This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer File: _BeVJZEZ7optEI6bXL4LuQwJjs4.cer (raw, json) Hash identifier: XtuCDot1U+9TQGBCr1PARaw5Hl2sxxZ28aFeOBoiBPs= Subject key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA51A4E53EF63C91952DFF7E35ADAA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.118.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1a:4e:53:ef:63:c9:19:52:df:f7:e3:5a:da:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:21:2f:dc:f1:b4:fb:b5:10:d3:12:1f:32: 21:58:4d:9d:75:ce:6a:ad:c1:80:33:1c:5f:1c:eb: 21:27:53:8f:f8:38:14:c8:c7:e2:3e:d9:41:41:79: 89:09:a1:f8:a8:8b:4d:52:77:35:2a:0a:55:46:60: 87:a0:54:f6:a5:17:32:4c:7c:e4:6f:00:b3:a4:b0: 95:da:20:ea:f0:ec:0c:80:f0:02:f7:96:a3:74:0b: bc:5e:81:76:4a:5e:26:78:87:41:b7:55:03:b5:d3: b7:6c:29:0b:8d:7e:c8:2e:a1:df:5b:07:35:d5:80: 9c:df:e2:6b:ff:0e:e6:f8:6f:b2:0d:c1:55:24:d6: bd:f6:05:ce:88:21:b2:34:4d:02:bd:b0:28:0c:c1: fd:38:c0:7f:38:bf:0f:91:c9:0f:6f:59:78:27:66: 4c:61:1c:49:ff:60:d8:16:75:26:fa:86:7c:10:6c: 2d:b9:60:55:27:49:69:98:c4:85:d7:d3:20:7d:e9: 71:37:39:45:45:e9:a6:bd:31:c2:fc:88:8f:2b:59: 8b:86:69:2d:7b:14:40:b1:7f:ad:64:a7:3d:18:5b: 87:31:91:61:f2:e0:18:15:4e:4c:39:b7:c5:cc:ae: 66:cd:80:49:5e:17:51:43:00:49:46:7a:3b:f0:36: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.124.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1f:43:91:e4:36:63:f5:db:de:b9:05:ff:b6:37:83:66:a9: da:d7:d5:79:82:33:26:a7:bc:db:2d:bf:d0:e5:cf:9c:1e:7d: e6:8a:7e:1f:c2:0b:39:27:dd:7c:6b:f6:c2:8d:f9:ef:85:27: de:5d:7f:77:fb:10:e8:52:b4:c7:40:32:cb:12:c2:50:4f:8b: 0d:22:68:f5:79:2e:8e:f9:cc:6d:81:91:ab:5f:9e:6d:00:c1: b2:3f:66:d0:83:6e:e3:ff:7d:e6:f8:36:0b:0a:7c:8b:6d:b9: a6:41:14:16:3f:ba:d8:4b:24:28:e3:74:b7:05:e7:af:c2:b0: 74:5f:ff:30:c3:cc:97:40:df:d1:a0:2f:22:f5:92:b3:d5:79: 64:bf:06:48:6f:f4:22:81:ff:a3:c1:5d:0d:d2:8c:4d:7a:fb: 14:3d:1b:26:af:94:c6:bb:26:a7:bf:2a:e7:69:c7:51:05:fd: d8:1e:d8:64:f2:b8:8d:b5:77:d9:6f:39:3d:eb:77:da:3a:1a: a1:37:56:20:b3:de:2a:1c:66:89:02:38:69:b8:6e:bb:cc:8f: 4e:67:2f:ad:04:fe:1b:5f:f2:34:79:d5:75:45:63:e4:67:70: 60:5f:8b:96:f4:c9:d1:84:b7:4e:c0:ab:9e:91:2b:c9:59:b1: 17:9a:2a:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pRpOU+9jyRlS3/fjWtqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzE3OTUyNTkxMTllZThhNmQxMDhlOWI1Y2JlMGJiOTBjMDk4ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0hL9zxtPu1ENMSHzIhWE2ddc5q rcGAMxxfHOshJ1OP+DgUyMfiPtlBQXmJCaH4qItNUnc1KgpVRmCHoFT2pRcyTHzk bwCzpLCV2iDq8OwMgPAC95ajdAu8XoF2Sl4meIdBt1UDtdO3bCkLjX7ILqHfWwc1 1YCc3+Jr/w7m+G+yDcFVJNa99gXOiCGyNE0CvbAoDMH9OMB/OL8PkckPb1l4J2ZM YRxJ/2DYFnUm+oZ8EGwtuWBVJ0lpmMSF19MgfelxNzlFRemmvTHC/IiPK1mLhmkt exRAsX+tZKc9GFuHMZFh8uAYFU5MObfFzK5mzYBJXhdRQwBJRno78DbfOQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPwXlSWRGe6KbRCOm1y+C7kMCY7OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzFhOGJj My1kNDJlLTRhYzMtYTk4Ni1jZmE2YTI1NDMyZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMWE4YmMz LWQ0MmUtNGFjMy1hOTg2LWNmYTZhMjU0MzJlOS8xL19CZVZKWkVaN29wdEVJNmJY TDRMdVF3SmpzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuXZ8MA0GCSqGSIb3DQEBCwUAA4IBAQCIH0OR 5DZj9dveuQX/tjeDZqna19V5gjMmp7zbLb/Q5c+cHn3min4fwgs5J918a/bCjfnv hSfeXX93+xDoUrTHQDLLEsJQT4sNImj1eS6O+cxtgZGrX55tAMGyP2bQg27j/33m +DYLCnyLbbmmQRQWP7rYSyQo43S3BeevwrB0X/8ww8yXQN/RoC8i9ZKz1XlkvwZI b/Qigf+jwV0N0oxNevsUPRsmr5TGuyanvyrnacdRBf3YHthk8riNtXfZbzk963fa OhqhN1Ygs94qHGaJAjhpuG67zI9OZy+tBP4bX/I0edV1RWPkZ3BgX4uW9MnRhLdO wKuekSvJWbEXmiqz -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:48 2026 by rpki-client