This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer File: By-BXnwWB9C9Ozmfupo1P-xUQxU.cer (raw, json) Hash identifier: sIOy+CwI543SjnG4dP3kezom2ScequbKOFhkBTVJ7C0= Subject key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3348083814716D029E86FFE82775F6D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 14:08:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 65.87.128.0/18 IP: 194.34.152.0/22 IP: 2a0c:ecc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:48:08:38:14:71:6d:02:9e:86:ff:e8:27:75:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 14:08:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=072f815e7c1607d0bd3b399fba9a353fec544315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:47:e4:0a:4b:75:0f:5a:b7:c4:9e:e9:32: 19:aa:f8:19:52:78:8c:66:f5:df:f8:fc:07:a9:8c: dd:46:45:37:98:8d:39:77:bc:10:3b:82:35:91:88: 04:4b:29:d4:14:cb:4d:a5:b7:c6:57:b2:48:a4:d9: 7d:46:63:a8:4e:47:bd:f7:fe:81:7c:19:6e:26:c0: 56:7d:b5:45:e5:3b:e6:15:54:e5:a7:a7:5f:bd:a5: 51:11:f7:ff:02:83:fc:c8:4f:a3:d9:22:51:5a:fd: ee:7c:52:5a:b2:4c:1f:8a:bf:e1:3a:d0:88:a6:5b: 0c:1b:7c:95:30:8e:44:be:03:e6:8a:51:12:3c:e6: cf:e8:85:d8:2a:22:df:a3:82:ff:4d:96:74:93:5a: 75:bf:24:e5:31:0b:8c:4e:84:00:51:dc:fc:1e:72: 64:c7:29:4c:5c:ab:01:2e:b4:7b:e6:40:97:e4:0a: 0d:4c:32:05:1c:c6:66:4a:92:9d:0a:ed:f5:96:57: de:16:e4:65:a4:ef:47:71:2c:16:e9:ef:80:f0:51: f2:a3:54:cd:d5:2f:75:0e:1c:0d:28:cb:ea:df:bb: 1f:27:37:ad:b7:37:31:de:ff:0d:ae:42:1c:42:39: 87:f8:b6:f4:ba:c9:89:47:0d:b9:c4:5f:75:84:84: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.87.128.0/18 194.34.152.0/22 IPv6: 2a0c:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption 55:c5:89:e6:86:9c:5e:3b:b2:c1:4c:c9:57:46:4f:b7:c9:97: 98:f2:32:a3:b3:73:3c:15:81:bf:34:3f:85:eb:5c:55:77:44: e4:9e:47:b0:ec:0c:ac:b4:49:d2:2c:c7:65:ee:8c:51:99:c3: ed:90:8b:27:2f:5a:eb:46:4f:07:ca:e8:92:c8:fe:f8:83:5b: e5:7d:3f:b0:c5:3c:28:8a:18:c5:7d:0f:5d:64:d2:e4:66:a7: 7a:6d:a2:99:3b:b3:6a:eb:a2:c2:af:e2:85:72:eb:dc:2e:6f: 1a:4b:43:9c:6e:20:5b:b9:e6:e4:07:70:23:32:3c:a3:9c:f2: 89:7f:79:c9:50:26:33:77:a5:8e:1d:8d:ed:9d:70:83:0e:b6: 36:d8:84:82:2e:97:b9:6b:ec:b6:47:13:cd:60:3a:d8:0b:4e: 73:e8:8c:cb:cd:d7:aa:3b:01:0b:ed:06:dd:a2:09:51:73:f7: 7f:86:8a:f1:57:53:79:93:c9:0e:df:ca:f5:86:78:c7:c1:16: 0e:3d:9b:db:37:93:46:bc:5d:c4:f3:4f:ca:96:39:5e:97:8d: df:7e:14:47:0b:da:6b:f9:74:03:89:95:91:c2:1c:81:1a:e7: f6:28:e7:b9:77:b5:92:09:c9:2e:37:69:84:de:9d:df:86:8d: b4:c2:89:25 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZwzSAg4FHFtAp6G/+gndfbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MTQwODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJmODE1ZTdjMTYwN2QwYmQzYjM5OWZiYTlhMzUzZmVjNTQ0MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1H5ApLdQ9at8Se6TIZqvgZUniM ZvXf+PwHqYzdRkU3mI05d7wQO4I1kYgESynUFMtNpbfGV7JIpNl9RmOoTke99/6B fBluJsBWfbVF5TvmFVTlp6dfvaVREff/AoP8yE+j2SJRWv3ufFJaskwfir/hOtCI plsMG3yVMI5EvgPmilESPObP6IXYKiLfo4L/TZZ0k1p1vyTlMQuMToQAUdz8HnJk xylMXKsBLrR75kCX5AoNTDIFHMZmSpKdCu31llfeFuRlpO9HcSwW6e+A8FHyo1TN 1S91DhwNKMvq37sfJzettzcx3v8NrkIcQjmH+Lb0usmJRw25xF91hIS5UQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFAcvgV58FgfQvTs5n7qaNT/sVEMVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2EwNzgz NC01ZmEzLTRiNDAtYmI5ZS03NWUzY2JiMDRiNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYTA3ODM0 LTVmYTMtNGI0MC1iYjllLTc1ZTNjYmIwNGI2MC8xL0J5LUJYbndXQjlDOU96bWZ1 cG8xUC14VVF4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGQVeAAwQCwiKYMA0EAgACMAcDBQMqDOzAMA0G CSqGSIb3DQEBCwUAA4IBAQBVxYnmhpxeO7LBTMlXRk+3yZeY8jKjs3M8FYG/ND+F 61xVd0Tknkew7AystEnSLMdl7oxRmcPtkIsnL1rrRk8HyuiSyP74g1vlfT+wxTwo ihjFfQ9dZNLkZqd6baKZO7Nq66LCr+KFcuvcLm8aS0OcbiBbuebkB3AjMjyjnPKJ f3nJUCYzd6WOHY3tnXCDDrY22ISCLpe5a+y2RxPNYDrYC05z6IzLzdeqOwEL7Qbd oglRc/d/horxV1N5k8kO38r1hnjHwRYOPZvbN5NGvF3E80/Kljlel43ffhRHC9pr +XQDiZWRwhyBGuf2KOe5d7WSCckuN2mE3p3fho20wokl -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:21 2026 by rpki-client