This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer File: bG3bcucmgpjBcUWDExu-SuTvCRY.cer (raw, json) Hash identifier: OiF7S/1hOnlfhHBMQreVmAwoO5QG/px680y6XRO3kiw= Subject key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB72C536B471C47E02AF3C51F3AFABD15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 11:44:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24637 IP: 45.152.132.0/23 IP: 80.244.208.0/20 IP: 158.94.164.0 -- 158.94.166.255 IP: 185.57.0.0/22 IP: 193.19.180.0/22 IP: 193.110.139.0/24 IP: 212.3.64.0/19 IP: 2a02:1798::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:2c:53:6b:47:1c:47:e0:2a:f3:c5:1f:3a:fa:bd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 11:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:78:46:a0:e2:a8:5c:31:69:67:01:c4:8f: 6a:b8:ca:21:12:6f:56:98:9e:10:d8:51:db:ae:21: c2:b1:21:65:81:0c:c7:53:ac:9f:4b:64:ef:c3:81: 02:8c:5d:38:47:de:c6:2d:80:c1:60:c9:4f:2d:7c: a7:8c:ed:1c:52:75:3a:73:75:09:51:f0:30:b8:c9: 52:d4:05:fa:68:a5:8d:38:cc:6a:89:b7:09:cd:6f: 6c:9b:31:a5:6e:61:c6:5d:4a:5f:ad:40:6a:35:84: 38:d2:ff:a1:bb:3b:9f:0f:f3:4a:11:8a:b9:a2:fa: 1f:2e:ed:e5:78:14:94:41:16:c6:6a:b2:15:c1:b9: 24:ee:9b:24:de:58:3c:63:45:ab:71:94:ff:22:29: 8e:3c:af:e4:b8:0f:fb:78:e1:19:33:34:f6:94:82: 2b:b0:cf:2c:da:18:6c:f9:7b:cb:78:71:58:63:f8: d0:88:7f:75:38:a6:7d:98:46:cf:ae:e6:76:75:71: 92:1a:e4:df:9b:01:20:ff:7e:82:19:f4:83:af:d1: c4:88:b8:3d:37:17:3f:7a:0d:48:27:7c:af:6f:26: 83:25:5f:4a:fa:42:f1:ec:f1:2c:8e:61:a0:65:38: e5:c2:b3:25:a4:f8:2a:4f:fb:c8:dd:ac:8a:62:d7: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.132.0/23 80.244.208.0/20 158.94.164.0-158.94.166.255 185.57.0.0/22 193.19.180.0/22 193.110.139.0/24 212.3.64.0/19 IPv6: 2a02:1798::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24637 Signature Algorithm: sha256WithRSAEncryption 3d:33:b8:e2:10:d0:f2:7d:45:11:92:70:e0:30:37:0f:33:bc: 24:0f:3f:dc:a6:4f:c5:89:d5:33:5a:46:a5:db:66:4b:23:3e: ae:6a:bc:e7:00:6c:d6:5f:de:a9:d4:d8:93:e3:39:56:6c:58: 43:a5:59:60:87:f8:f9:08:e5:e9:1b:7e:e3:55:21:55:9d:2b: 04:62:0b:bb:c6:f7:d4:bb:93:ab:5b:6d:0e:16:a9:3d:35:a7: 59:b7:bd:ca:6d:46:1c:e2:fb:25:bc:4f:a3:c3:e9:69:a2:6a: 7e:a5:21:ec:48:0a:8e:51:22:b4:f9:a3:52:49:f5:33:87:35: 61:3e:90:9c:2d:cd:21:f6:9b:ec:1d:a9:aa:53:15:18:30:d4: bb:be:b2:db:98:e1:67:7c:d0:7d:56:36:77:4c:b9:31:d3:48: db:b0:9e:7c:6f:51:0b:f3:63:b8:c6:f5:6e:75:5b:90:e2:f0: 0e:ca:4f:cd:97:ba:ca:af:bb:23:19:27:fe:80:a7:31:b2:ac: ed:44:f0:29:3a:81:ca:43:25:1b:16:b8:2f:5d:87:f4:bb:5a: fd:22:b0:78:78:c6:21:ba:8d:ad:e5:a3:9d:3e:74:59:c2:d9: a2:01:3d:e2:9f:27:8b:8a:14:9a:81:e4:bc:b4:77:b1:1d:15: 23:79:9b:c8 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZu3LFNrRxxH4CrzxR86+r0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMTE0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzZkZGI3MmU3MjY4Mjk4YzE3MTQ1ODMxMzFiYmU0YWU0ZWYwOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiB4RqDiqFwxaWcBxI9quMohEm9W mJ4Q2FHbriHCsSFlgQzHU6yfS2Tvw4ECjF04R97GLYDBYMlPLXynjO0cUnU6c3UJ UfAwuMlS1AX6aKWNOMxqibcJzW9smzGlbmHGXUpfrUBqNYQ40v+huzufD/NKEYq5 ovofLu3leBSUQRbGarIVwbkk7psk3lg8Y0WrcZT/IimOPK/kuA/7eOEZMzT2lIIr sM8s2hhs+XvLeHFYY/jQiH91OKZ9mEbPruZ2dXGSGuTfmwEg/36CGfSDr9HEiLg9 Nxc/eg1IJ3yvbyaDJV9K+kLx7PEsjmGgZTjlwrMlpPgqT/vI3ayKYtfIcwIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFGxt23LnJoKYwXFFgxMbvkrk7wkWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2RkNzc2 NC0xYTU4LTQ1ZTYtYWQ4My0zMmE2MDkxMmVmNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvZGQ3NzY0 LTFhNTgtNDVlNi1hZDgzLTMyYTYwOTEyZWY0MC8xL2JHM2JjdWNtZ3BqQmNVV0RF eHUtU3VUdkNSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyAwQBLZiEAwQEUPTQMAwDBAKeXqQDBACeXqYDBAK5 OQADBALBE7QDBADBbosDBAXUA0AwDQQCAAIwBwMFAyoCF5gwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICYD0wDQYJKoZIhvcNAQELBQADggEBAD0zuOIQ0PJ9RRGScOAw Nw8zvCQPP9ymT8WJ1TNaRqXbZksjPq5qvOcAbNZf3qnU2JPjOVZsWEOlWWCH+PkI 5ekbfuNVIVWdKwRiC7vG99S7k6tbbQ4WqT01p1m3vcptRhzi+yW8T6PD6Wmian6l IexICo5RIrT5o1JJ9TOHNWE+kJwtzSH2m+wdqapTFRgw1Lu+stuY4Wd80H1WNndM uTHTSNuwnnxvUQvzY7jG9W51W5Di8A7KT82XusqvuyMZJ/6ApzGyrO1E8Ck6gcpD JRsWuC9dh/S7Wv0isHh4xiG6ja3lo50+dFnC2aIBPeKfJ4uKFJqB5Ly0d7EdFSN5 m8g= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:04 2026 by rpki-client