This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer (raw, json) Hash identifier: Ik/ZeZlSRfMq3NlSFnfICWVXb3luwb6Lstg50W5dfbA= Subject key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8041FC8CBB28781B59A68FAA6046F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215299 IP: 91.209.117.0/24 IP: 188.190.114.0/23 IP: 2a14:3ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:04:1f:c8:cb:b2:87:81:b5:9a:68:fa:a6:04:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c95fdca367bce19e2f253b78f3608ff341428c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:23:7e:68:89:bd:c7:ab:d8:69:83:1a:73: 0b:d1:4c:60:56:2f:23:d8:18:e4:b9:f6:87:f3:b3: 78:5e:d3:5c:dd:d9:7a:83:c4:2f:27:b9:13:c6:9c: 54:84:da:10:9d:36:d1:03:ef:9b:52:23:40:fa:9a: 08:14:5a:b0:c3:14:9c:eb:66:c4:18:68:a9:bb:d8: da:59:14:87:0a:19:78:6c:25:39:7a:46:36:60:73: 05:d7:c6:0b:ea:d3:bc:2c:86:4a:01:ce:e3:df:87: e0:90:75:8c:1a:2b:cc:c8:ec:0d:26:12:36:8b:1d: 99:f5:50:68:bc:32:73:6e:01:91:2e:18:83:23:9f: f7:85:17:be:36:63:71:2b:3d:d8:35:6e:03:1d:d6: 0b:81:e2:2d:5e:a3:c7:85:ff:01:a5:b4:09:b0:fb: c5:30:ba:6d:7c:60:62:30:1c:ce:fe:a4:4d:30:9c: ef:5a:37:36:e9:d4:29:d2:4b:cf:66:fc:d2:fa:01: 5d:61:fb:45:ca:dc:ea:99:30:50:8d:bb:55:e1:f1: 60:09:53:6a:e0:e2:1e:b3:e4:51:77:27:14:59:c1: 7a:0c:9b:90:cd:65:4a:7d:51:be:dd:79:f8:23:08: 98:ff:a8:02:1d:ba:48:9a:60:ce:81:d3:f7:63:f3: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.117.0/24 188.190.114.0/23 IPv6: 2a14:3ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215299 Signature Algorithm: sha256WithRSAEncryption 3f:35:13:13:02:b9:f7:5f:a2:28:96:51:24:e0:51:dc:60:25: 47:2b:d7:8c:eb:cb:ef:c2:d3:ba:bc:6e:9f:7c:e8:b3:09:ee: 84:79:60:21:15:ac:a4:e6:a5:5d:8c:52:97:d5:25:51:0a:ac: 65:5c:02:59:43:d4:9a:e8:9b:81:56:f0:24:b8:1b:f4:fa:05: fe:c8:7e:ee:8d:6e:63:1a:bb:fe:8d:09:79:90:36:91:b5:72: f9:7c:af:09:c6:a1:65:47:50:f6:c4:cc:14:75:fd:f5:05:d5: 4a:79:98:2f:00:8d:58:7c:4c:5b:e6:78:81:3c:22:ea:90:b8: 84:22:41:21:8c:f7:4c:da:98:cd:8c:d3:ab:a0:8b:74:6e:d9: 5a:ed:f3:9e:f6:cb:32:0f:10:bc:b3:3d:51:32:91:79:2f:2f: f0:f1:34:da:2d:53:f3:3d:75:2a:83:3a:96:65:54:1e:6f:7b: 4f:16:32:a0:c2:07:7a:aa:e3:67:6e:1b:27:92:8f:5a:53:79: 2c:ba:86:bb:e7:40:4d:48:e2:ca:72:67:c3:db:01:96:45:af: ef:32:f0:be:66:5d:fc:85:ea:5f:b0:06:c1:1c:fd:31:31:1c: 77:c4:9a:1c:07:19:c2:24:6f:df:3b:54:77:a5:a3:06:80:c1: 2e:b3:52:23 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yAQfyMuyh4G1mmj6pgRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzk1ZmRjYTM2N2JjZTE5ZTJmMjUzYjc4ZjM2MDhmZjM0MTQyOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g0jfmiJvcer2GmDGnML0UxgVi8j 2BjkufaH87N4XtNc3dl6g8QvJ7kTxpxUhNoQnTbRA++bUiNA+poIFFqwwxSc62bE GGipu9jaWRSHChl4bCU5ekY2YHMF18YL6tO8LIZKAc7j34fgkHWMGivMyOwNJhI2 ix2Z9VBovDJzbgGRLhiDI5/3hRe+NmNxKz3YNW4DHdYLgeItXqPHhf8BpbQJsPvF MLptfGBiMBzO/qRNMJzvWjc26dQp0kvPZvzS+gFdYftFytzqmTBQjbtV4fFgCVNq 4OIes+RRdycUWcF6DJuQzWVKfVG+3Xn4IwiY/6gCHbpImmDOgdP3Y/Mx7QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGyV/co2e84Z4vJTt482CP80FCjJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2YwMWEw Mi01YTllLTQ0NDEtOWIzZC1kNWMxODg2MmQwMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZjAxYTAy LTVhOWUtNDQ0MS05YjNkLWQ1YzE4ODYyZDAyNi8xL2JKWDl5alo3emhuaThsTzNq ellJX3pRVUtNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9F1AwQBvL5yMA0EAgACMAcDBQMqFDrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJAzANBgkqhkiG9w0BAQsFAAOCAQEAPzUT EwK591+iKJZRJOBR3GAlRyvXjOvL78LTurxun3zoswnuhHlgIRWspOalXYxSl9Ul UQqsZVwCWUPUmuibgVbwJLgb9PoF/sh+7o1uYxq7/o0JeZA2kbVy+XyvCcahZUdQ 9sTMFHX99QXVSnmYLwCNWHxMW+Z4gTwi6pC4hCJBIYz3TNqYzYzTq6CLdG7ZWu3z nvbLMg8QvLM9UTKReS8v8PE02i1T8z11KoM6lmVUHm97TxYyoMIHeqrjZ24bJ5KP WlN5LLqGu+dATUjiynJnw9sBlkWv7zLwvmZd/IXqX7AGwRz9MTEcd8SaHAcZwiRv 3ztUd6WjBoDBLrNSIw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:31 2026 by rpki-client