAEncryption 20:bc:e0:0c:a9:5e:12:2f:74:45:b1:96:5d:b5:c2:e5:70:2c: f7:53:52:5c:04:da:87:da:fe:c7:f9:89:fb:88:44:f7:48:08: ab:ed:80:34:ac:59:cf:b4:f1:76:da:01:6c:9c:dd:da:00:02: ca:8e:f4:86:ec:86:53:99:6f:38:bd:f2:32:d9:0d:2f:60:8e: c6:3c:47:c2:c1:16:bc:99:54:0c:d2:e8:b8:60:7f:bc:6e:c0: f9:0a:07:56:b0:bd:f5:e1:22:c5:49:0f:57:91:67:32:1e:eb: 81:06:16:b0:18:dc:f1:f0:ce:92:42:eb:af:66:b2:6e:31:e0: 5a:1c:d0:8e:29:99:ca:da:68:cb:89:b5:69:35:08:26:84:97: 45:fd:6b:bb:bb:ad:c4:2e:47:b3:f5:30:4e:6b:71:17:1e:a5: bb:9b:fe:2b:de:0e:1c:38:8e:be:30:64:a3:a1:98:b0:ad:a9: bc:39:83:16:3a:6d:2b:f0:9a:32:8f:88:00:56:5b:36:a0:43: 2c:ef:73:9e:bf:20:68:83:5c:1f:fd:cf:79:1c:13:e4:2f:39: ce:28:cd:6e:46:85:d3:9a:f3:2c:4d:99:8a:9e:04:4e:e6:c0: f8:79:57:dd:71:0d:81:8a:66:08:ec:b6:e8:e2:0e:11:ce:ed: b2:9d:ed:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4osGMXl7YTzyNfPDr0sarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE3NTc0NDJlNDdmODI2MDhiZWY0MjNkYWMzNDRjMjUzNThkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHu4W0QQ8ftyBFSr0zQtjZDKQWuY s+TVTMknHdYgtB4h3zx5eGbTvXZ4x+aOUGKAhqEWVpi7oriqBglpsfH1IfefcDSg PNft5GG5S+YKLnd562Ioh2TBRu0xEOjuXiIVBV8lt+q0YTOq14uvH3aSryBTbfcg JcRwq5AWaFHmAkB8HGOqry602pSl3iWACay1dqLmYTAMVSvdq2hLHU1SqF+sePG4 MF5Eg3Qj/gwqlx2bwT5aPEGpLMW6gFB8zCIJGjsIqsvw89hC+5o1irsLaCFb8Ya1 UG4enFguoWCZ3HZ4v7w6XQlXDzP2+C+7NLl9Gw4Vs7wqU6Mp3OsdlGNPhwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAanV0QuR/gmCL70I9rDRMJTWNv5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2IxZTAx Mi0xMmQwLTQ0YTMtYTZhZi1iMjVhNjdiMmViNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvYjFlMDEy LTEyZDAtNDRhMy1hNmFmLWIyNWE2N2IyZWI0YS8xL0JxZFhSQzVILUNZSXZ2UWoy c05Fd2xOWTJfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAudmAMA0GCSqGSIb3DQEBCwUAA4IBAQAgvOAM qV4SL3RFsZZdtcLlcCz3U1JcBNqH2v7H+Yn7iET3SAir7YA0rFnPtPF22gFsnN3a AALKjvSG7IZTmW84vfIy2Q0vYI7GPEfCwRa8mVQM0ui4YH+8bsD5CgdWsL314SLF SQ9XkWcyHuuBBhawGNzx8M6SQuuvZrJuMeBaHNCOKZnK2mjLibVpNQgmhJdF/Wu7 u63ELkez9TBOa3EXHqW7m/4r3g4cOI6+MGSjoZiwram8OYMWOm0r8Joyj4gAVls2 oEMs73OevyBog1wf/c95HBPkLznOKM1uRoXTmvMsTZmKngRO5sD4eVfdcQ2BimYI 7Lbo4g4Rzu2yne0j -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:21 2026 by rpki-client