This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer File: bAqWFKxOEOei4qW8EvhiMGTInvk.cer (raw, json) Hash identifier: umRsZA7vTmjemgobv6gMs9GrTcfC2y4us9RCTjVwpIw= Subject key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12B395B720B6A0DF6A3ABED6D14A9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208144 IP: 45.157.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:95:b7:20:b6:a0:df:6a:3a:be:d6:d1:4a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:77:a6:14:33:ca:f8:f0:f4:40:68:fb:61: e5:da:85:a8:b0:2c:51:0e:f5:60:ce:a0:37:44:5a: 9b:ca:82:67:ef:a6:56:84:89:6d:69:89:f3:1e:f1: f1:fd:16:30:16:10:26:8b:e7:10:84:ff:02:bb:e4: b6:86:37:1f:f5:f8:17:3e:2f:81:0c:2a:5c:d5:07: c5:96:e0:1e:fd:2a:e2:95:de:c3:66:63:63:ae:cf: df:24:9c:e9:5c:78:c8:64:46:d6:94:3f:49:d2:97: 27:5a:33:96:8a:fe:66:bd:f3:49:6d:15:d8:1a:18: 1d:93:30:2f:b8:63:32:51:5a:af:ee:ee:43:f8:98: 57:f0:ee:09:f7:c5:e2:e3:8f:9a:f2:90:19:dc:84: 5b:6b:6a:97:af:90:e5:e0:7a:59:3e:40:10:5e:44: 7d:65:4e:52:e6:b9:2d:89:e2:26:71:95:d3:f9:f5: 80:be:48:4b:06:1d:58:a3:11:6c:14:68:b4:d7:7a: 82:29:89:0f:d7:d4:e3:3e:13:01:72:6b:19:9e:2e: c6:2f:9d:fb:18:42:52:36:87:32:d3:f5:47:21:c0: 48:99:91:b5:92:03:8e:9d:c6:e2:3b:c0:1b:02:6f: ea:ec:24:b4:4e:29:e2:92:67:f7:f5:d4:48:f2:e0: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208144 Signature Algorithm: sha256WithRSAEncryption 50:07:68:70:e7:8c:04:98:ef:ff:08:80:91:ee:c8:01:f5:ea: 39:d7:93:ac:6a:73:7d:61:19:47:64:9d:48:76:c8:cf:2a:5e: d1:de:33:4f:87:6f:ce:37:b7:3c:af:95:f9:04:3c:6d:7a:20: fb:02:e1:30:8d:00:da:0b:84:e8:72:46:c9:26:b5:0d:87:8e: 47:8e:56:02:d1:2c:6d:46:8d:bf:cd:22:ad:a7:ee:9b:42:94: 7c:8f:ac:e7:64:5d:ba:25:06:66:fe:9c:1f:8a:b8:a8:b3:87: 9b:0e:97:89:2f:06:14:ae:4e:51:d6:fb:f4:56:7b:31:00:50: a5:30:2a:ff:59:5f:e5:e5:9a:18:08:35:86:0d:59:06:98:ad: bc:51:0d:0e:eb:7c:49:a8:6f:b0:93:3c:95:17:61:d9:21:e9: cd:20:3a:6a:3d:c3:32:bd:d0:70:2c:8c:14:a6:71:b4:b9:84: 56:bb:3e:c6:08:19:62:89:b3:fb:45:f0:e8:af:0d:5c:ef:39: b5:d3:68:c4:b7:17:8c:aa:96:48:2e:87:5a:ad:13:9a:be:3a: a3:9c:49:0b:10:24:47:c2:f1:0f:e4:f6:92:af:76:3b:e6:89: 3d:50:1f:a3:ae:4e:78:ee:a8:cf:a5:42:75:c1:c6:44:14:c4: 19:5d:40:8c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8ErOVtyC2oN9qOr7W0UqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzBhOTYxNGFjNGUxMGU3YTJlMmE1YmMxMmY4NjIzMDY0Yzg5ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QJ3phQzyvjw9EBo+2Hl2oWosCxR DvVgzqA3RFqbyoJn76ZWhIltaYnzHvHx/RYwFhAmi+cQhP8Cu+S2hjcf9fgXPi+B DCpc1QfFluAe/Srild7DZmNjrs/fJJzpXHjIZEbWlD9J0pcnWjOWiv5mvfNJbRXY GhgdkzAvuGMyUVqv7u5D+JhX8O4J98Xi44+a8pAZ3IRba2qXr5Dl4HpZPkAQXkR9 ZU5S5rktieImcZXT+fWAvkhLBh1YoxFsFGi013qCKYkP19TjPhMBcmsZni7GL537 GEJSNocy0/VHIcBImZG1kgOOncbiO8AbAm/q7CS0Tinikmf39dRI8uB5GwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGwKlhSsThDnouKlvBL4YjBkyJ75MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzY0YTM5 Mi0zNzJlLTQ4YTYtYTBlMi1mNWFkMTY3ZDg0OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNjRhMzky LTM3MmUtNDhhNi1hMGUyLWY1YWQxNjdkODQ5NC8xL2JBcVdGS3hPRU9laTRxVzhF dmhpTUdUSW52ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLZ2YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMtEDANBgkqhkiG9w0BAQsFAAOCAQEAUAdocOeMBJjv/wiAke7IAfXqOdeTrGpz fWEZR2SdSHbIzype0d4zT4dvzje3PK+V+QQ8bXog+wLhMI0A2guE6HJGySa1DYeO R45WAtEsbUaNv80irafum0KUfI+s52RduiUGZv6cH4q4qLOHmw6XiS8GFK5OUdb7 9FZ7MQBQpTAq/1lf5eWaGAg1hg1ZBpitvFENDut8SahvsJM8lRdh2SHpzSA6aj3D Mr3QcCyMFKZxtLmEVrs+xggZYomz+0Xw6K8NXO85tdNoxLcXjKqWSC6HWq0Tmr46 o5xJCxAkR8LxD+T2kq92O+aJPVAfo65OeO6oz6VCdcHGRBTEGV1AjA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:56 2026 by rpki-client