This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer File: BwkPumY7Byu1TMfUnoigOAN0y24.cer (raw, json) Hash identifier: J/jp9n17JluBswEsZmrluzkZJb9691xvpp9QpqUFQpk= Subject key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC875B4CFF091102D5CD1003EC862DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197161 IP: 94.154.14.0/24 IP: 185.65.80.0/22 IP: 195.42.148.0/23 IP: 2a03:1a60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:75:b4:cf:f0:91:10:2d:5c:d1:00:3e:c8:62:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07090fba663b072bb54cc7d49e88a0380374cb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:ef:bd:37:bc:5d:76:c4:3b:31:1f:9a:b5: bb:70:c8:56:c6:09:9a:4c:5f:a3:df:3e:7b:c3:60: 40:c0:8c:4e:e4:5f:e0:e8:d3:c0:e2:49:0e:4e:67: 1c:b5:d6:d6:08:be:fa:d7:03:f2:2e:35:62:57:f0: 70:e2:a7:89:ab:8b:13:8e:db:2e:3c:85:6f:a6:97: 2d:f7:ad:5a:e4:61:87:ea:d7:e0:eb:a9:62:81:74: ac:cd:99:8c:59:1b:8e:71:8d:09:a3:bd:51:fa:30: 58:1e:5f:8a:76:7b:f5:8b:73:82:85:95:89:96:3e: 06:80:5d:a6:6d:8c:49:7c:f9:90:3a:e2:07:3f:3f: 05:ca:e4:43:43:f4:c2:42:af:ad:2c:2d:41:93:a9: 7c:bf:e6:62:b3:81:b8:3a:fc:82:2f:6f:a9:fe:a3: 5e:6b:3f:41:5b:2d:36:b8:e3:44:d3:a9:d7:05:a8: 02:8a:05:ab:b9:12:07:c8:98:8b:27:e9:df:4c:05: 86:bd:3b:30:f3:a9:43:24:4b:25:06:da:71:fc:b8: fe:ea:74:49:3f:cf:f9:f3:ec:eb:1e:4e:ca:3f:46: c3:c4:51:04:2f:a9:d4:57:f9:d7:fb:f1:28:a9:2a: 6e:24:cb:91:b7:9e:39:06:43:84:79:e8:74:3f:f3: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.14.0/24 185.65.80.0/22 195.42.148.0/23 IPv6: 2a03:1a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197161 Signature Algorithm: sha256WithRSAEncryption 2a:02:9c:16:1f:24:27:84:8c:2e:68:29:49:59:26:f6:be:fc: 1a:af:29:5c:68:58:4e:18:f8:0c:d2:9f:ca:d0:c3:73:7e:83: 65:23:cd:a2:11:19:83:f1:ee:af:77:0c:3e:06:9f:13:df:e9: 3b:64:cf:42:99:54:91:c5:97:79:89:e2:84:14:6a:21:15:a0: 36:04:05:43:05:b6:8e:ee:6a:08:75:f6:20:42:66:8c:41:f3: 96:aa:9c:0f:b3:90:72:25:0d:be:b0:59:26:3a:64:54:c7:24: 26:eb:63:1f:53:a0:06:86:b9:75:90:ee:25:4d:de:cb:a1:ea: 8a:72:5d:dd:77:ad:e6:26:f8:32:ee:a4:56:08:f4:45:c9:44: 65:86:31:f3:cf:90:29:b3:a1:e7:7d:27:aa:4c:68:f5:ca:35: fc:84:05:b6:4f:cf:3a:25:56:3a:60:06:dc:2e:b0:40:2b:1d: 67:ec:aa:da:18:04:e7:42:75:01:82:9b:b2:af:18:ed:b2:39: d9:27:86:12:24:ec:bb:86:1d:78:54:c9:53:90:23:1a:e2:bd: f1:19:e0:5f:0c:0f:d4:da:26:1f:a7:de:fc:e0:ec:69:73:67: ec:56:24:f0:ef:98:fa:3f:16:00:e6:85:43:c1:64:69:1f:25: 63:ad:16:12 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yHW0z/CREC1c0QA+yGLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA5MGZiYTY2M2IwNzJiYjU0Y2M3ZDQ5ZTg4YTAzODAzNzRjYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksHvvTe8XXbEOzEfmrW7cMhWxgma TF+j3z57w2BAwIxO5F/g6NPA4kkOTmcctdbWCL761wPyLjViV/Bw4qeJq4sTjtsu PIVvppct961a5GGH6tfg66ligXSszZmMWRuOcY0Jo71R+jBYHl+Kdnv1i3OChZWJ lj4GgF2mbYxJfPmQOuIHPz8FyuRDQ/TCQq+tLC1Bk6l8v+Zis4G4OvyCL2+p/qNe az9BWy02uONE06nXBagCigWruRIHyJiLJ+nfTAWGvTsw86lDJEslBtpx/Lj+6nRJ P8/58+zrHk7KP0bDxFEEL6nUV/nX+/EoqSpuJMuRt545BkOEeeh0P/Oo9wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFAcJD7pmOwcrtUzH1J6IoDgDdMtuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2EwNzM0 Mi0xNzQyLTQxYTEtOGJjNy0wMWEyOGE3NmNjZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTA3MzQy LTE3NDItNDFhMS04YmM3LTAxYTI4YTc2Y2NmNC8xL0J3a1B1bVk3Qnl1MVRNZlVu b2lnT0FOMHkyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAXpoOAwQCuUFQAwQBwyqUMA0EAgACMAcDBQAq AxpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCKTANBgkqhkiG9w0BAQsFAAOC AQEAKgKcFh8kJ4SMLmgpSVkm9r78Gq8pXGhYThj4DNKfytDDc36DZSPNohEZg/Hu r3cMPgafE9/pO2TPQplUkcWXeYnihBRqIRWgNgQFQwW2ju5qCHX2IEJmjEHzlqqc D7OQciUNvrBZJjpkVMckJutjH1OgBoa5dZDuJU3ey6HqinJd3Xet5ib4Mu6kVgj0 RclEZYYx88+QKbOh530nqkxo9co1/IQFtk/POiVWOmAG3C6wQCsdZ+yq2hgE50J1 AYKbsq8Y7bI52SeGEiTsu4YdeFTJU5AjGuK98RngXwwP1NomH6fe/ODsaXNn7FYk 8O+Y+j8WAOaFQ8FkaR8lY60WEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:12 2026 by rpki-client