This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer File: bEme6h8J0BEiUo1BdU03xcqjS6c.cer (raw, json) Hash identifier: I8kx4ETgA8KFBmNFsAJLrDHngUXkBndekjEo3f8202M= Subject key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B60E2CFD15E30E455F79C44C7C613 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59942 IP: 195.245.215.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:60:e2:cf:d1:5e:30:e4:55:f7:9c:44:c7:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c499eea1f09d01122528d41754d37c5caa34ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:c8:b3:bb:14:a0:e4:c4:70:20:b6:10:cc: f3:46:95:e8:53:7b:64:73:cc:b9:25:9b:2f:11:82: 14:06:17:88:6e:e7:09:ce:93:07:e1:65:19:77:bb: bb:f1:aa:f1:24:5b:5b:dd:00:46:ca:bf:3a:02:09: 78:5a:73:0a:c3:95:c4:9d:64:b5:ab:64:a5:55:7d: 95:9a:89:1a:56:d4:83:06:f7:bd:35:f3:f0:c2:c7: 93:56:8c:b5:8e:89:63:a6:9a:ff:45:1c:64:8f:ab: 76:60:d9:25:d2:9f:17:c8:31:c8:c1:02:99:88:74: 08:27:38:26:49:30:e2:0d:ff:c9:85:f4:dc:97:89: 27:47:39:65:5f:44:ad:2e:a1:5d:24:5d:7a:b8:2e: dd:82:e7:52:b6:e9:5b:ad:4d:8d:2d:ba:2c:90:c6: 30:a3:e2:f4:e0:09:c2:1a:64:1f:d7:df:3b:90:62: 4f:20:7a:74:be:1a:63:ff:8f:36:32:59:83:fe:3d: 96:56:64:af:3f:98:6b:0a:d8:6f:9e:70:84:ab:0c: 8d:17:ab:e9:82:69:5c:45:a0:0f:35:2d:e4:a9:99: 7f:cb:f3:45:ec:66:30:72:73:f0:76:79:7a:c3:89: 7f:7a:13:5e:9a:8c:dc:55:e2:26:fd:3f:c5:1f:b4: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.215.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59942 Signature Algorithm: sha256WithRSAEncryption 22:aa:da:9f:a2:f9:7b:37:8c:57:47:cf:33:0e:6c:17:33:26: 9a:70:24:a3:a4:1b:da:c4:1c:1b:15:2e:59:5c:98:60:fe:35: 97:af:78:f4:6b:16:8b:75:97:7e:0c:e1:1c:cf:7c:62:9c:ac: 23:6b:96:7a:ac:c6:a7:cd:6c:90:54:ff:49:12:f3:59:07:d3: 8d:1c:97:d9:8c:3e:7a:68:4f:aa:87:a4:6e:ff:cd:b2:51:ed: 98:9c:70:72:d7:71:99:7b:3c:49:3f:f9:f3:df:b3:a2:66:af: 3b:4e:c9:4b:3a:5e:eb:4b:f8:f9:7f:ed:81:25:da:84:69:d6: 3d:8f:c0:03:27:4b:e4:54:82:51:bb:f6:3e:6b:2c:3a:9e:66: 08:5b:1b:9e:97:07:4d:71:53:1a:69:3c:31:22:84:70:65:8c: cb:59:41:a8:3f:77:65:64:f3:44:94:5b:f5:02:0a:47:92:1d: e2:fb:13:26:3c:63:cc:e4:bd:46:bc:56:a0:17:a8:7b:f8:53: 73:11:f5:52:fc:d2:7c:98:2d:5d:47:77:05:65:fc:12:f5:26: f0:b5:31:1c:a3:06:69:06:8b:29:8c:ff:9b:0a:18:8f:dc:24: a8:57:98:09:cd:e7:45:bc:34:ea:d4:2d:bc:33:4e:fd:a3:f6: 60:69:38:44 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9W2Diz9FeMORV95xEx8YTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzQ5OWVlYTFmMDlkMDExMjI1MjhkNDE3NTRkMzdjNWNhYTM0YmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+DIs7sUoOTEcCC2EMzzRpXoU3tk c8y5JZsvEYIUBheIbucJzpMH4WUZd7u78arxJFtb3QBGyr86Agl4WnMKw5XEnWS1 q2SlVX2VmokaVtSDBve9NfPwwseTVoy1joljppr/RRxkj6t2YNkl0p8XyDHIwQKZ iHQIJzgmSTDiDf/JhfTcl4knRzllX0StLqFdJF16uC7dgudStulbrU2NLboskMYw o+L04AnCGmQf1987kGJPIHp0vhpj/482MlmD/j2WVmSvP5hrCthvnnCEqwyNF6vp gmlcRaAPNS3kqZl/y/NF7GYwcnPwdnl6w4l/ehNemozcVeIm/T/FH7SBEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGxJnuofCdARIlKNQXVNN8XKo0unMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2JkZWIy Ny0zNDM0LTQyNTQtODI0MS03ZmRkZDIyMjAyYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYmRlYjI3 LTM0MzQtNDI1NC04MjQxLTdmZGRkMjIyMDJiZi8xL2JFbWU2aDhKMEJFaVVvMUJk VTAzeGNxalM2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw/XXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDqJjANBgkqhkiG9w0BAQsFAAOCAQEAIqran6L5ezeMV0fPMw5sFzMmmnAko6Qb 2sQcGxUuWVyYYP41l6949GsWi3WXfgzhHM98YpysI2uWeqzGp81skFT/SRLzWQfT jRyX2Yw+emhPqoekbv/NslHtmJxwctdxmXs8ST/589+zomavO07JSzpe60v4+X/t gSXahGnWPY/AAydL5FSCUbv2PmssOp5mCFsbnpcHTXFTGmk8MSKEcGWMy1lBqD93 ZWTzRJRb9QIKR5Id4vsTJjxjzOS9RrxWoBeoe/hTcxH1UvzSfJgtXUd3BWX8EvUm 8LUxHKMGaQaLKYz/mwoYj9wkqFeYCc3nRbw06tQtvDNO/aP2YGk4RA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:31 2026 by rpki-client