This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer File: bJA8Gi6QbtjNLjYszGffAK3huCU.cer (raw, json) Hash identifier: Dz+qkNgIU6Ww1GcrLEJ9H7AMN3GC6Cu0GDZ22jr/v/I= Subject key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA38BAA8FC0E3EBE3086B4EC0ABB36F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42837 IP: 193.34.225.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8b:aa:8f:c0:e3:eb:e3:08:6b:4e:c0:ab:b3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:16:71:02:41:10:39:b8:2f:4c:91:97:b0: 99:bd:f6:47:e1:f0:92:39:5a:8a:19:40:b2:f3:d8: dc:12:dd:0f:ba:a9:b7:12:02:ac:cf:3a:06:d4:98: 63:cf:f4:d1:07:1e:10:76:a7:24:71:d9:f7:64:5a: e7:52:42:51:82:92:52:40:2a:75:b6:2c:6d:81:48: 44:fc:97:bf:ca:d5:95:14:50:60:a0:db:0d:19:13: 12:19:47:c9:50:34:6c:b4:0b:2b:64:ea:fd:d9:69: 98:45:ac:41:e9:9d:76:3e:7f:85:ac:cf:16:2c:b0: 3f:0d:af:94:a5:06:c4:b4:d3:8f:fc:bd:46:0b:9d: 46:ca:cb:bb:6b:36:5d:8f:83:e7:5b:6e:bb:27:d5: 0f:cd:d2:5f:fb:9d:34:3e:fd:d4:df:70:a5:5c:fb: c3:92:21:39:0e:63:dc:e0:ea:b0:2a:12:83:ce:64: 62:e0:65:1f:a8:2f:90:7d:ad:55:ab:c4:4a:70:73: 6a:0b:04:83:96:1d:3f:e8:4c:19:5c:d9:e8:ff:f0: 8e:43:25:2b:be:cb:6f:76:9a:a9:6a:55:3e:cd:a8: 1c:5a:ac:ac:1c:fd:06:5c:a2:ef:83:4f:a3:09:e4: cc:8b:6c:ce:0b:0b:eb:24:69:9a:21:ac:ef:97:b3: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.225.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42837 Signature Algorithm: sha256WithRSAEncryption 7a:84:04:be:7c:af:e2:14:cd:9d:fc:ee:c0:10:2b:0a:9c:aa: 2f:a1:2e:5b:53:79:4a:4f:e8:1d:86:b1:35:81:7c:b1:a9:db: bc:f1:0e:d0:c1:29:8f:55:a9:a7:a8:92:46:77:8f:2f:9d:8f: 67:ac:bc:c1:3f:30:28:e0:00:d9:6e:37:ef:96:2e:6f:4b:8e: 34:b0:9f:96:2c:3f:9a:4f:81:41:ef:10:16:88:8e:94:98:49: d1:ba:2a:75:8a:a1:b8:7a:de:48:7c:fd:81:62:e0:97:df:a1: ef:6c:92:72:e6:76:3d:66:28:f4:36:aa:c7:5a:c4:9b:73:ba: 4c:6f:f2:84:56:33:9b:0b:b8:1c:87:19:6a:40:63:7b:f2:ee: 00:5c:de:2c:a1:15:bf:2c:08:64:49:9b:a4:16:3f:a3:73:80: 57:99:ff:38:79:15:6e:f2:4a:f3:a9:04:29:a6:ca:dd:d3:0d: 8d:01:74:2b:83:3c:9c:0e:6c:72:87:09:4a:ea:87:c2:2a:a4: d9:26:33:52:1d:1f:06:26:c9:55:71:5f:2d:b4:f1:b1:5b:03: 50:86:9c:8f:55:08:ad:ba:cb:00:e1:88:e0:4e:0b:69:e5:b3: 00:07:3b:64:cf:3a:ce:6d:34:2a:b9:01:36:6b:cb:b2:0f:65: 53:fa:85:36 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o4uqj8Dj6+MIa07Aq7NvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzkwM2MxYTJlOTA2ZWQ4Y2QyZTM2MmNjYzY3ZGYwMGFkZTFiODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EoWcQJBEDm4L0yRl7CZvfZH4fCS OVqKGUCy89jcEt0Puqm3EgKszzoG1Jhjz/TRBx4Qdqckcdn3ZFrnUkJRgpJSQCp1 tixtgUhE/Je/ytWVFFBgoNsNGRMSGUfJUDRstAsrZOr92WmYRaxB6Z12Pn+FrM8W LLA/Da+UpQbEtNOP/L1GC51Gysu7azZdj4PnW267J9UPzdJf+500Pv3U33ClXPvD kiE5DmPc4OqwKhKDzmRi4GUfqC+Qfa1Vq8RKcHNqCwSDlh0/6EwZXNno//COQyUr vstvdpqpalU+zagcWqysHP0GXKLvg0+jCeTMi2zOCwvrJGmaIazvl7O77wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGyQPBoukG7YzS42LMxn3wCt4bglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzM3NWMw Mi1kNzdiLTRjMmItYmFlYS0wZTU5ZjJlY2IxNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMzc1YzAy LWQ3N2ItNGMyYi1iYWVhLTBlNTlmMmVjYjE3NS8xL2JKQThHaTZRYnRqTkxqWXN6 R2ZmQUszaHVDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSLhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnVTANBgkqhkiG9w0BAQsFAAOCAQEAeoQEvnyv4hTNnfzuwBArCpyqL6EuW1N5 Sk/oHYaxNYF8sanbvPEO0MEpj1Wpp6iSRnePL52PZ6y8wT8wKOAA2W4375Yub0uO NLCfliw/mk+BQe8QFoiOlJhJ0boqdYqhuHreSHz9gWLgl9+h72yScuZ2PWYo9Daq x1rEm3O6TG/yhFYzmwu4HIcZakBje/LuAFzeLKEVvywIZEmbpBY/o3OAV5n/OHkV bvJK86kEKabK3dMNjQF0K4M8nA5scocJSuqHwiqk2SYzUh0fBibJVXFfLbTxsVsD UIacj1UIrbrLAOGI4E4LaeWzAAc7ZM86zm00KrkBNmvLsg9lU/qFNg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:34 2026 by rpki-client