This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer (raw, json) Hash identifier: ILGqUPlLSqjD3BgVm2aD36H+GqZDLnqS+3DR8JL0bcw= Subject key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6E47B7A84B3E5F830A8132D439B00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39581 IP: 194.50.63.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e4:7b:7a:84:b3:e5:f8:30:a8:13:2d:43:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:da:6f:5b:43:0e:1a:f8:77:18:7e:5b:d0: 23:ab:e5:07:fa:9b:31:b8:4b:27:77:6b:ff:60:95: 2a:13:81:ba:9c:d2:92:f3:5d:3e:51:48:9a:33:f1: 1d:0c:85:a4:3e:bd:41:34:0a:57:25:6a:52:24:2d: d8:93:ad:aa:0e:07:fc:60:82:ac:0b:28:0f:10:79: eb:48:6f:17:e8:c7:6a:e4:26:4b:bb:9d:0c:d8:91: 80:52:f1:7d:95:ac:b3:6b:37:bb:b8:38:2f:f2:db: 4b:bf:8a:e7:3d:fe:64:50:f7:41:97:55:f8:de:1a: e8:da:75:36:b6:bb:28:18:bf:c7:53:1b:be:df:64: e5:67:78:28:1c:4c:8e:7d:9d:45:9c:e4:d0:19:20: be:0e:ab:ce:13:53:2e:99:95:bc:bd:cd:a3:a6:06: a7:07:09:dc:01:9e:d3:1f:e7:1a:9d:7d:b9:78:eb: 25:8f:5b:ab:bf:f2:87:03:1c:cb:06:1b:2b:bb:24: a7:4a:46:a2:ba:79:d2:80:bf:a9:aa:af:d2:a6:cd: a1:25:7e:99:74:84:55:e0:c1:f5:e3:5f:69:75:0a: 15:18:ce:81:bf:e8:cf:72:9c:f1:3f:4c:2f:8b:e3: 7f:85:21:b1:b2:c2:51:7d:a5:d9:fd:0f:4f:10:bc: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.63.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39581 Signature Algorithm: sha256WithRSAEncryption 69:6d:69:cf:2e:e3:d0:10:57:a4:c4:c1:1f:09:58:b0:12:59: 3a:22:ad:d6:7e:51:a0:2e:a6:45:64:30:0c:c7:27:24:4e:c6: c7:fc:d0:a5:38:74:c9:9b:a5:b2:61:37:63:a9:fa:1e:2b:9a: 9f:bf:ed:9a:8f:ff:4e:71:2a:b2:6d:66:2b:d7:6b:53:af:b0: a5:54:73:8b:05:19:ed:3f:b0:3a:db:44:4f:66:af:ad:e1:04: b2:42:23:73:e0:60:6a:87:5b:43:d1:98:d1:ce:80:85:10:1e: 5d:b2:9f:8b:d2:02:5b:bf:fb:88:df:4f:7e:1b:43:d9:9a:5e: c2:5f:61:3c:7f:59:00:17:23:3c:07:19:e6:46:5f:2a:75:bd: dc:f4:49:28:73:3c:96:97:89:63:98:13:f3:04:82:69:1d:ae: b6:95:33:b0:21:1c:9e:86:b3:14:aa:8b:11:d5:26:82:43:b6: 52:87:d4:75:b0:ab:a3:6d:6e:3c:fd:e5:f4:14:7e:0d:d2:79: 07:14:9f:8f:11:3a:8c:ab:e2:e1:8f:38:c4:32:1b:70:83:8f: 73:2a:a7:f2:54:ac:47:63:81:db:91:f9:b9:76:64:b0:c5:e4: 99:4f:cd:51:9e:10:e7:c3:04:95:4e:d9:fa:9a:6d:16:2e:89: 2e:aa:57:0b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+puR7eoSz5fgwqBMtQ5sAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzliM2UxOWZkMWY0MzBmNTE0NWQ2ZGI5MjQxYTUwNTdlZDk2Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRHab1tDDhr4dxh+W9Ajq+UH+psx uEsnd2v/YJUqE4G6nNKS810+UUiaM/EdDIWkPr1BNApXJWpSJC3Yk62qDgf8YIKs CygPEHnrSG8X6Mdq5CZLu50M2JGAUvF9layzaze7uDgv8ttLv4rnPf5kUPdBl1X4 3hro2nU2trsoGL/HUxu+32TlZ3goHEyOfZ1FnOTQGSC+DqvOE1MumZW8vc2jpgan BwncAZ7TH+canX25eOslj1urv/KHAxzLBhsruySnSkaiunnSgL+pqq/Sps2hJX6Z dIRV4MH1419pdQoVGM6Bv+jPcpzxP0wvi+N/hSGxssJRfaXZ/Q9PELwLXQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGybPhn9H0MPUUXW25JBpQV+2WyzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2VhNGIx Zi0zZDkwLTQwZjItOGY5OC0wYmFhNzc3OGFjZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZWE0YjFm LTNkOTAtNDBmMi04Zjk4LTBiYWE3Nzc4YWNlNy8xL2JKcy1HZjBmUXc5UlJkYmJr a0dsQlg3WmJMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjI/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCanTANBgkqhkiG9w0BAQsFAAOCAQEAaW1pzy7j0BBXpMTBHwlYsBJZOiKt1n5R oC6mRWQwDMcnJE7Gx/zQpTh0yZulsmE3Y6n6Hiuan7/tmo//TnEqsm1mK9drU6+w pVRziwUZ7T+wOttET2avreEEskIjc+BgaodbQ9GY0c6AhRAeXbKfi9ICW7/7iN9P fhtD2Zpewl9hPH9ZABcjPAcZ5kZfKnW93PRJKHM8lpeJY5gT8wSCaR2utpUzsCEc noazFKqLEdUmgkO2UofUdbCro21uPP3l9BR+DdJ5BxSfjxE6jKvi4Y84xDIbcIOP cyqn8lSsR2OB25H5uXZksMXkmU/NUZ4Q58MElU7Z+pptFi6JLqpXCw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:56 2026 by rpki-client